Abstract:Training deep neural networks (DNNs) with altered data, known as adversarial training, is essential for improving their robustness. A significant challenge emerges as the robustness strengthened during training often diminishes during inference, resulting in drops in robust pronounced accuracy. Contemporary strategies either necessitate excessively large training data or risk compromising the natural accuracy of non-adversarial images. Our analysis identifies that the inherent vulnerability of DNNs to adversarial attacks stems from certain input space segments that are inadequately populated by training data, leading to decision-making voids with incorrect predictions. The minimum number of training samples required for successful adversarial training can be attained by maximizing the representativeness of the samples. In light of this, we put forth an advanced training data augmentation method anchored on a Generative Adversarial Network. The generated samples are evaluated by the image classifier during training and selected based on their confidence scores. Evaluations on public datasets, such as Tiny-ImageNet, MS COCO, and CIFAR-100, using various deep neural networks (DNNs), including Vision Transformer, MobileNet, and WideResNet, under recent attacks like DifAttack, SQBA, and AutoAttack, confirm that our method significantly enhances the adversarial robustness of DNN image classifiers. Our method outperforms state-of-the-art adversarial training methods by 35.66% on Tiny-ImageNet, 13.53% on MS COCO, and 13.06% on CIFAR-100.

End-to-end Adversarial Sample Generation for Data Augmentation

Training NLI Models Through Universal Adversarial Attack

Feature Augmentation for Adversarial Robustness

Generating Natural Language Adversarial Examples on a Large Scale with Generative Models

Improving the Transferability of Adversarial Samples by Path-Augmented Method

Boosting Model Resilience via Implicit Adversarial Data Augmentation

Adversarial Data Augmentation for Robust Speaker Verification

ATAL: Active Learning Using Adversarial Training for Data Augmentation

AdvAug: Robust Adversarial Augmentation for Neural Machine Translation

Automatic Data Augmentation by Learning the Deterministic Policy

Reinforced Counterfactual Data Augmentation for Dual Sentiment Classification.

AdaAugment: A Tuning-Free and Adaptive Approach to Enhance Data Augmentation

A Semantic, Syntactic, And Context-Aware Natural Language Adversarial Example Generator

Adversarial Augmentation Policy Search for Domain and Cross-Lingual Generalization in Reading Comprehension

A Deep Data Augmentation Framework Based on Generative Adversarial Networks

Improving Model Generalization by On-manifold Adversarial Augmentation in the Frequency Domain

Minimizing Adversarial Training Samples for Robust Image Classifiers: Analysis and Adversarial Example Generator Design

Improving Transferability of Adversarial Examples by Saliency Distribution and Data Augmentation

Adversarial Learning of General Transformations for Data Augmentation

A Patch-wise Adversarial Denoising Could Enhance the Robustness of Adversarial Training

Generating Adversarial Examples with Adversarial Networks