HackerPapers

arXiv:1605.08254stat.ML

Robust Large Margin Deep Neural Networks

Jure Sokolic, Raja Giryes, Guillermo Sapiro, Miguel R. D. Rodrigues

Early discovery. Linked by one identifiable commenter. This paper is outside the main ranking; a mention is not an endorsement.

Abstract

The generalization error of deep neural networks via their classification margin is studied in this work. Our approach is based on the Jacobian matrix of a deep neural network and can be applied to networks with arbitrary non-linearities and pooling layers, and to networks with different architectures such as feed forward networks and residual networks. Our analysis leads to the conclusion that a bounded spectral norm of the network's Jacobian matrix in the neighbourhood of the training samples is crucial for a deep neural network of arbitrary depth and width to generalize well. This is a significant improvement over the current bounds in the literature, which imply that the generalization error grows with either the width or the depth of the network. Moreover, it shows that the recently proposed batch normalization and weight normalization re-parametrizations enjoy good generalization properties, and leads to a novel network regularizer based on the network's Jacobian matrix. The analysis is supported with experimental results on the MNIST, CIFAR-10, LaRED and ImageNet datasets.

arXiv comments
accepted to IEEE Transactions on Signal Processing
Journal reference
DOI
doi:10.1109/TSP.2017.2708039
Subjects
stat.MLMachine Learning (Statistics) cs.LGMachine Learning cs.NENeural and Evolutionary Computing

On Hacker News

Linked by 1 identifiable commenter in 1 comment across 1 thread, from Feb 2018 to Feb 2018.

Comments linking this paper, per year.

Discussed in comments1 thread

    • This kind of attack relies on a low margin DNN, see (1), a low spectral norm of the input-output jacobian matrix guarantees good generalization error. So a one pixel attack exploits a weak eigenvalue (small absolute value) of the jacobian matrix. So to create a one pixel attack…

      derivtView on HNParent context

Submitted to Hacker News

Connected through shared HN threads, not inferred similarity or a recommendation.