New Interpretations of Normalization Methods in Deep Learning
This work provides theoretical insights into normalization techniques, which is incremental but useful for researchers in deep learning optimization and security.
The paper tackles the lack of mathematical tools to analyze normalization methods in deep learning by proposing a unified framework that interprets them as normalizing onto a sphere, and it finds that these methods can increase weight norms, potentially causing adversarial vulnerability.
In recent years, a variety of normalization methods have been proposed to help train neural networks, such as batch normalization (BN), layer normalization (LN), weight normalization (WN), group normalization (GN), etc. However, mathematical tools to analyze all these normalization methods are lacking. In this paper, we first propose a lemma to define some necessary tools. Then, we use these tools to make a deep analysis on popular normalization methods and obtain the following conclusions: 1) Most of the normalization methods can be interpreted in a unified framework, namely normalizing pre-activations or weights onto a sphere; 2) Since most of the existing normalization methods are scaling invariant, we can conduct optimization on a sphere with scaling symmetry removed, which can help stabilize the training of network; 3) We prove that training with these normalization methods can make the norm of weights increase, which could cause adversarial vulnerability as it amplifies the attack. Finally, a series of experiments are conducted to verify these claims.