Master thesis : Evaluating and improving the robustness of machine learning models, using mixed-integer optimization techniques
|Title :||Master thesis : Evaluating and improving the robustness of machine learning models, using mixed-integer optimization techniques|
|Author :||Blondiau, Sébastien|
|Date of defense :||26-Jun-2019/27-Jun-2019|
|Advisor(s) :||Geurts, Pierre
|Committee's member(s) :||Louppe, Gilles
|Number of pages :||60|
|Keywords :||[en] robust training|
[en] adversarial training
[en] adversarial examples
[en] adversarial accuracy
|Discipline(s) :||Engineering, computing & technology > Computer science|
|Target public :||Researchers|
|Institution(s) :||Université de Liège, Liège, Belgique|
|Degree:||Master en ingénieur civil en informatique, à finalité spécialisée en "intelligent systems"|
|Faculty:||Master thesis of the Faculté des Sciences appliquées|
[en] Artificial neural networks are able to reach the highest accuracy on a great variety of complex visual tasks. Their impressive performances, often surpassing humans, attract a lot of interest.
But their opaque nature makes them considered as distrusted black-box models by experts.
In 2013, Szegedy et al. discovered that images can be slightly modified to cause the models to classify them differently. The adversary creating the modified image can even choose the new class. These modified images, called adversarial examples, draw even more distrust on these models.
In this thesis, we will present methods to evaluate the robustness of a model against such examples, among which one based on mixed integer linear programming and others based on relaxations of it.
We will also present algorithms to train models to be more robust.
Finally, we will empirically evaluate models trained with these algorithms.
Cite this master thesis
The University of Liège does not guarantee the scientific quality of these students' works or the accuracy of all the information they contain.