Guiding the Comparison of Neural Network Local Robustness: an Empirical Study

Hao Bu,Meng Sun
DOI: https://doi.org/10.1007/978-3-031-44192-9_25
2023-01-01
Abstract:Local robustness refers to whether a deep neural network (DNN) can correctly classify an image under certain perturbations (e.g. Gaussian noise and the L8 perturbation). Since the discovery of adversarial examples, the local robustness of DNNs has received much attention, and researchers have proposed many formal verification techniques to measure it. One important application of these verification techniques is to compare the local robustness of different DNNs. However, these techniques contain some parameters that need to be manually set, and it is unclear whether the selection of parameters will affect the comparison results. In this paper, we conduct an empirical study to explore DNNs' local robustness towards perturbations. We find that two widely-used assumptions in existing papers are not always true in practice. Based on our experimental results, we discuss defects of existing local robustness comparison methods and provide some possible solutions.
What problem does this paper attempt to address?