Utilizing Class Separation Distance for the Evaluation of Corruption Robustness of Machine Learning Classifiers

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Siedel, Georg, Vock, Silvia, Morozov, Andrey, Voß, Stefan
Format: Preprint
Published: 2022
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866909991675363328
author Siedel, Georg
Vock, Silvia
Morozov, Andrey
Voß, Stefan
author_facet Siedel, Georg
Vock, Silvia
Morozov, Andrey
Voß, Stefan
contents Robustness is a fundamental pillar of Machine Learning (ML) classifiers, substantially determining their reliability. Methods for assessing classifier robustness are therefore essential. In this work, we address the challenge of evaluating corruption robustness in a way that allows comparability and interpretability on a given dataset. We propose a test data augmentation method that uses a robustness distance $ε$ derived from the datasets minimal class separation distance. The resulting MSCR (minimal separation corruption robustness) metric allows a dataset-specific comparison of different classifiers with respect to their corruption robustness. The MSCR value is interpretable, as it represents the classifiers avoidable loss of accuracy due to statistical corruptions. On 2D and image data, we show that the metric reflects different levels of classifier robustness. Furthermore, we observe unexpected optima in classifiers robust accuracy through training and testing classifiers with different levels of noise. While researchers have frequently reported on a significant tradeoff on accuracy when training robust models, we strengthen the view that a tradeoff between accuracy and corruption robustness is not inherent. Our results indicate that robustness training through simple data augmentation can already slightly improve accuracy.
format Preprint
id arxiv_https___arxiv_org_abs_2206_13405
institution arXiv
publishDate 2022
record_format arxiv
spellingShingle Utilizing Class Separation Distance for the Evaluation of Corruption Robustness of Machine Learning Classifiers
Siedel, Georg
Vock, Silvia
Morozov, Andrey
Voß, Stefan
Machine Learning
Artificial Intelligence
Robustness is a fundamental pillar of Machine Learning (ML) classifiers, substantially determining their reliability. Methods for assessing classifier robustness are therefore essential. In this work, we address the challenge of evaluating corruption robustness in a way that allows comparability and interpretability on a given dataset. We propose a test data augmentation method that uses a robustness distance $ε$ derived from the datasets minimal class separation distance. The resulting MSCR (minimal separation corruption robustness) metric allows a dataset-specific comparison of different classifiers with respect to their corruption robustness. The MSCR value is interpretable, as it represents the classifiers avoidable loss of accuracy due to statistical corruptions. On 2D and image data, we show that the metric reflects different levels of classifier robustness. Furthermore, we observe unexpected optima in classifiers robust accuracy through training and testing classifiers with different levels of noise. While researchers have frequently reported on a significant tradeoff on accuracy when training robust models, we strengthen the view that a tradeoff between accuracy and corruption robustness is not inherent. Our results indicate that robustness training through simple data augmentation can already slightly improve accuracy.
title Utilizing Class Separation Distance for the Evaluation of Corruption Robustness of Machine Learning Classifiers
topic Machine Learning
Artificial Intelligence
url https://arxiv.org/abs/2206.13405