Adaptive Causal Alignment for High-Confidence Adversarial Training
About
Inverse adversarial training leverages high-confidence predictions to stabilize robust learning, yet we uncover a critical paradox: high confidence often stems from overfitting to non-causal background correlations rather than intrinsic object semantics. Our investigation reveals that visual context functions as a dual-natured signal, serving as either a necessary supportive prior or a spurious confounder. This insight renders existing blind suppression strategies flawed, as they inevitably lead to severe Feature Loss. To resolve this, we propose High-Confidence Causally Aligned Training (HICAT), a unified framework that establishes a Semantic Equilibrium. Operating on a ``Measure-Debias-Align'' pipeline, HICAT integrates a Learnable Background-Bias Estimator (LBBE) to adaptively diagnose context utility. Guided by this diagnosis, an Adaptive Debiasing mechanism performs surgical logit rectification, complemented by a geometrically grounded Foreground Logit Orthogonal Enhancement (FLOE) loss to enforce rigorous feature disentanglement. Extensive experiments on CIFAR-10, CIFAR-100, and ImageNet-1K demonstrate that HICAT consistently improves over matched baselines across diverse architectures (CNNs and ViTs) while significantly reducing the robust generalization gap.
Related benchmarks
| Task | Dataset | Result | Rank | |
|---|---|---|---|---|
| Image Classification | CIFAR-10 | Clean Accuracy91.08 | 122 | |
| Adversarial Robustness | CIFAR-10 | Clean Accuracy89.85 | 40 | |
| Cross-model transfer attack accuracy | CIFAR-10 (test) | FGSM Attack Accuracy79.54 | 30 | |
| Adversarial Robustness | CIFAR-100 | Clean Accuracy66.02 | 18 | |
| Adversarial Robustness | ImageNet-1K | -- | 15 | |
| Image Classification | ImageNet (test) | -- | 10 | |
| Adversarial Robustness | CIFAR-10 | Clean Accuracy85.92 | 8 | |
| Image Classification | CIFAR-10 | Clean Accuracy87.44 | 8 | |
| Image Classification | CIFAR-10 RST 500K-unlabeled (test) | Clean Accuracy89.1 | 8 |