Robustness Evaluation for Video Models with Reinforcement Learning

TL;DR

This paper introduces a multi-agent reinforcement learning method to evaluate the robustness of video classification models by generating imperceptible perturbations considering spatial and temporal coherence, outperforming existing methods.

Contribution

The paper presents a novel multi-agent reinforcement learning approach for robustness evaluation of video models, effectively considering spatial-temporal coherence and enabling customizable distortions.

Findings

Outperforms state-of-the-art on Lp metric and query efficiency

Effective in generating visually imperceptible perturbations

Evaluated on popular datasets HMDB-51 and UCF-101

Abstract

Evaluating the robustness of Video classification models is very challenging, specifically when compared to image-based models. With their increased temporal dimension, there is a significant increase in complexity and computational cost. One of the key challenges is to keep the perturbations to a minimum to induce misclassification. In this work, we propose a multi-agent reinforcement learning approach (spatial and temporal) that cooperatively learns to identify the given video's sensitive spatial and temporal regions. The agents consider temporal coherence in generating fine perturbations, leading to a more effective and visually imperceptible attack. Our method outperforms the state-of-the-art solutions on the Lp metric and the average queries. Our method enables custom distortion types, making the robustness evaluation more relevant to the use case. We extensively evaluate 4 popular models for video action recognition on two popular datasets, HMDB-51 and UCF-101.