1-Lipschitz Layers Compared: Memory, Speed, and Certifiable Robustness

Brau, Fabio
Co-primo
;
2024-01-01

Abstract

The robustness of neural networks against input perturbations with bounded magnitude represents a serious concern in the deployment of deep learning models in safety-critical systems. Recently, the scientific community has focused on enhancing certifiable robustness guarantees by crafting 's-Lipschit: neural networks that leverage Lipschitz bounded dense and convolutional layers. Different methods have been proposed in the literature to achieve this goal, however, comparing the performance of such methods is not straightforward, since different metrics can be relevant (e.g., training time, memory usage, accuracy, certifiable robustness) for different applications. Therefore, this work provides a thorough comparison between different methods, covering theoretical aspects such as computational complexity and memory requirements, as well as empirical measurements of time per epoch, required memory, accuracy and certifiable robust accuracy. The paper also provides some guidelines and recommendations to support the user in selecting the methods that work best depending on the available resources. We provide code at github.com/berndprach/1LipschitzLayersCompared.
2024
Inglese
2024 IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)
24574
24583
10
2024 IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)
Esperti anonimi
Giugno 2024
Seattle
scientifica
4 Contributo in Atti di Convegno (Proceeding)::4.1 Contributo in Atti di convegno
Prach, Bernd; Brau, Fabio; Buttazzo, Giorgio; Lampert, Christoph H.
273
4
4.1 Contributo in Atti di convegno
none
info:eu-repo/semantics/conferencePaper
   SEcurity and RIghts in the CyberSpace
   SERICS
File in questo prodotto:
Non ci sono file associati a questo prodotto.

I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.

Questionario e social

Condividi su:
Impostazioni cookie