The network obtained through adversarial training exhibits a significant degree of generalization error. To this end, we propose a novel adversarial training method called feature orthogonalization and improved mixup from the perspective of feature constraints. This adversarial training method forces different categories of features to tend towards orthogonality during the training process, enabling better separation of features from different categories. By imposing improved mixup constraints on image features, it can better aggregate features from the same category. These two techniques do not require the introduction of additional parameters and hyperparameters. By integrating these two techniques into the adversarial training process, state-of-the-art (SOTA) effects can be achieved. Extensive experiments on CIFAR10 and SVHN datasets using Resnet18 and Vgg16 networks have demonstrated the effectiveness of our approach.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Enhancing Network Robustness Through Feature Normalization and Improved Data Augmentation

  • Canbin Zhou,
  • Jun Bao,
  • Chong-zhi Gao

摘要

The network obtained through adversarial training exhibits a significant degree of generalization error. To this end, we propose a novel adversarial training method called feature orthogonalization and improved mixup from the perspective of feature constraints. This adversarial training method forces different categories of features to tend towards orthogonality during the training process, enabling better separation of features from different categories. By imposing improved mixup constraints on image features, it can better aggregate features from the same category. These two techniques do not require the introduction of additional parameters and hyperparameters. By integrating these two techniques into the adversarial training process, state-of-the-art (SOTA) effects can be achieved. Extensive experiments on CIFAR10 and SVHN datasets using Resnet18 and Vgg16 networks have demonstrated the effectiveness of our approach.