Search papers, labs, and topics across Lattice.
This paper introduces HadamardNet, a novel framework that utilizes Hadamard-coded output representations to enhance adversarial robustness in object detection and semantic segmentation tasks. By deriving a new decoding procedure for Hadamard codewords, the authors optimize class-wise probability outputs and exploit prediction inconsistencies for effective adversarial attack and disturbance detection. The results demonstrate that HadamardNet achieves state-of-the-art performance in perturbation detection while maintaining competitive accuracy on clean data, addressing significant limitations of conventional one-hot encodings.
HadamardNet not only enhances adversarial robustness in object detection and segmentation but also achieves state-of-the-art disturbance detection in a single pass.
Conventional one-hot encodings often yield poorly calibrated models, being overconfident under attack, and letting entropy-based detection algorithms fail. Previous image classification works have demonstrated that Hadamard-coded output representations can improve adversarial robustness. However, attempts to integrate Hadamard codes into semantic segmentation fall far behind state-of-the-art models in mean intersection-over-union performance. Regarding object detection, such output encodings have not yet been investigated at all. Further, no prior art addressed intrinsic codeword inconsistencies or actually exploited intrinsic codeword redundancy. Accordingly, we first derive a novel decoding procedure for Hadamard codewords towards optimal class-wise probabilities, solving the underlying optimization problem by using the projection onto the probability simplex. Second, our optimization delivers a measure of prediction inconsistency. Third, we are the first to show how to exploit these inconsistencies for adversarial attack and disturbance detection. Fourth, we introduce HadamardNet, a framework employing Hadamard codes as output representations for semantic segmentation and object detection models and tasks. We conduct a comprehensive evaluation both on disturbances and adversarial attacks, achieving state-of-the-art perturbation detection performance for both tasks in only a single detection pass, while delivering equivalent or close-by reference performance on clean data.
