研究目的
To improve the robustness of neural networks against different adversarial noise models that can remarkably deteriorate the performance of a neural network which otherwise perform really well on normal (unperturbed) test data.
研究成果
Neural networks trained with K-support norm based adversarial noise show significant improvement in robustness against adversarial noise models compared to state-of-the-art techniques. However, improvement in robustness may not necessarily improve generalization performance.
研究不足
The K-Support method is not very robust against uniform random noise, and training with noise models may not always improve accuracy on both perturbed and normal test sets.