Adversarial Learning with Margin-based Triplet Embedding Regularization
arXiv:1909.09481
Abstract
The Deep neural networks (DNNs) have achieved great success on a variety of computer vision tasks, however, they are highly vulnerable to adversarial attacks. To address this problem, we propose to improve the local smoothness of the representation space, by integrating a margin-based triplet embedding regularization term into the classification objective, so that the obtained model learns to resist adversarial examples. The regularization term consists of two steps optimizations which find potential perturbations and punish them by a large margin in an iterative way. Experimental results on MNIST, CASIA-WebFace, VGGFace2 and MS-Celeb-1M reveal that our approach increases the robustness of the network against both feature and label adversarial attacks in simple object classification and deep face recognition.
Accepted by ICCV 2019
References in corpus (15)
- Very Deep Convolutional Networks for Large-Scale Image Recognition
- Distilling the Knowledge in a Neural Network
- Ensemble Adversarial Training: Attacks and Defenses
- Deep Learning Face Representation by Joint Identification-Verification
- Deep Facial Expression Recognition: A Survey
- Learning Face Representation from Scratch
- Deep Face Recognition: A Survey
- Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methods
- Improving the Adversarial Robustness and Interpretability of Deep Neural Networks by Regularizing their Input Gradients
- On Detecting Adversarial Perturbations
- Understanding and Enhancing the Transferability of Adversarial Examples
- Towards Interpretable Deep Neural Networks by Leveraging Adversarial Examples
- Deep Defense: Training DNNs with Improved Adversarial Robustness
- Unravelling Robustness of Deep Learning based Face Recognition Against Adversarial Attacks
- Attacks on State-of-the-Art Face Recognition using Attentional Adversarial Attack Generative Network