Timezone: »

 
Poster
Preventing Gradient Attenuation in Lipschitz Constrained Convolutional Networks
Qiyang Li · Saminul Haque · Cem Anil · James Lucas · Roger Grosse · Joern-Henrik Jacobsen

Thu Dec 12 10:45 AM -- 12:45 PM (PST) @ East Exhibition Hall B + C #149
in Deep Learning -- CNN Architectures »

Lipschitz constraints under L2 norm on deep neural networks are useful for provable adversarial robustness bounds, stable training, and Wasserstein distance estimation. While heuristic approaches such as the gradient penalty have seen much practical success, it is challenging to achieve similar practical performance while provably enforcing a Lipschitz constraint. In principle, one can design Lipschitz constrained architectures using the composition property of Lipschitz functions, but Anil et al. recently identified a key obstacle to this approach: gradient norm attenuation. They showed how to circumvent this problem in the case of fully connected networks by designing each layer to be gradient norm preserving. We extend their approach to train scalable, expressive, provably Lipschitz convolutional networks. In particular, we present the Block Convolution Orthogonal Parameterization (BCOP), an expressive parameterization of orthogonal convolution operations. We show that even though the space of orthogonal convolutions is disconnected, the largest connected component of BCOP with 2n channels can represent arbitrary BCOP convolutions over n channels. Our BCOP parameterization allows us to train large convolutional networks with provable Lipschitz bounds. Empirically, we find that it is competitive with existing approaches to provable adversarial robustness and Wasserstein distance estimation.

Keywords: Deep Learning -> CNN Architectures · Algorithms -> Large Margin Methods; Applications -> Privacy, Anonymity, and Security; Deep Learning

Author Information

Qiyang Li (University of Toronto)
Saminul Haque (University of Toronto)
Cem Anil (University of Toronto; Vector Institute)

I'm a first year PhD student at the University of Toronto and Vector Institute, supervised by Roger Grosse and Geoffrey Hinton.

James Lucas (University of Toronto)
Roger Grosse (University of Toronto)
Joern-Henrik Jacobsen (Vector Institute)

More from the Same Authors