Human vision is remarkably robust to noise and distortions, providing a key source of inspiration for improving adversarial robustness in artificial intelligence (AI) models. Unlike standard deep networks, which are vulnerable to adversarial attacks that exploit model weaknesses to induce misclassifications, biological visual systems maintain stability under challenging conditions. Motivated by this, our study investigates two key questions to enhance AI robustness. First, we propose that human neurodevelopmental-inspired training procedures, specifically blur training and blurry-to-clear training, can enhance the robustness of VOneNet—a primary visual cortex-based architecture—against adversarial attacks, outperforming traditional training methods. Second, we examine how VOneNet, trained with these brain-inspired training regimes, compares in robustness to standard convolutional neural network architectures. Experiments on MNIST, CIFAR10, and ImageNet100 show that VOneNet, trained with these methods, achieves significantly improved robustness compared to traditional models. While both strong blur training and weak blur training enhance robustness, blurry-to-clear training provides the most substantial improvement by effectively balancing spectral bias towards low-frequency details and reducing sensitivity to adversarial perturbations. Our work highlights the value of aligning AI model training with neurodevelopmental processes, offering a promising approach to improving AI adversarial robustness.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Neurodevelopmental-Inspired Training Enhances Adversarial Robustness of a Primary Visual Cortex-Based Model

  • Ehsan Ur Rahman Mohammed,
  • Elham Bagheri,
  • Apurva Narayan,
  • Yalda Mohsenzadeh

摘要

Human vision is remarkably robust to noise and distortions, providing a key source of inspiration for improving adversarial robustness in artificial intelligence (AI) models. Unlike standard deep networks, which are vulnerable to adversarial attacks that exploit model weaknesses to induce misclassifications, biological visual systems maintain stability under challenging conditions. Motivated by this, our study investigates two key questions to enhance AI robustness. First, we propose that human neurodevelopmental-inspired training procedures, specifically blur training and blurry-to-clear training, can enhance the robustness of VOneNet—a primary visual cortex-based architecture—against adversarial attacks, outperforming traditional training methods. Second, we examine how VOneNet, trained with these brain-inspired training regimes, compares in robustness to standard convolutional neural network architectures. Experiments on MNIST, CIFAR10, and ImageNet100 show that VOneNet, trained with these methods, achieves significantly improved robustness compared to traditional models. While both strong blur training and weak blur training enhance robustness, blurry-to-clear training provides the most substantial improvement by effectively balancing spectral bias towards low-frequency details and reducing sensitivity to adversarial perturbations. Our work highlights the value of aligning AI model training with neurodevelopmental processes, offering a promising approach to improving AI adversarial robustness.