We gratefully acknowledge support from
the Simons Foundation and member institutions.
Full-text links:


Current browse context:


Change to browse by:

References & Citations


(what is this?)
CiteULike logo BibSonomy logo Mendeley logo del.icio.us logo Digg logo Reddit logo ScienceWISE logo

Statistics > Machine Learning

Title: Improving Neural Network Robustness via Persistency of Excitation

Abstract: Improving adversarial robustness of neural networks remains a major challenge. Fundamentally, training a neural network via gradient descent is a parameter estimation problem. In adaptive control, maintaining persistency of excitation (PoE) is integral to ensuring convergence of parameter estimates in dynamical systems to their true values. We show that parameter estimation with gradient descent can be modeled as a sampling of an adaptive linear time-varying continuous system. Leveraging this model, and with inspiration from Model-Reference Adaptive Control (MRAC), we prove a sufficient condition to constrain gradient descent updates to reference persistently excited trajectories converging to the true parameters. The sufficient condition is achieved when the learning rate is less than the inverse of the Lipschitz constant of the gradient of loss function. We provide an efficient technique for estimating the corresponding Lipschitz constant in practice using extreme value theory. Our experimental results in both standard and adversarial training illustrate that networks trained with the PoE-motivated learning rate schedule have similar clean accuracy but are significantly more robust to adversarial attacks than models trained using current state-of-the-art heuristics.
Subjects: Machine Learning (stat.ML); Computer Vision and Pattern Recognition (cs.CV); Machine Learning (cs.LG); Systems and Control (eess.SY)
Cite as: arXiv:2106.02078 [stat.ML]
  (or arXiv:2106.02078v5 [stat.ML] for this version)

Submission history

From: Kaustubh Sridhar [view email]
[v1] Thu, 3 Jun 2021 18:49:05 GMT (7543kb,D)
[v2] Mon, 7 Jun 2021 16:12:55 GMT (7543kb,D)
[v3] Fri, 11 Jun 2021 03:32:47 GMT (7543kb,D)
[v4] Thu, 14 Oct 2021 05:33:06 GMT (2624kb,D)
[v5] Fri, 15 Oct 2021 05:44:15 GMT (2623kb,D)

Link back to: arXiv, form interface, contact.