Title
Styx: a data-oriented mutation framework to improve the robustness of DNN
Abstract
ABSTRACTThe robustness of deep neural network (DNN) is critical and challenging to ensure. In this paper, we propose a general data-oriented mutation framework, called Styx, to improve the robustness of DNN. Styx generates new training data by slightly mutating the training data. In this way, Styx ensures the DNN's accuracy on the test dataset while improving the adaptability to small perturbations, i.e., improving the robustness. We have instantiated Styx for image classification and proposed pixel-level mutation rules that are applicable to any image classification DNNs. We have applied Styx on several commonly used benchmarks and compared Styx with the representative adversarial training methods. The preliminary experimental results indicate the effectiveness of Styx.
Year
DOI
Venue
2020
10.1145/3324884.3418903
ASE
Keywords
DocType
ISSN
DNN, Robustness, Mutation, Adversarial examples
Conference
1527-1366
Citations 
PageRank 
References 
0
0.34
0
Authors
6
Name
Order
Citations
PageRank
Meixi Liu100.34
Weijiang Hong200.34
Weiyu Pan301.35
Chendong Feng400.68
Zhenbang Chen519923.60
Ji Wang6163.66