National University of Defense Technology

Yanming Guo

Jian Li

Yingmei Wei

Liang Bai

Yulun Wu

Songyang Lao

A training method for a robust neural network based on feature matching is provided in this disclosure, which includes following steps. Step A, a first stage model is initialized. The first stage model includes a backbone network, a feature matching module and a fullple loss function. Step B, the first stage model is trained by using original training data to obtain a second stage model. Step C, the second stage model is attacked so as to generate PGD adversarial samples of the original training data, and the second stage model is trained again with the generated adversarial samples and the original training data. Step D, training parameters are adjusted and the second stage model is trained again, and parameters for which the model has highest accuracy on an original test set are saved.

Growing community of inventors

Hunan, China

Yanming Guo