Paper ID | SS-MMSDF-2.5 | ||
Paper Title | CNN CLASSIFIER’S ROBUSTNESS ENHANCEMENT WHEN PRESERVING PRIVACY | ||
Authors | Abul Hasnat, Nadiya Shvai, Amir Nakib, Cyclope.ai, France | ||
Session | SS-MMSDF-2: Special Session: AI for Multimedia Security and Deepfake 2 | ||
Location | Area A | ||
Session Time: | Tuesday, 21 September, 15:30 - 17:00 | ||
Presentation Time: | Tuesday, 21 September, 15:30 - 17:00 | ||
Presentation | Poster | ||
Topic | Applications of Machine Learning: Machine learning for information forensics and security | ||
IEEE Xplore Open Preview | Click here to view in IEEE Xplore | ||
Abstract | Laws on privacy preservation challenges supervised learning algorithms in industrial applications and could be an obstacle for the artificial intelligence solutions. In the literature, this issue is never discussed for the algorithm's design. Indeed, algorithms do not behave the same when the input is modified to protect privacy. Particularly, the unmodified data samples predicts with low confidences show high vulnerability to decision changes. To overcome this challenge, we propose a novel solution that enhances classifier’s robustness by particularly addressing the vulnerable samples. It consists of a novel formulation of the learning objective by hybridizing similarity learning, decision margin and intra-class distance. Experimental results and evaluation on a challenging vehicle image dataset exhibit the high effectiveness and potentials of our method for the privacy preserving classification problems. |