Decision tree pairwise metric learning against adversarial attacks. Issue 106 (July 2021)

• Record Type: Journal Article
• Authors: Appiah, Benjamin; Qin, Zhiguang; Abra, Ayidzoe Mighty; Kanpogninge, Ansuura JohnBosco Aristotle
• Is Part Of: Computers & security. Issue 106(2021)
• Publication Date: 2021-07
• Subjects: Adversarial detection -- Decision trees -- Pairwise metric learning; Computer security -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; 005.805
• DOI: 10.1016/j.cose.2021.102268
• Languages: English
• ISSNs: 0167-4048

Abstract

Abstract: Distance Metric Learning has been used or paired with SoftMax Cross-Entropy loss to increase the discriminative power of deep learning classifiers against adversarial attacks. Most distance metric learning-based methods for adversarial detection adopt the standard Mahalanobis distance which only encodes the relative position information and therefore cannot capture the entire shape of complex data. In this research, we propose an alternative metric learning approach for adversarial sample classification. This approach integrates relative information as well as absolute pairwise information into a differentiable decision tree representation to guarantee a more robust classifier. We term this metric learning approach as differentiable decision tree pairwise metric learning (DTML). We demonstrate that DTML is more robust even under strong adversarial untargeted attacks compared with the single Mahalanobis distance-based defending methods on MNIST, CIFAR-10, and KDDCUP99 datasets.