Abstract:Conventional machine learning algorithms suffer the problem that the model trained on existing data fails to generalize well to the data sampled from other distributions. To tackle this issue, unsupervised domain adaptation (UDA) transfers the knowledge learned from a well-labeled source domain to a different but related target domain where labeled data is unavailable. The majority of existing UDA methods assume that data from the source domain and the target domain are available and complete during training. Thus, the divergence between the two domains can be formulated and minimized. In this paper, we consider a more practical yet challenging UDA setting where either the source domain data or the target domain data are unknown. Conventional UDA methods would fail this setting since the domain divergence is agnostic due to the absence of the source data or the target data. Technically, we investigate UDA from a novel view—adversarial attack—and tackle the divergence-agnostic adaptive learning problem in a unified framework. Specifically, we first report the motivation of our approach by investigating the inherent relationship between UDA and adversarial attacks. Then we elaborately design adversarial examples to attack the training model and harness these adversarial examples. We argue that the generalization ability of the model would be significantly improved if it can defend against our attack, so as to improve the performance on the target domain. Theoretically, we analyze the generalization bound for our method based on domain adaptation theories. Extensive experimental results on multiple UDA benchmarks under conventional, source-absent and target-absent UDA settings verify that our method is able to achieve a favorable performance compared with previous ones. Notably, this work extends the scope of both domain adaptation and adversarial attack, and expected to inspire more ideas in the community.

A Unified Framework for Adversarial Attacks on Multi-Source Domain Adaptation

Federated Domain Adaptation via Pseudo-label Refinement

Towards Efficient Data Free Blackbox Adversarial Attack

Divergence-agnostic Unsupervised Domain Adaptation by Adversarial Attacks

A Framework for Self-Supervised Federated Domain Adaptation

Adversarial for Good – Defending Training Data Privacy with Adversarial Attack Wisdom

Label-free Poisoning Attack Against Deep Unsupervised Domain Adaptation

Can We Trust the Unlabeled Target Data? Towards Backdoor Attack and Defense on Model Adaptation

Domain Adaptation without Model Transferring

Adversarial Domain Adaptation with Domain Mixup

Joint Attention-Driven Domain Fusion and Noise-Tolerant Learning for Multi-Source Domain Adaptation

Robust Unsupervised Domain Adaptation from A Corrupted Source

Unsupervised Domain Adaptation with Unified Joint Distribution Alignment

Adversarial Multiple Source Domain Adaptation.

A source free domain adaptation model based on adversarial learning for image classification

Multiple Source Domain Adaptation with Adversarial Training of Neural Networks

Synthetic Data with Global-Local Level for Adversarial-based Domain Adaptation

Revisiting the Domain Shift and Sample Uncertainty in Multi-source Active Domain Transfer

Source-free and Black-Box Domain Adaptation Via Distributionally Adversarial Training

Domain-Invariant Adversarial Learning for Unsupervised Domain Adaption.

Attention-based Adversarial Partial Domain Adaptation