| PhD Seminar

Name of the Speaker: Thulasi T (EE15D410)
Guide: Dr.Sheetal Kalyani
Online meeting link: https://meet.google.com/rwx-otyt-obm
Date/Time: 20th October 2022, 11.00am
Title: The robust way to stack and bag: constructing adversarially robust ensemble networks using local Lipschitz constants.

Abstract

Recent research has established that the local Lipschitz constant of a neural network directly influences its adversarial robustness. We exploit this relationship to construct an ensemble of neural networks which not only improves the accuracy, but also provides increased adversarial robustness. The local Lipschitz constants for two different ensemble methods - bagging and stacking - are derived and the architectures best suited for ensuring adversarial robustness are deduced. The proposed ensemble architectures are tested on MNIST and CIFAR-10 datasets in the presence of white-box attacks, FGSM and PGD. The proposed architecture is found to be more robust than a) a single network and b) traditional ensemble methods.