Riemannian data-dependent randomized smoothing for neural networks certification
| hal.structure.identifier | IRT SystemX | |
| dc.contributor.author | LABARBARIE, Pol | |
| hal.structure.identifier | IRT SystemX | |
| dc.contributor.author | HAJRI, Hatem | |
| hal.structure.identifier | Équipe Calcul scientifique et Modélisation | |
| dc.contributor.author | ARNAUDON, Marc | |
| dc.date.issued | 2022 | |
| dc.date.conference | 2022-07-17 | |
| dc.description.abstractEn | Certification of neural networks is an important and challenging problem that has been attracting the attention of the machine learning community since few years. In this paper, we focus on randomized smoothing (RS) which is considered as the state-of-the-art method to obtain certifiably robust neural networks. In particular, a new data-dependent RS technique called ANCER introduced recently can be used to certify ellipses with orthogonal axis near each input data of the neural network. In this work, we remark that ANCER is not invariant under rotation of input data and propose a new rotationally-invariant formulation of it which can certify ellipses without constraints on their axis. Our approach called Riemannian Data Dependant Randomized Smoothing (RDDRS) relies on information geometry techniques on the manifold of covariance matrices and can certify bigger regions than ANCER based on our experiments on the MNIST dataset. | |
| dc.language.iso | en | |
| dc.title.en | Riemannian data-dependent randomized smoothing for neural networks certification | |
| dc.type | Communication dans un congrès | |
| dc.subject.hal | Informatique [cs]/Apprentissage [cs.LG] | |
| bordeaux.conference.title | New Frontiers in Adversarial Machine Learning in theThirty-ninth International Conference on Machine Learning (ICML) | |
| bordeaux.country | US | |
| bordeaux.conference.city | Baltimore (MA) | |
| bordeaux.peerReviewed | oui | |
| hal.identifier | hal-04264005 | |
| hal.version | 1 | |
| hal.invited | non | |
| hal.proceedings | non | |
| hal.popular | non | |
| hal.audience | Internationale | |
| hal.origin.link | https://hal.archives-ouvertes.fr//hal-04264005v1 | |
| bordeaux.COinS | ctx_ver=Z39.88-2004&rft_val_fmt=info:ofi/fmt:kev:mtx:journal&rft.date=2022&rft.au=LABARBARIE,%20Pol&HAJRI,%20Hatem&ARNAUDON,%20Marc&rft.genre=unknown |
Files in this item
| Files | Size | Format | View |
|---|---|---|---|
|
There are no files associated with this item. |
|||