Fix your downsampling ASAP! Be natively more robust via Aliasing and Spectral Artifact free Pooling

Fuente: arXiv
Salvato in:
Dettagli Bibliografici
Autori principali: Grabinski, Julia, Jung, Steffen, Keuper, Janis, Keuper, Margret
Natura: Preprint
Pubblicazione: 2023
Soggetti:
Accesso online:
Tags: Aggiungi Tag
Nessun Tag, puoi essere il primo ad aggiungerne!!
_version_ 1866915507080265728
author Grabinski, Julia
Jung, Steffen
Keuper, Janis
Keuper, Margret
author_facet Grabinski, Julia
Jung, Steffen
Keuper, Janis
Keuper, Margret
contents Convolutional Neural Networks (CNNs) are successful in various computer vision tasks. From an image and signal processing point of view, this success is counter-intuitive, as the inherent spatial pyramid design of most CNNs is apparently violating basic signal processing laws, i.e. the Sampling Theorem in their downsampling operations. This issue has been broadly neglected until recent work in the context of adversarial attacks and distribution shifts showed that there is a strong correlation between the vulnerability of CNNs and aliasing artifacts induced by bandlimit-violating downsampling. As a remedy, we propose an alias-free downsampling operation in the frequency domain, denoted Frequency Low Cut Pooling (FLC Pooling) which we further extend to Aliasing and Sinc Artifact-free Pooling (ASAP). ASAP is alias-free and removes further artifacts from sinc-interpolation. Our experimental evaluation on ImageNet-1k, ImageNet-C and CIFAR datasets on various CNN architectures demonstrates that networks using FLC Pooling and ASAP as downsampling methods learn more stable features as measured by their robustness against common corruptions and adversarial attacks, while maintaining a clean accuracy similar to the respective baseline models.
format Preprint
id arxiv_https___arxiv_org_abs_2307_09804
institution arXiv
publishDate 2023
record_format arxiv
spellingShingle Fix your downsampling ASAP! Be natively more robust via Aliasing and Spectral Artifact free Pooling
Grabinski, Julia
Jung, Steffen
Keuper, Janis
Keuper, Margret
Computer Vision and Pattern Recognition
Image and Video Processing
Convolutional Neural Networks (CNNs) are successful in various computer vision tasks. From an image and signal processing point of view, this success is counter-intuitive, as the inherent spatial pyramid design of most CNNs is apparently violating basic signal processing laws, i.e. the Sampling Theorem in their downsampling operations. This issue has been broadly neglected until recent work in the context of adversarial attacks and distribution shifts showed that there is a strong correlation between the vulnerability of CNNs and aliasing artifacts induced by bandlimit-violating downsampling. As a remedy, we propose an alias-free downsampling operation in the frequency domain, denoted Frequency Low Cut Pooling (FLC Pooling) which we further extend to Aliasing and Sinc Artifact-free Pooling (ASAP). ASAP is alias-free and removes further artifacts from sinc-interpolation. Our experimental evaluation on ImageNet-1k, ImageNet-C and CIFAR datasets on various CNN architectures demonstrates that networks using FLC Pooling and ASAP as downsampling methods learn more stable features as measured by their robustness against common corruptions and adversarial attacks, while maintaining a clean accuracy similar to the respective baseline models.
title Fix your downsampling ASAP! Be natively more robust via Aliasing and Spectral Artifact free Pooling
topic Computer Vision and Pattern Recognition
Image and Video Processing
url https://arxiv.org/abs/2307.09804