arXiv · 2002.12520
Utilizing Network Properties to Detect Erroneous Inputs
Abstract
Neural networks are vulnerable to a wide range of erroneous inputs such as adversarial, corrupted, out-of-distribution, and misclassified examples. In this work, we train a linear SVM classifier to detect these four types of erroneous data using hidden and softmax feature vectors of pre-trained neural networks. Our results indicate that these faulty data types generally exhibit linearly separable activation properties from correct examples, giving us the ability to reject bad inputs with no extra training or overhead. We experimentally validate our findings across a diverse range of datasets, domains, pre-trained models, and adversarial attacks.
Explore related subjects
Keep this discovery
Matt Gorbett, Nathaniel Blanchard. 2020-02-28. Utilizing Network Properties to Detect Erroneous Inputs. https://arxiv.org/abs/2002.12520
Cite the original work for its findings. Save a collection to share your selection of sources.