mixup: Beyond Empirical Risk Minimization

Citations Over Time

Abstract

Large deep neural networks are powerful, but exhibit undesirable behaviors such as memorization and sensitivity to adversarial examples. In this work, we propose mixup, a simple learning principle to alleviate these issues. In essence, mixup trains a neural network on convex combinations of pairs of examples and their labels. By doing so, mixup regularizes the neural network to favor simple linear behavior in-between training examples. Our experiments on the ImageNet-2012, CIFAR-10, CIFAR-100, Google commands and UCI datasets show that mixup improves the generalization of state-of-the-art neural network architectures. We also find that mixup reduces the memorization of corrupt labels, increases the robustness to adversarial examples, and stabilizes the training of generative adversarial networks.

Related Papers

• → Jujutsu: A Two-stage Defense against Adversarial Patch Attacks on Deep Neural Networks(2023)19 cited
• → Explainable AI for Inspecting Adversarial Attacks on Deep Neural Networks(2020)6 cited
• → Generating adversarial examples for DNN using pooling layers(2019)3 cited
• → Global Adversarial Attacks for Assessing Deep Learning Robustness(2019)3 cited
• → Developing and Defeating Adversarial Examples(2020)