• xmlui.mirage2.page-structure.header.title
    • français
    • English
  • Help
  • Login
  • Language 
    • Français
    • English
View Item 
  •   BIRD Home
  • LAMSADE (UMR CNRS 7243)
  • LAMSADE : Publications
  • View Item
  •   BIRD Home
  • LAMSADE (UMR CNRS 7243)
  • LAMSADE : Publications
  • View Item
JavaScript is disabled for your browser. Some features of this site may not work without it.

Browse

BIRDResearch centres & CollectionsBy Issue DateAuthorsTitlesTypeThis CollectionBy Issue DateAuthorsTitlesType

My Account

LoginRegister

Statistics

Most Popular ItemsStatistics by CountryMost Popular Authors
Thumbnail - No thumbnail

Theoretical evidence for adversarial robustness through randomization

Pinot, Rafaël; Meunier, Laurent; Araújo, Alexandre; Kashima, Hisashi; Yger, Florian; Gouy-Pailler, Cedric; Atif, Jamal (2019), Theoretical evidence for adversarial robustness through randomization, 33rd Conference on Neural Information Processing Systems (NIPS 2019), 2019-12, Vancouver, CANADA

Type
Communication / Conférence
External document link
https://hal.archives-ouvertes.fr/hal-02892188
Date
2019
Conference title
33rd Conference on Neural Information Processing Systems (NIPS 2019)
Conference date
2019-12
Conference city
Vancouver
Conference country
CANADA
Metadata
Show full item record
Author(s)
Pinot, Rafaël
Meunier, Laurent
Araújo, Alexandre
Kashima, Hisashi
Yger, Florian cc
Gouy-Pailler, Cedric cc
Atif, Jamal
Abstract (EN)
This paper investigates the theory of robustness against adversarial attacks. It focuses on the family of randomization techniques that consist in injecting noise in the network at inference time. These techniques have proven effective in many contexts, but lack theoretical arguments. We close this gap by presenting a theoretical analysis of these approaches, hence explaining why they perform well in practice. More precisely, we make two new contributions. The first one relates the randomization rate to robustness to adversarial attacks. This result applies for the general family of exponential distributions, and thus extends and unifies the previous approaches. The second contribution consists in devising a new upper bound on the adversarial generalization gap of randomized neural networks. We support our theoretical claims with a set of experiments.
Subjects / Keywords
Machine Learning

Related items

Showing items related by title and author.

  • Thumbnail
    Theoretical evidence for adversarial robustness through randomization 
    Pinot, Rafaël; Meunier, Laurent; Araújo, Alexandre; Kashima, Hisashi; Yger, Florian; Gouy-Pailler, Cedric; Atif, Jamal (2019) Communication / Conférence
  • Thumbnail
    A unified view on differential privacy and robustness to adversarial examples 
    Pinot, Rafaël; Yger, Florian; Gouy-Pailler, Cedric; Atif, Jamal (2019) Communication / Conférence
  • Thumbnail
    Graph-based Clustering under Differential Privacy 
    Pinot, Rafael; Morvan, Anne; Yger, Florian; Gouy-Pailler, Cédric; Atif, Jamal (2018) Communication / Conférence
  • Thumbnail
    Advocating for Multiple Defense Strategies against Adversarial Examples 
    Araujo, Alexandre; Meunier, Laurent; Pinot, Rafael; Negrevergne, Benjamin (2020) Communication / Conférence
  • Thumbnail
    Structured adaptive and random spinners for fast machine learning computations 
    Bojarski, Mariusz; Choromanska, Anna; Choromanski, Krzysztof; Fagan, Francois; Gouy-Pailler, Cédric; Morvan, Anne; Sakr, Nourhan; Sarlos, Tamas; Atif, Jamal (2017) Communication / Conférence
Dauphine PSL Bibliothèque logo
Place du Maréchal de Lattre de Tassigny 75775 Paris Cedex 16
Phone: 01 44 05 40 94
Contact
Dauphine PSL logoEQUIS logoCreative Commons logo