Current browse context:
stat
Change to browse by:
References & Citations
Computer Science > Machine Learning
Title: Training Provably Robust Models by Polyhedral Envelope Regularization
(Submitted on 10 Dec 2019 (v1), last revised 20 Sep 2021 (this version, v3))
Abstract: Training certifiable neural networks enables one to obtain models with robustness guarantees against adversarial attacks. In this work, we introduce a framework to bound the adversary-free region in the neighborhood of the input data by a polyhedral envelope, which yields finer-grained certified robustness. We further introduce polyhedral envelope regularization (PER) to encourage larger polyhedral envelopes and thus improve the provable robustness of the models. We demonstrate the flexibility and effectiveness of our framework on standard benchmarks; it applies to networks of different architectures and general activation functions. Compared with the state-of-the-art methods, PER has very little computational overhead and better robustness guarantees without over-regularizing the model.
Submission history
From: Chen Liu [view email][v1] Tue, 10 Dec 2019 16:05:20 GMT (5956kb,D)
[v2] Sat, 15 Feb 2020 20:46:25 GMT (5961kb,D)
[v3] Mon, 20 Sep 2021 12:12:03 GMT (5895kb,D)
Link back to: arXiv, form interface, contact.