DeepAI AI Chat
Log In Sign Up

Increasing the robustness of DNNs against image corruptions by playing the Game of Noise

by   Evgenia Rusak, et al.

The human visual system is remarkably robust against a wide range of naturally occurring variations and corruptions like rain or snow. In contrast, the performance of modern image recognition models strongly degrades when evaluated on previously unseen corruptions. Here, we demonstrate that a simple but properly tuned training with additive Gaussian and Speckle noise generalizes surprisingly well to unseen corruptions, easily reaching the previous state of the art on the corruption benchmark ImageNet-C (with ResNet50) and on MNIST-C. We build on top of these strong baseline results and show that an adversarial training of the recognition model against uncorrelated worst-case noise distributions leads to an additional increase in performance. This regularization can be combined with previously proposed defense methods for further improvement.


page 3

page 12

page 27

page 29

page 30


TAPS: Connecting Certified and Adversarial Training

Training certifiably robust neural networks remains a notoriously hard p...

Curriculum Adversarial Training

Recently, deep learning has been applied to many security-sensitive appl...

Adversarial Examples Improve Image Recognition

Adversarial examples are commonly viewed as a threat to ConvNets. Here w...

Revisiting Adversarial Training for ImageNet: Architectures, Training and Generalization across Threat Models

While adversarial training has been extensively studied for ResNet archi...

SafeAMC: Adversarial training for robust modulation recognition models

In communication systems, there are many tasks, like modulation recognit...

Consistency Regularization for Adversarial Robustness

Adversarial training (AT) is currently one of the most successful method...

Revisiting Image Classifier Training for Improved Certified Robust Defense against Adversarial Patches

Certifiably robust defenses against adversarial patches for image classi...

Code Repositories


Trained model weights, training and evaluation code from the paper "Increasing the robustness of DNNs against image corruptions by playing the Game of Noise"

view repo