Improving neural network’s robustness on tabular data with D-layers
-
Published:2023-08-31
Issue:1
Volume:38
Page:173-205
-
ISSN:1384-5810
-
Container-title:Data Mining and Knowledge Discovery
-
language:en
-
Short-container-title:Data Min Knowl Disc
Author:
Xia Haiyang,Zaidi Nayyar,Zhang Yishuo,Li Gang
Abstract
AbstractArtificial neural networks ($${{{\texttt {ANN}}}}$$
ANN
) are widely used machine learning models. Their widespread use has attracted a lot of interest in their robustness. Many studies show that ’s performance can be highly vulnerable to input manipulation such as adversarial attacks and covariate drift. Therefore, various techniques that focus on improving $${{{\texttt {ANN}}}}$$
ANN
’s robustness have been proposed in the last few years. However, most of these works have mostly focused on image data. In this paper, we investigate the role of discretization in improving $${{{\texttt {ANN}}}}$$
ANN
’s robustness on tabular datasets. Two custom $${{{\texttt {ANN}}}}$$
ANN
layers– and (collectively called ) are proposed. The two layers integrate discretization during the training phase to improve $${{{\texttt {ANN}}}}$$
ANN
’s ability to defend against adversarial attacks. Additionally, integrates dynamic discretization during testing phase as well, to provide a unified strategy to handle adversarial attacks and covariate drift. The experimental results on 24 publicly available datasets show that our proposed add much-needed robustness to $${{{\texttt {ANN}}}}$$
ANN
for tabular datasets.
Funder
Australian Government Research Training Program (AGRTP) Scholarship
Deakin University
Publisher
Springer Science and Business Media LLC
Subject
Computer Networks and Communications,Computer Science Applications,Information Systems
Reference35 articles.
1. Akhtar N, Mian A (2018) Threat of adversarial attacks on deep learning in computer vision: a survey. IEEE Access 6:14410–14430
2. Ballet V, Renard X, Aigrain J, Laugel T, Frossard P, Detyniecki M (2019) Imperceptible adversarial attacks on tabular data. arXiv preprint arXiv:1911.03274
3. Bengio Y, Léonard N, Courville A (2013) Estimating or propagating gradients through stochastic neurons for conditional computation. arXiv preprint arXiv:1308.3432
4. Bickel S, Brückner M, Scheffer T (2009) Discriminative learning under covariate shift. J Mach Learn Res 10(9):2137–2155
5. Bifet A, Gavaldà R (2009) Adaptive learning from evolving data streams. Advances in intelligent data analysis VIII. Springer, Berlin, pp 249–260