Alignment and Adversarial Robustness: Are More Human-Like Models More Secure?

Fuente: arXiv
Enregistré dans:
Détails bibliographiques
Auteurs principaux: Hoak, Blaine, Li, Kunyang, McDaniel, Patrick
Format: Preprint
Publié: 2025
Sujets:
Accès en ligne:
Tags: Ajouter un tag
Pas de tags, Soyez le premier à ajouter un tag!
_version_ 1866913939513671680
author Hoak, Blaine
Li, Kunyang
McDaniel, Patrick
author_facet Hoak, Blaine
Li, Kunyang
McDaniel, Patrick
contents A small but growing body of work has shown that machine learning models which better align with human vision have also exhibited higher robustness to adversarial examples, raising the question: can human-like perception make models more secure? If true generally, such mechanisms would offer new avenues toward robustness. In this work, we conduct a large-scale empirical analysis to systematically investigate the relationship between representational alignment and adversarial robustness. We evaluate 114 models spanning diverse architectures and training paradigms, measuring their neural and behavioral alignment and engineering task performance across 105 benchmarks as well as their adversarial robustness via AutoAttack. Our findings reveal that while average alignment and robustness exhibit a weak overall correlation, specific alignment benchmarks serve as strong predictors of adversarial robustness, particularly those that measure selectivity toward texture or shape. These results suggest that different forms of alignment play distinct roles in model robustness, motivating further investigation into how alignment-driven approaches can be leveraged to build more secure and perceptually-grounded vision models.
format Preprint
id arxiv_https___arxiv_org_abs_2502_12377
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle Alignment and Adversarial Robustness: Are More Human-Like Models More Secure?
Hoak, Blaine
Li, Kunyang
McDaniel, Patrick
Computer Vision and Pattern Recognition
A small but growing body of work has shown that machine learning models which better align with human vision have also exhibited higher robustness to adversarial examples, raising the question: can human-like perception make models more secure? If true generally, such mechanisms would offer new avenues toward robustness. In this work, we conduct a large-scale empirical analysis to systematically investigate the relationship between representational alignment and adversarial robustness. We evaluate 114 models spanning diverse architectures and training paradigms, measuring their neural and behavioral alignment and engineering task performance across 105 benchmarks as well as their adversarial robustness via AutoAttack. Our findings reveal that while average alignment and robustness exhibit a weak overall correlation, specific alignment benchmarks serve as strong predictors of adversarial robustness, particularly those that measure selectivity toward texture or shape. These results suggest that different forms of alignment play distinct roles in model robustness, motivating further investigation into how alignment-driven approaches can be leveraged to build more secure and perceptually-grounded vision models.
title Alignment and Adversarial Robustness: Are More Human-Like Models More Secure?
topic Computer Vision and Pattern Recognition
url https://arxiv.org/abs/2502.12377