Timezone: »
Current SOTA adversarially robust models are mostly based on adversarial training (AT) and differ only by some regularizers either at inner maximization or outer minimization steps. Being repetitive in nature during the inner maximization step, they take a huge time to train. We propose a non-iterative method that enforces the following ideas during training. Attribution maps are more aligned to the actual object in the image for adversarially robust models compared to naturally trained models. Also, the allowed set of pixels to perturb an image (that changes model decision) should be restricted to the object pixels only, which reduces the attack strength by limiting the attack space. Our method achieves significant performance gains with a little extra effort (10-20%) over existing AT models and outperforms all other methods in terms of adversarial as well as natural accuracy. We have performed extensive experimentation with CIFAR-10, CIFAR-100, and TinyImageNet datasets and reported results against many popular strong adversarial attacks to prove the effectiveness of our method.
Author Information
Anindya Sarkar (Indian Institute of Technology Hyderabad)
Anirban Sarkar (Indian Institute of Technology Hyderabad)
Sowrya Gali (Indian Institute of Technology Hyderabad)
Vineeth N Balasubramanian (Indian Institute of Technology, Hyderabad)
More from the Same Authors
-
2021 : ORDER: Open World Object Detection on Road Scenes »
Deepak Singh · Shyam Nandan Rai · Joseph K J · Rohit Saluja · Vineeth N Balasubramanian · Chetan Arora · Anbumani Subramanian · C.V. Jawahar -
2022 : Counterfactual Generation Under Confounding »
Abbavaram Gowtham Reddy · Saloni Dash · Amit Sharma · Vineeth N Balasubramanian -
2022 Poster: How Powerful are K-hop Message Passing Graph Neural Networks »
Jiarui Feng · Yixin Chen · Fuhai Li · Anindya Sarkar · Muhan Zhang -
2021 Poster: Can we have it all? On the Trade-off between Spatial and Adversarial Robustness of Neural Networks »
Sandesh Kamath · Amit Deshpande · Subrahmanyam Kambhampati Venkata · Vineeth N Balasubramanian -
2020 Poster: Meta-Consolidation for Continual Learning »
Joseph K J · Vineeth N Balasubramanian