Dynamic Epsilon Scheduling: A Multi-Factor Adaptive Perturbation Budget for Adversarial Training

arXiv — cs.CVThursday, November 27, 2025 at 5:00:00 AM
  • A novel framework called Dynamic Epsilon Scheduling (DES) has been proposed to enhance adversarial training for deep neural networks. This approach adapts the adversarial perturbation budget based on instance-specific characteristics, integrating factors such as distance to decision boundaries, prediction confidence, and model uncertainty. This advancement addresses the limitations of fixed perturbation budgets in existing methods.
  • The introduction of DES is significant as it promises to improve the robustness of deep learning models against adversarial attacks, which have been a persistent challenge in the field. By tailoring the perturbation budget to individual instances, DES aims to enhance the overall performance and reliability of neural networks in real-world applications.
  • The development of DES reflects a broader trend in artificial intelligence research towards more adaptive and context-aware training methods. This shift is underscored by ongoing efforts to improve model robustness through various techniques, such as gradient-feature alignment and probabilistic robustness, highlighting the critical need for dynamic solutions in the face of evolving adversarial threats.
— via World Pulse Now AI Editorial System

Was this article worth reading? Share it

Recommended apps based on your readingExplore all apps
Continue Readings
From Diffusion to One-Step Generation: A Comparative Study of Flow-Based Models with Application to Image Inpainting
PositiveArtificial Intelligence
A comprehensive study has been conducted comparing three generative modeling paradigms: Denoising Diffusion Probabilistic Models (DDPM), Conditional Flow Matching (CFM), and MeanFlow, focusing on their application in image inpainting. The study highlights that CFM significantly outperforms DDPM in terms of efficiency and quality, achieving a notable FID score of 24.15 with only 50 steps, while MeanFlow allows for single-step generation, reducing inference time by 50 times.
LTD: Low Temperature Distillation for Gradient Masking-free Adversarial Training
PositiveArtificial Intelligence
A novel approach called Low-Temperature Distillation (LTD) has been introduced to enhance adversarial training in neural networks, addressing the vulnerabilities associated with one-hot label representations in image classification. LTD utilizes a lower temperature in the teacher model while keeping the student model's temperature fixed, refining label representations and improving model robustness against adversarial attacks.
SG-OIF: A Stability-Guided Online Influence Framework for Reliable Vision Data
PositiveArtificial Intelligence
The Stability-Guided Online Influence Framework (SG-OIF) has been introduced to enhance the reliability of vision data in deep learning models, addressing challenges such as the computational expense of influence function implementations and the instability of training dynamics. This framework aims to provide real-time control over algorithmic stability, facilitating more accurate identification of critical training examples.
DP-MicroAdam: Private and Frugal Algorithm for Training and Fine-tuning
PositiveArtificial Intelligence
The introduction of DP-MicroAdam marks a significant advancement in the realm of adaptive optimizers for differentially private training, demonstrating superior performance and convergence rates compared to traditional methods like DP-SGD. This new algorithm is designed to be memory-efficient and sparsity-aware, addressing the challenges of extensive compute and hyperparameter tuning typically associated with differential privacy.
ModHiFi: Identifying High Fidelity predictive components for Model Modification
PositiveArtificial Intelligence
A recent study titled 'ModHiFi: Identifying High Fidelity predictive components for Model Modification' explores methods to modify open weight models without access to training data or loss functions. The research focuses on identifying critical components that influence predictive performance using only distributional access, such as synthetic data.
Latent Diffusion Inversion Requires Understanding the Latent Space
NeutralArtificial Intelligence
Recent research highlights the need for a deeper understanding of latent space in Latent Diffusion Models (LDMs), revealing that these models exhibit uneven memorization across latent codes and that different dimensions within a single latent code contribute variably to memorization. This study introduces a method to rank these dimensions based on their impact on the decoder pullback metric.
MGAS: Multi-Granularity Architecture Search for Trade-Off Between Model Effectiveness and Efficiency
PositiveArtificial Intelligence
The introduction of Multi-Granularity Differentiable Architecture Search (MG-DARTS) marks a significant advancement in neural architecture search (NAS), focusing on optimizing both model effectiveness and efficiency. This framework addresses limitations in existing differentiable architecture search methods by incorporating finer-grained structures, enhancing the balance between model performance and size.
When +1% Is Not Enough: A Paired Bootstrap Protocol for Evaluating Small Improvements
NeutralArtificial Intelligence
A new evaluation protocol has been proposed to assess small improvements in machine learning algorithms, particularly addressing the frequent reporting of 1-2 percentage point gains that may not reflect true advancements. This protocol utilizes paired multi-seed runs and bootstrap confidence intervals to provide a more reliable measure of performance under limited computational resources.