Abstract:Enabling a neural network to sequentially learn multiple tasks is of great significance for expanding the applicability of neural networks in real-world applications. However, artificial neural networks face the well-known problem of catastrophic forgetting. What is worse, the degradation of previously learned skills becomes more severe as the task sequence increases, known as the long-term catastrophic forgetting. It is due to two facts: first, as the model learns more tasks, the intersection of the low-error parameter subspace satisfying for these tasks becomes smaller or even does not exist; second, when the model learns a new task, the cumulative error keeps increasing as the model tries to protect the parameter configuration of previous tasks from interference. Inspired by the memory consolidation mechanism in mammalian brains with synaptic plasticity, we propose a confrontation mechanism in which Adversarial Neural Pruning and synaptic Consolidation (ANPyC) is used to overcome the long-term catastrophic forgetting issue. The neural pruning acts as long-term depression to prune task-irrelevant parameters, while the novel synaptic consolidation acts as long-term potentiation to strengthen task-relevant parameters. During the training, this confrontation achieves a balance in that only crucial parameters remain, and non-significant parameters are freed to learn subsequent tasks. ANPyC avoids forgetting important information and makes the model efficient to learn a large number of tasks. Specifically, the neural pruning iteratively relaxes the current task's parameter conditions to expand the common parameter subspace of the task; the synaptic consolidation strategy, which consists of a structure-aware parameter-importance measurement and an element-wise parameter updating strategy, decreases the cumulative error when learning new tasks. Our approach encourages the synapse to be sparse and polarized, which enables long-term learning and memory. ANPyC exhibits effectiveness and generalization on both image classification and generation tasks with multiple layer perceptron, convolutional neural networks, and generative adversarial networks, and variational autoencoder. The full source code is available at https://github.com/GeoX-Lab/ANPyC.

How Does the Memorization of Neural Networks Impact Adversarial Robust Models?

Exploring Memorization in Adversarial Training

Overcoming Long-Term Catastrophic Forgetting Through Adversarial Neural Pruning and Synaptic Consolidation

On the Over-Memorization During Natural, Robust and Catastrophic Overfitting

Dense Associative Memory is Robust to Adversarial Inputs

Memorization Weights for Instance Reweighting in Adversarial Training.

Feature Augmentation for Adversarial Robustness

Adversarial training via multi-guidance and historical memory enhancement

Improving Adversarial Robustness Requires Revisiting Misclassified Examples.

Adversarial Robust Memory-Based Continual Learner

Improve Adversarial Robustness Via Probabilistic Distributions Decoupled Network While Guaranteeing Clean Performance

The Effectiveness of Random Forgetting for Robust Generalization

Improving adversarial robustness of deep neural networks by using semantic information

The Pitfalls of Memorization: When Memorization Hurts Generalization

Nonideality-aware training makes memristive networks more robust to adversarial attacks

Adaptive Batch Normalization Networks for Adversarial Robustness

Improving Adversarial Robustness via Attention and Adversarial Logit Pairing

Minimizing Adversarial Training Samples for Robust Image Classifiers: Analysis and Adversarial Example Generator Design

Over-parameterization and Adversarial Robustness in Neural Networks: An Overview and Empirical Analysis

The Inherent Adversarial Robustness of Analog In-Memory Computing

ResMem: Learn what you can and memorize the rest