GReAT: A Graph Regularized Adversarial Training Method

Abstract

This paper presents GReAT (Graph Regularized Adversarial Training), a novel regularization method designed to enhance the robust classification performance of deep learning models. Adversarial examples, characterized by subtle perturbations that can mislead models, pose a significant challenge in machine learning. Although adversarial training is effective in defending against such attacks, it often overlooks the underlying data structure. In response, GReAT integrates graph-based regularization into the adversarial training process, leveraging the data’s inherent structure to enhance model robustness. By incorporating graph information during training, GReAT defends against adversarial attacks and improves generalization to unseen data. Extensive evaluations on benchmark datasets demonstrate that GReAT outperforms state-of-the-art methods in robustness, achieving notable improvements in classification accuracy. Specifically, compared to the second-best methods, GReAT achieves a performance increase of approximately 4.87% for CIFAR-10 against FGSM attack and 10.57% for SVHN against FGSM attack. Additionally, for CIFAR-10, GReAT demonstrates a performance increase of approximately 11.05% against PGD attack, and for SVHN, a 5.54% increase against PGD attack. This paper provides detailed insights into the proposed methodology, including numerical results and comparisons with existing approaches, highlighting the significant impact of GReAT in advancing the performance of deep learning models.

Keywords

• Adversarial examples
• adversarial learning
• adversarial training
• graph regularization
• image classification
• semi-supervised learning