Butterfly Effect: Bidirectional Control of Classification Performance by Small Additive Perturbation
arXiv:1711.09681
Abstract
This paper proposes a new algorithm for controlling classification results by generating a small additive perturbation without changing the classifier network. Our work is inspired by existing works generating adversarial perturbation that worsens classification performance. In contrast to the existing methods, our work aims to generate perturbations that can enhance overall classification performance. To solve this performance enhancement problem, we newly propose a perturbation generation network (PGN) influenced by the adversarial learning strategy. In our problem, the information in a large external dataset is summarized by a small additive perturbation, which helps to improve the performance of the classifier trained with the target dataset. In addition to this performance enhancement problem, we show that the proposed PGN can be adopted to solve the classical adversarial problem without utilizing the information on the target classifier. The mentioned characteristics of our method are verified through extensive experiments on publicly available visual datasets.
References in corpus (23)
- Adam: A Method for Stochastic Optimization
- Very Deep Convolutional Networks for Large-Scale Image Recognition
- Unsupervised Representation Learning with Deep Convolutional Generative Adversarial Networks
- Deep Residual Learning for Image Recognition
- Densely Connected Convolutional Networks
- Going Deeper with Convolutions
- Fully Convolutional Networks for Semantic Segmentation
- Towards Deep Neural Network Architectures Robust to Adversarial Examples
- Learning Deconvolution Network for Semantic Segmentation
- Keeping the Bad Guys Out: Protecting and Vaccinating Deep Learning with JPEG Compression
- Adversarial Transformation Networks: Learning to Generate Adversarial Examples
- NO Need to Worry about Adversarial Examples in Object Detection in Autonomous Vehicles
- Least Squares Generative Adversarial Networks
- Adversarial Examples, Uncertainty, and Transfer Testing Robustness in Gaussian Process Hybrid Deep Networks
- DeepFool: a simple and accurate method to fool deep neural networks
- Fast Feature Fool: A data independent approach to universal adversarial perturbations
- Adversarial Examples for Semantic Segmentation and Object Detection
- Universal adversarial perturbations
- Blocking Transferability of Adversarial Examples in Black-Box Learning Systems
- Adversarial Manipulation of Deep Representations
- Robustness of classifiers to universal perturbations: a geometric perspective
- SafetyNet: Detecting and Rejecting Adversarial Examples Robustly
- Adversarial Image Perturbation for Privacy Protection -- A Game Theory Perspective