Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: Rothen, Franck, Klein, Samuel, Leigh, Matthew, Golling, Tobias
Format: Preprint
Veröffentlicht: 2024
Schlagworte:
Online-Zugang:https://arxiv.org/abs/2411.09296
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
_version_ 1866915411964985344
author Rothen, Franck
Klein, Samuel
Leigh, Matthew
Golling, Tobias
author_facet Rothen, Franck
Klein, Samuel
Leigh, Matthew
Golling, Tobias
contents Machine learning is becoming increasingly popular in the context of particle physics. Supervised learning, which uses labeled Monte Carlo (MC) simulations, remains one of the most widely used methods for discriminating signals beyond the Standard Model. However, this paper suggests that supervised models may depend excessively on artifacts and approximations from Monte Carlo simulations, potentially limiting their ability to generalize well to real data. This study aims to enhance the generalization properties of supervised models by reducing the sharpness of local minima. It reviews the application of four distinct white-box adversarial attacks in the context of classifying Higgs boson decay signals. The attacks are divided into weight-space attacks and feature-space attacks. To study and quantify the sharpness of different local minima, this paper presents two analysis methods: gradient ascent and reduced Hessian eigenvalue analysis. The results show that white-box adversarial attacks significantly improve generalization performance, albeit with increased computational complexity.
format Preprint
id arxiv_https___arxiv_org_abs_2411_09296
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle Enhancing generalization in high energy physics using white-box adversarial attacks
Rothen, Franck
Klein, Samuel
Leigh, Matthew
Golling, Tobias
High Energy Physics - Phenomenology
Machine Learning
Machine learning is becoming increasingly popular in the context of particle physics. Supervised learning, which uses labeled Monte Carlo (MC) simulations, remains one of the most widely used methods for discriminating signals beyond the Standard Model. However, this paper suggests that supervised models may depend excessively on artifacts and approximations from Monte Carlo simulations, potentially limiting their ability to generalize well to real data. This study aims to enhance the generalization properties of supervised models by reducing the sharpness of local minima. It reviews the application of four distinct white-box adversarial attacks in the context of classifying Higgs boson decay signals. The attacks are divided into weight-space attacks and feature-space attacks. To study and quantify the sharpness of different local minima, this paper presents two analysis methods: gradient ascent and reduced Hessian eigenvalue analysis. The results show that white-box adversarial attacks significantly improve generalization performance, albeit with increased computational complexity.
title Enhancing generalization in high energy physics using white-box adversarial attacks
topic High Energy Physics - Phenomenology
Machine Learning
url https://arxiv.org/abs/2411.09296