Abstract:Recently proposed adversarial training methods show the robustness to both adversarial and original examples and achieve state-of-the-art results in supervised and semi-supervised learning. All the existing adversarial training methods consider only how the worst perturbed examples (i.e., adversarial examples) could affect the model output. Despite their success, we argue that such setting may be in lack of generalization, since the output space (or label space) is apparently less informative.In this paper, we propose a novel method, called Manifold Adversarial Training (MAT). MAT manages to build an adversarial framework based on how the worst perturbation could affect the distributional manifold rather than the output space. Particularly, a latent data space with the Gaussian Mixture Model (GMM) will be first derived.On one hand, MAT tries to perturb the input samples in the way that would rough the distributional manifold the worst. On the other hand, the deep learning model is trained trying to promote in the latent space the manifold smoothness, measured by the variation of Gaussian mixtures (given the local perturbation around the data point). Importantly, since the latent space is more informative than the output space, the proposed MAT can learn better a robust and compact data representation, leading to further performance improvement. The proposed MAT is important in that it can be considered as a superset of one recently-proposed discriminative feature learning approach called center loss. We conducted a series of experiments in both supervised and semi-supervised learning on three benchmark data sets, showing that the proposed MAT can achieve remarkable performance, much better than those of the state-of-the-art adversarial approaches. We also present a series of visualization which could generate further understanding or explanation on adversarial examples.

Projecting to Manifolds Via Unsupervised Learning

Convergence of Projected Subgradient Method with Sparse or Low-Rank Constraints

Deep Manifold Computing and Visualization

On-Manifold Projected Gradient Descent

Wasserstein-based Projections with Applications to Inverse Problems

Approximately Harmonic Projection: Theoretical Analysis and an Algorithm

Manifold adversarial training for supervised and semi-supervised learning

Manifold Adversarial Learning

Learning on manifolds without manifold learning

Manifold-based learning and synthesis.

Unsupervised Learning of Image Manifolds by Semidefinite Programming

Unsupervised Anomaly Detection via Nonlinear Manifold Learning

Manifold Alignment Via Corresponding Projections.

Unsupervised Manifold Linearizing and Clustering

High-Dimensional Bayesian Optimization via Random Projection of Manifold Subspaces

On unsupervised projections and second order signals

Noisy Manifold Learning Using Neighborhood Smoothing Embedding

Manifold Fitting under Unbounded Noise

Overview of Manifold Learning

Stochastic neighbor projection on manifold for feature extraction

Unsupervised Domain Adaptation Via Discriminative Manifold Propagation.