Timezone: »

 
Poster
Provably Adversarially Robust Detection of Out-of-Distribution Data (Almost) for Free
Alexander Meinke · Julian Bitterwolf · Matthias Hein

Tue Nov 29 09:00 AM -- 11:00 AM (PST) @ Hall J #417
in Poster Session 1 »

The application of machine learning in safety-critical systems requires a reliable assessment of uncertainty.However, deep neural networks are known to produce highly overconfident predictions on out-of-distribution (OOD) data.Even if trained to be non-confident on OOD data, one can still adversarially manipulate OOD data so that the classifier again assigns high confidence to the manipulated samples.We show that two previously published defenses can be broken by better adapted attacks, highlighting the importance of robustness guarantees around OOD data.Since the existing method for this task is hard to train and significantly limits accuracy, we construct a classifier that can simultaneously achieve provably adversarially robust OOD detection and high clean accuracy.Moreover, by slightly modifying the classifier's architecture our method provably avoids the asymptotic overconfidence problem of standard neural networks.We provide code for all our experiments.

Keywords: Adversarial Robustness · Out-of-distribution Detection

Author Information

Alexander Meinke (University of Tübingen)
Julian Bitterwolf (University of Tübingen)
Matthias Hein (University of Tübingen)

More from the Same Authors