Stabilizing Adversarial Invariance Induction from Divergence Minimization Perspective

被引:0
|
作者
Iwasawa, Yusuke [1 ]
Akuzawa, Kei [1 ]
Matsuo, Yutaka [1 ]
机构
[1] Univ Tokyo, Tokyo, Japan
来源
PROCEEDINGS OF THE TWENTY-NINTH INTERNATIONAL JOINT CONFERENCE ON ARTIFICIAL INTELLIGENCE | 2020年
关键词
D O I
暂无
中图分类号
TP18 [人工智能理论];
学科分类号
081104 ; 0812 ; 0835 ; 1405 ;
摘要
Adversarial invariance induction (AII) is a generic and powerful framework for enforcing an invariance to nuisance attributes into neural network representations. However, its optimization is often unstable and little is known about its practical behavior. This paper presents an analysis of the reasons for the optimization difficulties and provides a better optimization procedure by rethinking AII from a divergence minimization perspective. Interestingly, this perspective indicates a cause of the optimization difficulties: it does not ensure proper divergence minimization, which is a requirement of the invariant representations. We then propose a simple variant of AII, called invariance induction by discriminator matching, which takes into account the divergence minimization interpretation of the invariant representations. Our method consistently achieves near-optimal invariance in toy datasets with various configurations in which the original AII is catastrophically unstable. Extensive experiments on four real-world datasets also support the superior performance of the proposed method, leading to improved user anonymization and domain generalization.
引用
收藏
页码:1955 / 1962
页数:8
相关论文
共 50 条
  • [21] Generating Transferable Adversarial Examples From the Perspective of Ensemble and Distribution
    Zhang, Huangyi
    Liu, Ximeng
    PROCEEDINGS OF 2024 3RD INTERNATIONAL CONFERENCE ON CYBER SECURITY, ARTIFICIAL INTELLIGENCE AND DIGITAL ECONOMY, CSAIDE 2024, 2024, : 173 - 177
  • [22] A Closer Look at Curriculum Adversarial Training: From an Online Perspective
    Shi, Lianghe
    Liu, Weiwei
    THIRTY-EIGHTH AAAI CONFERENCE ON ARTIFICIAL INTELLIGENCE, VOL 38 NO 13, 2024, : 14973 - 14981
  • [23] GOVERNANCE FROM THE BOTTOM UP: COMPLEXITY AND DIVERGENCE IN COMPARATIVE PERSPECTIVE
    Capano, Giliberto
    Rayner, Jeremy
    Zito, Anthony R.
    PUBLIC ADMINISTRATION, 2012, 90 (01) : 56 - 73
  • [24] Food waste minimization from a life-cycle perspective
    Schott, A. Bernstad Saraiva
    Andersson, T.
    JOURNAL OF ENVIRONMENTAL MANAGEMENT, 2015, 147 : 219 - 226
  • [25] Adversarial Biometric Recognition [A review on biometric system security from the adversarial machine-learning perspective]
    Biggio, Battista
    Fumera, Giorgio
    Russu, Paolo
    Didaci, Luca
    Roli, Fabio
    IEEE SIGNAL PROCESSING MAGAZINE, 2015, 32 (05) : 31 - 41
  • [26] Explaining Adversarial Robustness of Neural Networks from Clustering Effect Perspective
    Jin, Yulin
    Zhang, Xiaoyu
    Lou, Jian
    Ma, Xu
    Wang, Zilong
    Chen, Xiaofeng
    2023 IEEE/CVF INTERNATIONAL CONFERENCE ON COMPUTER VISION, ICCV, 2023, : 4499 - 4508
  • [27] Adversarial Robustness of Neural Networks from the Perspective of Lipschitz Calculus: A Survey
    Zuehlke, Monty-maximilian
    Kudenko, Daniel
    ACM COMPUTING SURVEYS, 2025, 57 (06)
  • [28] From Spatial to Spectral Domain, a New Perspective for Detecting Adversarial Examples
    Liu, Zhiyuan
    Cao, Chunjie
    Tao, Fangjian
    Li, Yifan
    Lin, Xiaoyu
    SECURITY AND COMMUNICATION NETWORKS, 2022, 2022
  • [29] Rethinking the optimization objective for transferable adversarial examples from a fuzzy perspective
    Yang, Xiangyuan
    Lin, Jie
    Zhang, Hanlin
    Zhao, Peng
    NEURAL NETWORKS, 2025, 184
  • [30] Generalization in Generative Adversarial Networks: A Novel Perspective from Privacy Protection
    Wu, Bingzhe
    Zhao, Shiwan
    Chen, ChaoChao
    Xu, Haoyang
    Wang, Li
    Zhang, Xiaolu
    Sun, Guangyu
    Zhou, Jun
    ADVANCES IN NEURAL INFORMATION PROCESSING SYSTEMS 32 (NIPS 2019), 2019, 32