Provably Robust Metric Learning

Lu Wang,Xuanqing Liu,Jinfeng Yi,Yuan Jiang,Cho-Jui Hsieh
2020-01-01
Abstract:Metric learning is an important family of algorithms for classification andsimilarity search, but the robustness of learned metrics against smalladversarial perturbations is less studied. In this paper, we show that existingmetric learning algorithms, which focus on boosting the clean accuracy, canresult in metrics that are less robust than the Euclidean distance. To overcomethis problem, we propose a novel metric learning algorithm to find aMahalanobis distance that is robust against adversarial perturbations, and therobustness of the resulting model is certifiable. Experimental results showthat the proposed metric learning algorithm improves both certified robusterrors and empirical robust errors (errors under adversarial attacks).Furthermore, unlike neural network defenses which usually encounter a trade-offbetween clean and robust errors, our method does not sacrifice clean errorscompared with previous metric learning methods. Our code is available athttps://github.com/wangwllu/provably_robust_metric_learning.
What problem does this paper attempt to address?