A Unified Algebraic Perspective on Lipschitz Neural Networks

Important research efforts have focused on the design and training of neural networks with a controlled Lipschitz constant. The goal is to increase and sometimes guarantee the robustness against adversarial attacks. Recent promising techniques draw inspirations from different backgrounds to design 1-Lipschitz neural networks, just to name a few: convex potential layers derive from the discretization of continuous dynamical systems, Almost-Orthogonal-Layer proposes a tailored method for matrix rescaling. However, it is today important to consider the recent and promising contributions in the field under a common theoretical lens to better design new and improved layers. This paper introduces a novel algebraic perspective unifying various types of 1-Lipschitz neural networks, including the ones previously mentioned, along with methods based on orthogonality and spectral methods. Interestingly, we show that many existing techniques can be derived and generalized via finding analytical solutions of a common semidefinite programming (SDP) condition. We also prove that AOL biases the scaled weight to the ones which are close to the set of orthogonal matrices in a certain mathematical manner. Moreover, our algebraic condition, combined with the Gershgorin circle theorem, readily leads to new and diverse parameterizations for 1-Lipschitz network layers. Our approach, called SDP-based Lipschitz Layers (SLL), allows us to design non-trivial yet efficient generalization of convex potential layers. Finally, the comprehensive set of experiments on image classification shows that SLLs outperform previous approaches on certified robust accuracy. Code is available at https://github.com/araujoalexandre/Lipschitz-SLL-Networks.

PDF Abstract ICLR 2023 PDF ICLR 2023 Abstract
Task Dataset Model Metric Name Metric Value Global Rank Result Benchmark
Provable Adversarial Defense CIFAR-10 SLL X-Large Accuracy 70.3 # 1
Provable Adversarial Defense CIFAR-10 SLL Medium Accuracy 69.1 # 3
Provable Adversarial Defense CIFAR-10 SLL Large Accuracy 69.8 # 2
Provable Adversarial Defense CIFAR-10 SLL Small Accuracy 68.1 # 4
Provable Adversarial Defense CIFAR-100 SLL Medium Accuracy 41.5 # 3
Provable Adversarial Defense CIFAR-100 SLL Large Accuracy 42.1 # 2
Provable Adversarial Defense CIFAR-100 SLL X-Large Accuracy 42.7 # 1
Provable Adversarial Defense CIFAR-100 SLL Small Accuracy 40.7 # 4

Methods


No methods listed for this paper. Add relevant methods here