A General Framework for Robust G-Invariance in G-Equivariant Networks
Sophia Sanborn, Nina Miolane

TL;DR
This paper presents a novel G-triple-correlation layer for G-equivariant neural networks, providing complete invariance, enhanced robustness against adversarial attacks, and improved classification accuracy across various groups and datasets.
Contribution
Introduces the G-triple-correlation layer, a complete invariant map for G-CNNs, improving robustness and accuracy over existing invariant methods.
Findings
Enhanced robustness to invariance-based adversarial attacks.
Improved classification accuracy over max pooling methods.
Effective on multiple groups including SO(2), O(2), SO(3), and O(3).
Abstract
We introduce a general method for achieving robust group-invariance in group-equivariant convolutional neural networks (-CNNs), which we call the -triple-correlation (-TC) layer. The approach leverages the theory of the triple-correlation on groups, which is the unique, lowest-degree polynomial invariant map that is also complete. Many commonly used invariant maps--such as the max--are incomplete: they remove both group and signal structure. A complete invariant, by contrast, removes only the variation due to the actions of the group, while preserving all information about the structure of the signal. The completeness of the triple correlation endows the -TC layer with strong robustness, which can be observed in its resistance to invariance-based adversarial attacks. In addition, we observe that it yields measurable improvements in classification accuracy over standard Max…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Code & Models
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsDomain Adaptation and Few-Shot Learning · Medical Imaging and Analysis · Adversarial Robustness in Machine Learning
