Single-step Adversarial Training for Semantic Segmentation

Daniel Wiens, Daniel Wiens, Barbara Hammer

2022

Abstract

Even though deep neural networks succeed on many different tasks including semantic segmentation, they lack on robustness against adversarial examples. To counteract this exploit, often adversarial training is used. However, it is known that adversarial training with weak adversarial attacks (e.g. using the Fast Gradient Sign Method) does not improve the robustness against stronger attacks. Recent research shows that it is possible to increase the robustness of such single-step methods by choosing an appropriate step size during the training. Finding such a step size, without increasing the computational effort of single-step adversarial training, is still an open challenge. In this work we address the computationally particularly demanding task of semantic segmentation and propose a new step size control algorithm that increases the robustness of single-step adversarial training. The proposed algorithm does not increase the computational effort of single-step adversarial training considerably and also simplifies training, because it is free of meta-parameter. We show that the robustness of our approach can compete with multi-step adversarial training on two popular benchmarks for semantic segmentation.

Paper Citation

in Harvard Style

Wiens D. and Hammer B. (2022). Single-step Adversarial Training for Semantic Segmentation. In Proceedings of the 11th International Conference on Pattern Recognition Applications and Methods - Volume 1: ICPRAM, ISBN 978-989-758-549-4, pages 179-187. DOI: 10.5220/0010788400003122

in Bibtex Style

@conference{icpram22,
author={Daniel Wiens and Barbara Hammer},
title={Single-step Adversarial Training for Semantic Segmentation},
booktitle={Proceedings of the 11th International Conference on Pattern Recognition Applications and Methods - Volume 1: ICPRAM,},
year={2022},
pages={179-187},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0010788400003122},
isbn={978-989-758-549-4},
}

in EndNote Style

TY - CONF

JO - Proceedings of the 11th International Conference on Pattern Recognition Applications and Methods - Volume 1: ICPRAM,
TI - Single-step Adversarial Training for Semantic Segmentation
SN - 978-989-758-549-4
AU - Wiens D.
AU - Hammer B.
PY - 2022
SP - 179
EP - 187
DO - 10.5220/0010788400003122