On the Paradox of Certified Training — mentioned by dpaleka

Fri, 24 Sep 2021 23:02:57 GMT

A weird property of the described abstractions is that as you go tighter (interval -> zonotope -> polyhedra), the trained networks counterintuitively become less robust. Why does more precision in verification hurt training? A recent work not mentioned in the last chapter "Adversarial Training with Abstraction" is [1], which kind of explains this issue using the notions of continuity and sensitivity of the abstractions. [1]: https://arxiv.org/abs/2102.06700

Paper and discussion history. A mention is not an endorsement.

On the Paradox of Certified Training · HackerPapers discussions

On the Paradox of Certified Training — mentioned by dpaleka