Saved in:
| Main Authors: | , , , , , , |
|---|---|
| Format: | Preprint |
| Published: |
2023
|
| Subjects: | |
| Online Access: | https://arxiv.org/abs/2310.04780 |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866909135326412800 |
|---|---|
| author | Huang, Zhenglin Bao, Xiaoan Zhang, Na Zhang, Qingqi Tu, Xiaomei Wu, Biao Yang, Xi |
| author_facet | Huang, Zhenglin Bao, Xiaoan Zhang, Na Zhang, Qingqi Tu, Xiaomei Wu, Biao Yang, Xi |
| contents | Data augmentation has been proven effective for training high-accuracy convolutional neural network classifiers by preventing overfitting. However, building deep neural networks in real-world scenarios requires not only high accuracy on clean data but also robustness when data distributions shift. While prior methods have proposed that there is a trade-off between accuracy and robustness, we propose IPMix, a simple data augmentation approach to improve robustness without hurting clean accuracy. IPMix integrates three levels of data augmentation (image-level, patch-level, and pixel-level) into a coherent and label-preserving technique to increase the diversity of training data with limited computational overhead. To further improve the robustness, IPMix introduces structural complexity at different levels to generate more diverse images and adopts the random mixing method for multi-scale information fusion. Experiments demonstrate that IPMix outperforms state-of-the-art corruption robustness on CIFAR-C and ImageNet-C. In addition, we show that IPMix also significantly improves the other safety measures, including robustness to adversarial perturbations, calibration, prediction consistency, and anomaly detection, achieving state-of-the-art or comparable results on several benchmarks, including ImageNet-R, ImageNet-A, and ImageNet-O. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2310_04780 |
| institution | arXiv |
| publishDate | 2023 |
| record_format | arxiv |
| spellingShingle | IPMix: Label-Preserving Data Augmentation Method for Training Robust Classifiers Huang, Zhenglin Bao, Xiaoan Zhang, Na Zhang, Qingqi Tu, Xiaomei Wu, Biao Yang, Xi Computer Vision and Pattern Recognition Data augmentation has been proven effective for training high-accuracy convolutional neural network classifiers by preventing overfitting. However, building deep neural networks in real-world scenarios requires not only high accuracy on clean data but also robustness when data distributions shift. While prior methods have proposed that there is a trade-off between accuracy and robustness, we propose IPMix, a simple data augmentation approach to improve robustness without hurting clean accuracy. IPMix integrates three levels of data augmentation (image-level, patch-level, and pixel-level) into a coherent and label-preserving technique to increase the diversity of training data with limited computational overhead. To further improve the robustness, IPMix introduces structural complexity at different levels to generate more diverse images and adopts the random mixing method for multi-scale information fusion. Experiments demonstrate that IPMix outperforms state-of-the-art corruption robustness on CIFAR-C and ImageNet-C. In addition, we show that IPMix also significantly improves the other safety measures, including robustness to adversarial perturbations, calibration, prediction consistency, and anomaly detection, achieving state-of-the-art or comparable results on several benchmarks, including ImageNet-R, ImageNet-A, and ImageNet-O. |
| title | IPMix: Label-Preserving Data Augmentation Method for Training Robust Classifiers |
| topic | Computer Vision and Pattern Recognition |
| url | https://arxiv.org/abs/2310.04780 |