Abstract
It is well-known that deep neural networks (DNNs) are susceptible to adversarial attacks, which presents the most severe fragility of the deep learning system. Despite achieving impressive performance, most of the current state-of-the-art classifiers remain highly vulnerable to carefully crafted imperceptible, adversarial perturbations. Recent research attempts to understand neural network attack and defense have become increasingly urgent and important. While rapid progress has been made on this front, there is still an important theoretical gap in achieving guaranteed bounds on attack/defense models, leaving uncertainty in the quality and certified guarantees of these models. To this end, we systematically address this problem in this paper. More specifically, we formulate attack and defense in a generic setting where there exists a family of adversaries (i.e., attackers) for attacking a family of classifiers (i.e., defenders). We develop a novel class of f-divergences suitable for measuring divergence among multiple distributions. This equips us to study the interactions between attackers and defenders in a countervailing game where we formulate a joint risk on attack and defense schemes. This is followed by our key results on guaranteed upper and lower bounds on this risk that can provide a better understanding of the behaviors of those parties from the attack and defense perspectives, thereby having important implications to both attack and defense sides. Finally, benefited from our theory, we propose an empirical approach that bases on a global view to defend against adversarial attacks. The experimental results conducted on benchmark datasets show that the global view for attack/defense if exploited appropriately can help to improve adversarial robustness.
Original language | English |
---|---|
Title of host publication | Proceedings of the 25th International Conference on Artificial Intelligence and Statistics (AISTATS) 2022 |
Editors | Gustau Camps-Valls, Francisco J. R. Ruiz, Isabel Valera |
Place of Publication | London UK |
Publisher | Proceedings of Machine Learning Research (PMLR) |
Pages | 11438-11460 |
Number of pages | 23 |
Volume | 151 |
Publication status | Published - 2022 |
Event | International Conference on Artificial Intelligence and Statistics 2022 - Valencia, Spain Duration: 28 Mar 2022 → 30 Mar 2022 Conference number: 25th https://proceedings.mlr.press/v151/ (Proceedings) http://aistats.org/aistats2022/ (Website) |
Conference
Conference | International Conference on Artificial Intelligence and Statistics 2022 |
---|---|
Abbreviated title | AISTATS 2022 |
Country/Territory | Spain |
City | Valencia |
Period | 28/03/22 → 30/03/22 |
Internet address |
|