Adversarially Robust Continual Learning with Anti-Forgetting Loss
Existing continual learning methods focus on preventing catastrophic forgetting but often overlook the challenge of adversarial examples in image classification. In this study, we propose a novel method that balances accuracy, robustness against adversarial examples, and the prevention of forgetting. Specifically, we first theoretically and experimentally demonstrate that learning through knowledge distillation, a common strategy in continual learning, conflicts with learning through the cross-entropy loss. To resolve this conflict, we propose a novel loss function that combines an additional memory data loss with a conflict-avoiding knowledge distillation loss, effectively preventing catastrophic forgetting while ensuring robustness. Experimental results show that the proposed method outperforms existing methods by 5.17% in clean accuracy and $2.10 \%$ in robust accuracy. This method proves to be especially beneficial in scenarios where the reuse of samples from previous tasks is limited.
Authors
- Toshihiko Yamasaki (ORCID: https://orcid.org/0000-0002-1784-2314)
- Soichiro Kumano (ORCID: https://orcid.org/0000-0002-3461-3943)
- Nicolas Michel (ORCID: https://orcid.org/0000-0002-6265-6748)
- Ling Xiao (ORCID: https://orcid.org/0000-0002-4650-8841)
- Koki Mukai (ORCID: https://orcid.org/0009-0004-6955-0702)
Institutions
- The University of Tokyo (JP)
Publication Details
- Published
- 2024-09-27
- DOI
- https://doi.org/10.1109/icip51287.2024.10647958
- Citations
- 1
- Primary Topic
- Domain Adaptation and Few-Shot Learning
- Type
- article
- Field-Weighted Citation Impact
- 0.35
Funders
- ACT-X