2021 IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR) 2021
DOI: 10.1109/cvpr46437.2021.00721
|View full text |Cite
|
Sign up to set email alerts
|

Simpler Certified Radius Maximization by Propagating Covariances

Abstract: One strategy for adversarially training a robust model is to maximize its certified radius -the neighborhood around a given training sample for which the model's prediction remains unchanged. The scheme typically involves analyzing a "smoothed" classifier where one estimates the prediction corresponding to Gaussian samples in the neighborhood of each sample in the minibatch, accomplished in practice by Monte Carlo sampling. In this paper, we investigate the hypothesis that this sampling bottleneck can potentia… Show more

Help me understand this report

Search citation statements

Order By: Relevance

Paper Sections

Select...
1

Citation Types

0
1
0

Year Published

2021
2021
2023
2023

Publication Types

Select...
2
1

Relationship

0
3

Authors

Journals

citations
Cited by 3 publications
(1 citation statement)
references
References 15 publications
(2 reference statements)
0
1
0
Order By: Relevance
“…The design of CNNs is affected by a large number of hyperparameters [6,7], which need to be fine-tuned for optimal performance [8]. Previously, studies have concentrated on refining architectures such as VGGNet [9] and ResNet [10], which are either manually crafted by experts or automatically generated through greedy induction methods [6,11]. Despite the remarkable performance of CNN architectures [12,13], specialists in machine learning and optimization propose that improved structures can be produced through automated methods.…”
Section: Introductionmentioning
confidence: 99%
“…The design of CNNs is affected by a large number of hyperparameters [6,7], which need to be fine-tuned for optimal performance [8]. Previously, studies have concentrated on refining architectures such as VGGNet [9] and ResNet [10], which are either manually crafted by experts or automatically generated through greedy induction methods [6,11]. Despite the remarkable performance of CNN architectures [12,13], specialists in machine learning and optimization propose that improved structures can be produced through automated methods.…”
Section: Introductionmentioning
confidence: 99%