Search papers, labs, and topics across Lattice.
This paper introduces a Certified Training approach that addresses the vulnerabilities of vision models to convolutional perturbations, such as motion blur, which can severely impact their performance in critical applications. By leveraging an efficient encoding of these perturbations, the authors demonstrate that their method achieves over 80% robust accuracy against motion blur on CIFAR10, significantly outperforming traditional Adversarial Training while maintaining similar standard accuracy. This advancement provides a formal safety guarantee, enhancing the reliability of vision models in real-world scenarios.
Certified Training outperforms Adversarial Training, achieving over 80% robust accuracy against motion blur while ensuring formal safety guarantees.
Vision models have been found to be susceptible to perturbations such as motion blur induced at runtime by a shaking camera. This impedes their deployment in critical applications since phenomena such as slightly blurred vision might lead to failures, for example an object detector missing objects. While methods such as data augmentation or Adversarial Training can improve empirical robustness, they lack formal safety guarantees, making it difficult to identify and mitigate hidden vulnerabilities. We introduce a novel Certified Training approach that leverages an efficient encoding of convolutional perturbations to train provably robust models. Our method significantly outperforms Adversarial Training, achieving, for example, over 80% robust accuracy against motion blur of reasonable intensity on CIFAR10 while maintaining comparable standard accuracy.
