Image Classification
Transformers
Safetensors
nula
computer-vision
cnn
cifar10
adversarial-robustness
stress-test
downsampling
anti-aliasing
custom_code
Instructions to use MamaPearl/nula-cifar10-robust-v0 with libraries, inference providers, notebooks, and local apps. Follow these links to get started.
- Libraries
- Transformers
How to use MamaPearl/nula-cifar10-robust-v0 with Transformers:
# Use a pipeline as a high-level helper from transformers import pipeline pipe = pipeline("image-classification", model="MamaPearl/nula-cifar10-robust-v0", trust_remote_code=True) pipe("https://huggingface.co/datasets/huggingface/documentation-images/resolve/main/hub/parrots.png")# pip install -U transformers accelerate # Load model directly from transformers import AutoModelForImageClassification model = AutoModelForImageClassification.from_pretrained("MamaPearl/nula-cifar10-robust-v0", trust_remote_code=True, device_map="auto") - Notebooks
- Google Colab
- Kaggle
Update README.md
Browse files
README.md
CHANGED
|
@@ -19,17 +19,19 @@ Anti-aliased residual CNN for CIFAR-10 image classification, designed to improve
|
|
| 19 |
|
| 20 |
## Problem
|
| 21 |
|
| 22 |
-
|
| 23 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 24 |
|
| 25 |
$D : \mathbb{R}^n \to \mathbb{R}^m, \quad \text{where } n > m$
|
|
|
|
| 26 |
$\dim(\ker(D)) = n - \text{rank}(D)$
|
| 27 |
|
| 28 |
-
|
| 29 |
-
By the Rank-Nullity thereom, this matrix has a massive NULL space. An attacker can exploit this.
|
| 30 |
-
They can use the discarded samples of these downsampling operations as extra degrees of freedom.
|
| 31 |
-
By sculpting perturbations with components in the null space of the downsampling operator,
|
| 32 |
-
they spread energy across frequencies that are discarded during striding
|
| 33 |
|
| 34 |
The result is an image perceptually identical to the original, with a manipulated activation pattern.
|
| 35 |
|
|
|
|
| 19 |
|
| 20 |
## Problem
|
| 21 |
|
| 22 |
+
### NULA
|
| 23 |
|
| 24 |
+
Anti-aliased residual CNN for CIFAR-10 image classification, designed to improve robustness against perturbations that exploit downsampling.
|
| 25 |
+
|
| 26 |
+
### Problem
|
| 27 |
+
|
| 28 |
+
Downsampling operations are linear maps from a high-dimensional space to a lower-dimensional one.
|
| 29 |
|
| 30 |
$D : \mathbb{R}^n \to \mathbb{R}^m, \quad \text{where } n > m$
|
| 31 |
+
|
| 32 |
$\dim(\ker(D)) = n - \text{rank}(D)$
|
| 33 |
|
| 34 |
+
By the Rank-Nullity theorem, this matrix has a massive NULL space. An attacker can exploit this. They can use the discarded samples of these downsampling operations as extra degrees of freedom. By sculpting perturbations with components in the null space of the downsampling operator, they spread energy across frequencies that are discarded during striding.
|
|
|
|
|
|
|
|
|
|
|
|
|
| 35 |
|
| 36 |
The result is an image perceptually identical to the original, with a manipulated activation pattern.
|
| 37 |
|