Score-Based Generative Classifiers
arXiv:2110.00473
Abstract
The tremendous success of generative models in recent years raises the question whether they can also be used to perform classification. Generative models have been used as adversarially robust classifiers on simple datasets such as MNIST, but this robustness has not been observed on more complex datasets like CIFAR-10. Additionally, on natural image datasets, previous results have suggested a trade-off between the likelihood of the data and classification accuracy. In this work, we investigate score-based generative models as classifiers for natural images. We show that these models not only obtain competitive likelihood values but simultaneously achieve state-of-the-art classification accuracy for generative classifiers on CIFAR-10. Nevertheless, we find that these models are only slightly, if at all, more robust than discriminative baseline models on out-of-distribution tasks based on common image corruptions. Similarly and contrary to prior results, we find that score-based are prone to worst-case distribution shifts in the form of adversarial perturbations. Our work highlights that score-based generative models are closing the gap in classification accuracy compared to standard discriminative models. While they do not yet deliver on the promise of adversarial and out-of-domain robustness, they provide a different approach to classification that warrants further research.
arXiv commentpublished at https://dgms-and-applications.github.io/2021/ project website https://zimmerrol.github.io/SBGC/
References in corpus (10)
- An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale
- Resnet in Resnet: Generalizing Residual Architectures
- Variational Diffusion Models
- Towards the first adversarially robust neural network model on MNIST
- Controversial stimuli: pitting neural networks against each other as models of human recognition
- Fixing Data Augmentation to Improve Adversarial Robustness
- Maximum Likelihood Training of Score-Based Diffusion Models
- Solving Linear Inverse Problems Using the Prior Implicit in a Denoiser
- Understanding the Limitations of Conditional Generative Models
- Defending Against Image Corruptions Through Adversarial Augmentations