BriefGPT.xyz
Jun, 2023
对抗训练应被视为非零和博弈
Adversarial Training Should Be Cast as a Non-Zero-Sum Game
HTML
PDF
Alexander Robey, Fabian Latorre, George J. Pappas, Hamed Hassani, Volkan Cevher
TL;DR
深度神经网络中的对抗训练存在过拟合和鲁棒性不足等问题,提出了基于双层博弈的非零和对抗训练框架,通过博弈中玩家优化不同的目标函数,取得了与标准对抗训练算法相当的鲁棒性,且不受过拟合的影响。
Abstract
One prominent approach toward resolving the adversarial vulnerability of
deep neural networks
is the two-player zero-sum paradigm of
adversarial training
, in which predictors are trained against adversarially-cho
→