Sep 2026· Proceedings of the Thirty-Fifth International Joint Conference on Artificial Intelligence· 0 citations· 45 references
TL;DR
Mutual Heterogeneous Learning (MHL) is proposed, a framework enabling robust pruning via single-model inference that significantly outperforms single-model baselines in both adversarial robustness and corruption robustness, while maintaining competitive clean accuracy.
Abstract
Neural network pruning is crucial for efficient deployment on resource-constrained devices, yet achieving high sparsity often leads to significant robustness degradation against adversarial perturbations and corruptions. Recent works typically rely on single-model fine-tuning along a fixed optimization trajectory, which renders the network susceptible to local optima and noise while failing to restore the multiple robustness properties compromised during compression. In this paper, we propose Mutual Heterogeneous Learning (MHL), a framework enabling robust pruning via single-model inference. MHL instantiates heterogeneity through two complementary mechanisms: layer-wise Lipschitz regularization for intermediate feature smoothness and adaptive margin objective for difficulty-aware boundary separation. To guide these diverse experts to converge, we employ entropy-based mutual distillation with a strategic schedule that shifts the optimization trajectory from exploring diverse feature subspaces to consolidating a unified robust model. Extensive experiments on 4 clean and corruption benchmarks and adversarial attacks demonstrate that MHL significantly outperforms single-model baselines in both adversarial robustness (+5%) and corruption robustness (+2.6%) while maintaining competitive clean accuracy.
This work proposes BMAT (Bilevel-Minimax Adversarial Transfer), an integrated bottom-up solver that combines a Soft Weight Modulator and an Implicit Gradient Approximator to enable ternary coupling among initialization, surrogate adaptation, and perturbation optimization.
Adversarial LassoNet is proposed, a stability-driven sparse feature selection framework that integrates input-space adversarial perturbations with the hierarchical sparsity mechanism of LassoNet and an NTK-inspired spectral analysis to characterize how perturbation-driven training can reduce gradient concentration.
Zhenghao Huang, Peicheng Xu, Junbiao Pang et al.· 0 citations
Experiments show that Robust CurveMoE consistently improves clean, norm-specific, and Union accuracy over MSD and ERMC and introduces contribution-guided partial updating, which selects influential curve parameters using initialization-based gradient scores, and theoretically bound the objective gap between partial and...
Evidential Adversarial Training (EV-AT), which models uncertainty through a Dirichlet distribution and combines an evidence-based loss promoting clean accuracy and reliable uncertainty with a robust evidence-alignment loss matching clean and adversarial predictions in log Dirichlet-parameter space, is proposed.
Nicolas Sournac, Ahmed Baha Ben Jmaa, B. Braeckeveldt· 0 citations
A robustness-oriented training framework that integrates Mask-Guided Adversarial Mixup (MGAM) and Adaptive Timescale Exponential Moving Average (AT-EMA) that provides a practical data-regularization strategy for improving training stability in adversarial learning is proposed.
Guo Niu, Huanlin Mo, Shengjun Deng et al.· Signal, Image and Video Proc...· 0 citations
This paper proposes a condition number-aware pruning framework that explicitly preserves mathematical stability during the pruning process, and significantly improves both standard accuracy and adversarial robustness compared to conventional pruning methods.
Jeromy R, K Bhavani, K.Mohana Lakshmi et al.· International journal of com...· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.