Manifold Adversarial Learning
arXiv:1807.05832
Abstract
Recently proposed adversarial training methods show the robustness to both adversarial and original examples and achieve state-of-the-art results in supervised and semi-supervised learning. All the existing adversarial training methods consider only how the worst perturbed examples (i.e., adversarial examples) could affect the model output. Despite their success, we argue that such setting may be in lack of generalization, since the output space (or label space) is apparently less informative.In this paper, we propose a novel method, called Manifold Adversarial Training (MAT). MAT manages to build an adversarial framework based on how the worst perturbation could affect the distributional manifold rather than the output space. Particularly, a latent data space with the Gaussian Mixture Model (GMM) will be first derived.On one hand, MAT tries to perturb the input samples in the way that would rough the distributional manifold the worst. On the other hand, the deep learning model is trained trying to promote in the latent space the manifold smoothness, measured by the variation of Gaussian mixtures (given the local perturbation around the data point). Importantly, since the latent space is more informative than the output space, the proposed MAT can learn better a robust and compact data representation, leading to further performance improvement. The proposed MAT is important in that it can be considered as a superset of one recently-proposed discriminative feature learning approach called center loss. We conducted a series of experiments in both supervised and semi-supervised learning on three benchmark data sets, showing that the proposed MAT can achieve remarkable performance, much better than those of the state-of-the-art adversarial approaches. We also present a series of visualization which could generate further understanding or explanation on adversarial examples.
arXiv comment11 pages, 26 figures
References in corpus (11)
- Striving for Simplicity: The All Convolutional Net
- Temporal Ensembling for Semi-Supervised Learning
- Improved Techniques for Training GANs
- Distributional Smoothing with Virtual Adversarial Training
- Unsupervised and Semi-supervised Learning with Categorical Generative Adversarial Networks
- Certifying Some Distributional Robustness with Principled Adversarial Training
- Auxiliary Deep Generative Models
- Triple Generative Adversarial Nets
- Stacked What-Where Auto-encoders
- Virtual Adversarial Training: A Regularization Method for Supervised and Semi-Supervised Learning
- Adversarial Training Methods for Semi-Supervised Text Classification