It begins with a boundary: A geometric view on probabilistically robust learning
This work addresses robustness issues in machine learning for practitioners, offering incremental improvements to existing methods.
The paper tackles the problem of deep neural networks' lack of robustness to adversarial examples by analyzing Probabilistically Robust Learning (PRL), proposing a geometric framework that identifies and rectifies pathologies in PRL, and proving solution existence and interpolation properties.
Although deep neural networks have achieved super-human performance on many classification tasks, they often exhibit a worrying lack of robustness towards adversarially generated examples. Thus, considerable effort has been invested into reformulating standard Risk Minimization (RM) into an adversarially robust framework. Recently, attention has shifted towards approaches which interpolate between the robustness offered by adversarial training and the higher clean accuracy and faster training times of RM. In this paper, we take a fresh and geometric view on one such method -- Probabilistically Robust Learning (PRL). We propose a mathematical framework for understanding PRL, which allows us to identify geometric pathologies in its original formulation and to introduce a family of probabilistic nonlocal perimeter functionals to rectify them. We prove existence of solutions to the original and modified problems using novel relaxation methods and also study properties, as well as local limits, of the introduced perimeters. We also clarify, through a suitable $Γ$-convergence analysis, the way in which the original and modified PRL models interpolate between risk minimization and adversarial training.