Dual Risk Minimization: Towards Next-Level Robustness in Fine-tuning Zero-Shot Models

Fuente: arXiv
Guardado en:
Detalles Bibliográficos
Autores principales: Li, Kaican, Xie, Weiyan, Huang, Yongxiang, Deng, Didan, Hong, Lanqing, Li, Zhenguo, Silva, Ricardo, Zhang, Nevin L.
Formato: Preprint
Publicado: 2024
Materias:
Acceso en línea:
Etiquetas: Agregar Etiqueta
Sin Etiquetas, Sea el primero en etiquetar este registro!
_version_ 1866910720641204224
author Li, Kaican
Xie, Weiyan
Huang, Yongxiang
Deng, Didan
Hong, Lanqing
Li, Zhenguo
Silva, Ricardo
Zhang, Nevin L.
author_facet Li, Kaican
Xie, Weiyan
Huang, Yongxiang
Deng, Didan
Hong, Lanqing
Li, Zhenguo
Silva, Ricardo
Zhang, Nevin L.
contents Fine-tuning foundation models often compromises their robustness to distribution shifts. To remedy this, most robust fine-tuning methods aim to preserve the pre-trained features. However, not all pre-trained features are robust and those methods are largely indifferent to which ones to preserve. We propose dual risk minimization (DRM), which combines empirical risk minimization with worst-case risk minimization, to better preserve the core features of downstream tasks. In particular, we utilize core-feature descriptions generated by LLMs to induce core-based zero-shot predictions which then serve as proxies to estimate the worst-case risk. DRM balances two crucial aspects of model robustness: expected performance and worst-case performance, establishing a new state of the art on various real-world benchmarks. DRM significantly improves the out-of-distribution performance of CLIP ViT-L/14@336 on ImageNet (75.9 to 77.1), WILDS-iWildCam (47.1 to 51.8), and WILDS-FMoW (50.7 to 53.1); opening up new avenues for robust fine-tuning. Our code is available at https://github.com/vaynexie/DRM .
format Preprint
id arxiv_https___arxiv_org_abs_2411_19757
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle Dual Risk Minimization: Towards Next-Level Robustness in Fine-tuning Zero-Shot Models
Li, Kaican
Xie, Weiyan
Huang, Yongxiang
Deng, Didan
Hong, Lanqing
Li, Zhenguo
Silva, Ricardo
Zhang, Nevin L.
Machine Learning
Computer Vision and Pattern Recognition
Fine-tuning foundation models often compromises their robustness to distribution shifts. To remedy this, most robust fine-tuning methods aim to preserve the pre-trained features. However, not all pre-trained features are robust and those methods are largely indifferent to which ones to preserve. We propose dual risk minimization (DRM), which combines empirical risk minimization with worst-case risk minimization, to better preserve the core features of downstream tasks. In particular, we utilize core-feature descriptions generated by LLMs to induce core-based zero-shot predictions which then serve as proxies to estimate the worst-case risk. DRM balances two crucial aspects of model robustness: expected performance and worst-case performance, establishing a new state of the art on various real-world benchmarks. DRM significantly improves the out-of-distribution performance of CLIP ViT-L/14@336 on ImageNet (75.9 to 77.1), WILDS-iWildCam (47.1 to 51.8), and WILDS-FMoW (50.7 to 53.1); opening up new avenues for robust fine-tuning. Our code is available at https://github.com/vaynexie/DRM .
title Dual Risk Minimization: Towards Next-Level Robustness in Fine-tuning Zero-Shot Models
topic Machine Learning
Computer Vision and Pattern Recognition
url https://arxiv.org/abs/2411.19757