arXiv Machine Learning

Over-parameterization and Adversarial Robustness in Neural Networks: An Overview and Empirical Analysis

arXiv:2406. 10090v3 Announce Type: replace Abstract: Thanks to their extensive capacity, over-parameterized neural networks exhibit superior predictive capabilities and generalization.

OpenAI Blog
Aug 22, 2019

Testing robustness against unforeseen adversaries

We’ve developed a method to assess whether a neural network classifier can reliably defend against adversarial attacks not seen during training. Our method yields a new metric, UAR (Unforeseen Attack Robustness), which evaluates the robustness of a single model against an unanticipated attack, and highlights the need to measure performance across a more diverse range of unforeseen attacks.

arXiv AI
Sep 18

Perturbing the Phase: Analyzing Adversarial Robustness of Complex-Valued Neural Networks

The paper introduces Phase Attacks, a novel adversarial technique that targets the phase component of complex-valued inputs in complex-valued neural networks (CVNNs). It also extends traditional adversarial attacks to the complex domain and compares CVNNs with real-valued neural networks (RVNNs). The results show that CVNNs can be more robust in some cases, yet both architectures are highly vulnerable to phase perturbations, with Phase Attacks causing greater performance degradation than equivalent magnitude‑based attacks.

By Florian Eilers, Christof Duhme, Xiaoyi Jiang