Robustness-Aware Filter Pruning for Robust Neural Networks Against Adversarial Attacks
- Authors
- Lim, Hyuntak; Roh, Si-Dong; Park, Sangki; Chung, Ki-Seok
- Issue Date
- Nov-2021
- Publisher
- IEEE Computer Society
- Keywords
- Adversarial Attack; Adversarial Training; Deep Learning; Filter Pruning
- Citation
- IEEE International Workshop on Machine Learning for Signal Processing, MLSP, v.2021, no.October, pp.1 - 6
- Indexed
- SCOPUS
- Journal Title
- IEEE International Workshop on Machine Learning for Signal Processing, MLSP
- Volume
- 2021
- Number
- October
- Start Page
- 1
- End Page
- 6
- URI
- https://scholarworks.bwise.kr/hanyang/handle/2021.sw.hanyang/140383
- DOI
- 10.1109/MLSP52302.2021.9596121
- ISSN
- 2161-0363
- Abstract
- Today, neural networks show remarkable performance in various computer vision tasks, but they are vulnerable to adversarial attacks. By adversarial training, neural networks may improve robustness against adversarial attacks. However, it is a time-consuming and resource-intensive task. An earlier study analyzed adversarial attacks on the image features and proposed a robust dataset that would contain only features robust to the adversarial attack. By training with the robust dataset, neural networks can achieve a decent accuracy under adversarial attacks without carrying out time-consuming adversarial perturbation tasks. However, even if a network is trained with the robust dataset, it may still be vulnerable to adversarial attacks. In this paper, to overcome this limitation, we propose a new method called Robustness-Aware Filter Pruning (RFP). To the best of our knowledge, it is the first attempt to utilize a filter pruning method to enhance the robustness against the adversarial attack. In the proposed method, the filters that are involved with non-robust features are pruned. With the proposed method, 52.1 % accuracy against one of the most powerful adversarial attacks is achieved, which is 3.8% better than the previous robust dataset training while maintaining clean image test accuracy. Also, our method achieves the best performance when compared with the other filter pruning methods on robust dataset.
- Files in This Item
-
Go to Link
- Appears in
Collections - 서울 공과대학 > 서울 융합전자공학부 > 1. Journal Articles
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.