Aug 2026· Proceedings of the 32nd ACM SIGKDD Conference on Knowledge Discovery and Data Mining V.2· pp. 2225-2236· 0 citations· 39 references
TL;DR
VisionDES is introduced, a novel DES framework for image classification that uses deep model embeddings to estimate classifier competence and consistently outperforms static ensembles and existing uncertainty-based DES methods, improving robust accuracy under strong attacks and under distribution shifts.
Abstract
Dynamic Ensemble Selection (DES) is an adaptive ensemble learning paradigm that selects a subset of base classifiers specific to each test input, enabling more flexible predictions than static ensemble methods. Although successful in tabular settings, DES remains largely unexplored in robust vision applications. We introduce VisionDES, a novel DES framework for image classification that uses deep model embeddings to estimate classifier competence. VisionDES leverages pre-trained vision transformer models to embed inputs and employs efficient nearest neighbor search to define a local region of competence for each sample. It then dynamically selects and fuses the most reliable models, using a similarity-weighted combination that down-weights less reliable or adversarially-compromised classifiers. VisionDES is extensively evaluated on various benchmarks and under clean conditions, distribution shifts, and strong adversarial attacks. It consistently outperforms static ensembles and existing uncertainty-based DES methods, improving robust accuracy by up to 20% under strong attacks and 2-3% higher accuracy under distribution shifts, with modest inference overhead. VisionDES offers instance-level interpretability by revealing models' contributions to the final decision.
PAPT++ is introduced, a risk-aware adversarial generation-training framework for SDG that progressively exposes the classifier to challenging yet semantically consistent variations.
Zhi-Peng Xu, De Cheng, Xinyang Jiang et al.· 0 citations
Reliable uncertainty quantification is essential for deploying deep learning models in high-stakes settings, where out-of-distribution and adversarial inputs can induce confident but unreliable predictions. Evidential Deep Learning provides efficient uncertainty estimates in a single forward pass, but can still assign...
Charmaine Barker, Daniel Bethell, Simos Gerasimou· 0 citations
A novel sparse adversarial patch attack algorithm (Sparse Patch Attack, SPA), which successfully misleads the text generation results of VLMs by generating highly dispersed discrete pixel perturbations in non-salient regions of the image.
T.-Y. Chen, X.-Y. Hu, J.-F. Wang et al.· Advanced Electromagnetics· 0 citations
Visual classifiers are expected to generalize under data shifts, target shifts, and their combinations, yet most existing methods focus on domain invariance while failing to address intra-image predictive sufficiency. We investigate the structural hypothesis that each image contains a sample-adaptive oracle intra-image...
ARMDIL is an ensemble that uses a multimodal large language model (MLLM) agent to dynamically route each image to the most suitable vision backbone, drastically improves adaptability by allowing new information to be integrated via simple prompt modifications, while enhancing interpretability through natural language r...
Daniel A. Perkins, J. Squires, Janou Milligan et al.· 0 citations
Adversarial attacks on Vision Transformers (ViTs) commonly rely on selecting a subset of important patches to guide perturbation allocation, with hard top-k strategies being a widely used approach. However, such methods convert continuous attention distributions into binary decisions, potentially discarding useful info...
Van-Quyen Do, T. Pham, Thi Thanh Thuy Pham· International Conference on...· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.