A study on the uncertainty of convolutional layers in deep neural networks

被引:29
作者
Shen, Haojing [1 ,3 ]
Chen, Sihong [1 ,3 ]
Wang, Ran [2 ,3 ,4 ]
机构
[1] Shenzhen Univ, Coll Comp Sci & Software Engn, Big Data Inst, Shenzhen 518060, Peoples R China
[2] Shenzhen Univ, Coll Math & Stat, Shenzhen 518060, Peoples R China
[3] Shenzhen Univ, Guangdong Key Lab Intelligent Informat Proc, Shenzhen 518060, Peoples R China
[4] Shenzhen Univ, Shenzhen Key Lab Adv Machine Learning & Applicat, Shenzhen 518060, Peoples R China
关键词
Uncertainty; Adversarial training; Convolution; LeNet; Min– Max property;
D O I
10.1007/s13042-021-01278-9
中图分类号
TP18 [人工智能理论];
学科分类号
081104 ; 0812 ; 0835 ; 1405 ;
摘要
This paper shows a Min-Max property existing in the connection weights of the convolutional layers in a neural network structure, i.e., the LeNet. Specifically, the Min-Max property means that, during the back propagation-based training for LeNet, the weights of the convolutional layers will become far away from their centers of intervals, i.e., decreasing to their minimum or increasing to their maximum. From the perspective of uncertainty, we demonstrate that the Min-Max property corresponds to minimizing the fuzziness of the model parameters through a simplified formulation of convolution. It is experimentally confirmed that the model with the Min-Max property has a stronger adversarial robustness, thus this property can be incorporated into the design of loss function. This paper points out a changing tendency of uncertainty in the convolutional layers of LeNet structure, and gives some insights to the interpretability of convolution.
引用
收藏
页码:1853 / 1865
页数:13
相关论文
共 57 条
[1]  
Abbasi M., 2017, INT C LEARN REPR ICL, P1
[2]  
Athalye A, 2018, PR MACH LEARN RES, V80
[3]   Unsupervised feature selection using a neuro-fuzzy approach [J].
Basak, J ;
De, RK ;
Pal, SK .
PATTERN RECOGNITION LETTERS, 1998, 19 (11) :997-1006
[4]  
Bradshaw J., 2017, ARXIV170702476
[5]  
Brown Tom B, 2017, 31 C NEUR INF PROC S
[6]   Towards Evaluating the Robustness of Neural Networks [J].
Carlini, Nicholas ;
Wagner, David .
2017 IEEE SYMPOSIUM ON SECURITY AND PRIVACY (SP), 2017, :39-57
[7]   Improving Adversarial Robustness via Guided Complement Entropy [J].
Chen, Hao-Yun ;
Liang, Jhao-Hong ;
Chang, Shih-Chieh ;
Pan, Jia-Yu ;
Chen, Yu-Ting ;
Wei, Wei ;
Juan, Da-Cheng .
2019 IEEE/CVF INTERNATIONAL CONFERENCE ON COMPUTER VISION (ICCV 2019), 2019, :4880-4888
[8]  
Chen PY, 2017, PROCEEDINGS OF THE 10TH ACM WORKSHOP ON ARTIFICIAL INTELLIGENCE AND SECURITY, AISEC 2017, P15, DOI 10.1145/3128572.3140448
[9]  
Clevert D.-A., 2015, C TRACK P
[10]  
Deng L., 2012, IEEE signal processing magazine, V29, P141, DOI DOI 10.1109/MSP.2012.2211477