Balancing Accuracy and Safety in AI: A Novel Adversarial Training Approach
In this paper, I propose a novel approach to improve the safety of classification models by incorporating adversarial training into the model training process. I demonstrate that adversarial training enhances the safety of models without significantly affecting their accuracy. my methodology involves generating adversarial examples from the original dataset and creating a mixed training dataset that includes both original and adversarial examples. By evaluating the model's performance on both types of datasets, I can achieve a balance between accuracy and safety. The proposed approach offers a more resource- efficient alternative to traditional model tuning processes, which often require multiple iterations to meet performance standards. My results indicate that including at least 20% adversarial examples in the training data effectively improves safety while allowing adjustments based on the relative importance of accuracy and safety. The new method simplifies the process of achieving safety requirements and reduces the resources needed for training and evaluation. Future research will focus on validating this approach with diverse safety-related datasets, various model structures, and different adversarial attack methods, as well as exploring its applicability to other non- functional requirements in AI.
Publication Details
- Journal
- Zenodo (CERN European Organization for Nuclear Research)
- Published
- 2024-10-25
- DOI
- https://doi.org/10.5281/zenodo.14731031
- Primary Topic
- Adversarial Robustness in Machine Learning
- Type
- article
- Field-Weighted Citation Impact
- 0.00