Standford CS231n 2017 Summary
After watching all the videos of the famous Standford's CS231n course that took place in 2017, i decided to take summary of the whole course to help me to remember and to anyone who would like to know about it. I've skipped some contents in some lectures as it wasn't important to me.
Table of contents

Standford CS231n 2017 Summary
 Table of contents
 Course Info
 01. Introduction to CNN for visual recognition
 02. Image classification
 03. Loss function and optimization
 04. Introduction to Neural network
 05. Convolutional neural networks (CNNs)
 06. Training neural networks I
 07. Training neural networks II
 08. Deep learning software
 09. CNN architectures
 10. Recurrent Neural networks
 11. Detection and Segmentation
 12. Visualizing and Understanding
 13. Generative models
 14. Deep reinforcement learning
 15. Efficient Methods and Hardware for Deep Learning
 16. Adversarial Examples and Adversarial Training
Course Info

Website: http://cs231n.stanford.edu/

Lectures link: https://www.youtube.com/playlist?list=PLC1qULWwrF64f4QKQTVg5Wr4qEE1Zxk

Full syllabus link: http://cs231n.stanford.edu/syllabus.html

Assignments solutions: https://github.com/Burton2000/CS231n2017

Number of lectures: 16

Course description:

Computer Vision has become ubiquitous in our society, with applications in search, image understanding, apps, mapping, medicine, drones, and selfdriving cars. Core to many of these applications are visual recognition tasks such as image classification, localization and detection. Recent developments in neural network (aka "deep learning") approaches have greatly advanced the performance of these stateoftheart visual recognition systems. This course is a deep dive into details of the deep learning architectures with a focus on learning endtoend models for these tasks, particularly image classification. During the 10week course, students will learn to implement, train and debug their own neural networks and gain a detailed understanding of cuttingedge research in computer vision. The final assignment will involve training a multimillion parameter convolutional neural network and applying it on the largest image classification dataset (ImageNet). We will focus on teaching how to set up the problem of image recognition, the learning algorithms (e.g. backpropagation), practical engineering tricks for training and finetuning the networks and guide the students through handson assignments and a final course project. Much of the background and materials of this course will be drawn from the ImageNet Challenge.

01. Introduction to CNN for visual recognition
 A brief history of Computer vision starting from the late 1960s to 2017.
 Computer vision problems includes image classification, object localization, object detection, and scene understanding.
 Imagenet is one of the biggest datasets in image classification available right now.
 Starting 2012 in the Imagenet competition, CNN (Convolutional neural networks) is always winning.
 CNN actually has been invented in 1997 by Yann Lecun.
02. Image classification
 Image classification problem has a lot of challenges like illumination and viewpoints.
 An image classification algorithm can be solved with K nearest neighborhood (KNN) but it can poorly solve the problem. The properties of KNN are:
 Hyperparameters of KNN are: k and the distance measure
 K is the number of neighbors we are comparing to.
 Distance measures include:
 L2 distance (Euclidean distance)
 Best for non coordinate points
 L1 distance (Manhattan distance)
 Best for coordinate points
 L2 distance (Euclidean distance)
 Hyperparameters can be optimized using Crossvalidation as following (In our case we are trying tp predict K):
 Split your dataset into
f
folds.  Given predicted hyperparameters:
 Train your algorithm with f1 folds and test it with the remain flood. and repeat this with every fold.
 Choose the hyperparameters that gives the best training values (Average over all folds)
 Split your dataset into
 Linear SVM classifier is an option for solving the image classification problem, but the curse of dimensions makes it stop improving at some point.
 Logistic regression is a also a solution for image classification problem, but image classification problem is non linear!
 Linear classifiers has to run the following equation:
Y = wX + b
 shape of
w
is the same asx
and shape ofb
is 1.
 shape of
 We can add 1 to X vector and remove the bias so that:
Y = wX
 shape of
x
isoldX+1
andw
is the same asx
 shape of
 We need to know how can we get
w
's andb
's that makes the classifier runs at best.
03. Loss function and optimization

In the last section we talked about linear classifier but we didn't discussed how we could train the parameters of that model to get best
w
's andb
's. 
We need a loss function to measure how good or bad our current parameters.

Loss = L[i] =(f(X[i],W),Y[i]) Loss_for_all = 1/N * Sum(Li(f(X[i],W),Y[i])) # Indicates the average


Then we find a way to minimize the loss function given some parameters. This is called optimization.

Loss function for a linear SVM classifier:
L[i] = Sum where all classes except the predicted class (max(0, s[j]  s[y[i]] + 1))
 We call this the hinge loss.
 Loss function means we are happy if the best prediction are the same as the true value other wise we give an error with 1 margin.
 Example:
 Given this example we want to compute the loss of this image.
L = max (0, 437.9  (96.8) + 1) + max(0, 61.95  (96.8) + 1) = max(0, 535.7) + max(0, 159.75) = 695.45
 Final loss is 695.45 which is big and reflects that the cat score needs to be the best over all classes as its the lowest value now. We need to minimize that loss.
 Its OK for the margin to be 1. But its a hyperparameter too.

If your loss function gives you zero, are this value is the same value for your parameter? No there are a lot of parameters that can give you best score.

You'll sometimes hear about people instead using the squared hinge loss SVM (or L2SVM). that penalizes violated margins more strongly (quadratically instead of linearly). The unsquared version is more standard, but in some datasets the squared hinge loss can work better.

We add regularization for the loss function so that the discovered model don't overfit the data.

Loss = L = 1/N * Sum(Li(f(X[i],W),Y[i])) + lambda * R(W)
 Where
R
is the regularizer, andlambda
is the regularization term.


There are different regularizations techniques:

Regularizer Equation Comments L2 R(W) = Sum(W^2)
Sum all the W squared L1 R(W) = Sum(lWl)
Sum of all Ws with abs Elastic net (L1 + L2) R(W) = beta * Sum(W^2) + Sum(lWl)
Dropout No Equation


Regularization prefers smaller
W
s over bigW
s. 
Regularizations is called weight decay. biases should not included in regularization.

Softmax loss (Like linear regression but works for more than 2 classes):

Softmax function:

A[L] = e^(score[L]) / sum(e^(score[L]), NoOfClasses)


Sum of the vector should be 1.

Softmax loss:

Loss = logP(Y = y[i]X = x[i])

Log of the probability of the good class. We want it to be near 1 thats why we added a minus.
 Softmax loss is called crossentropy loss.


Consider this numerical problem when you are computing Softmax:

f = np.array([123, 456, 789]) # example with 3 classes and each having large scores p = np.exp(f) / np.sum(np.exp(f)) # Bad: Numeric problem, potential blowup # instead: first shift the values of f so that the highest number is 0: f = np.max(f) # f becomes [666, 333, 0] p = np.exp(f) / np.sum(np.exp(f)) # safe to do, gives the correct answer



Optimization:
 How we can optimize loss functions we discussed?
 Strategy one:
 Get a random parameters and try all of them on the loss and get the best loss. But its a bad idea.
 Strategy two:
 Follow the slope.
 Image source.
 Our goal is to compute the gradient of each parameter we have.
 Numerical gradient: Approximate, slow, easy to write. (But its useful in debugging.)
 Analytic gradient: Exact, Fast, Errorprone. (Always used in practice)
 After we compute the gradient of our parameters, we compute the gradient descent:

W = W  learning_rate * W_grad


learning_rate is so important hyper parameter you should get the best value of it first of all the hyperparameters.
 stochastic gradient descent:
 Instead of using all the date, use a mini batch of examples (32/64/128 are commonly used) for faster results.
 Follow the slope.
04. Introduction to Neural network

Computing the analytic gradient for arbitrary complex functions:

What is a Computational graphs?
 Used to represent any function. with nodes.
 Using Computational graphs can easy lead us to use a technique that called backpropagation. Even with complex models like CNN and RNN.

Backpropagation simple example:

Suppose we have
f(x,y,z) = (x+y)z

Then graph can be represented this way:

X \ (+)> q (*)> f / / Y / / / Z/

We made an intermediate variable
q
to hold the values ofx+y

Then we have:

q = (x+y) # dq/dx = 1 , dq/dy = 1 f = qz # df/dq = z , df/dz = q


Then:

df/dq = z df/dz = q df/dx = df/dq * dq/dx = z * 1 = z # Chain rule df/dy = df/dq * dq/dy = z * 1 = z # Chain rule



So in the Computational graphs, we call each operation
f
. For eachf
we calculate the local gradient before we go on back propagation and then we compute the gradients in respect of the loss function using the chain rule. 
In the Computational graphs you can split each operation to as simple as you want but the nodes will be a lot. if you want the nodes to be smaller be sure that you can compute the gradient of this node.

A bigger example:
 Hint: the back propagation of two nodes going to one node from the back is by adding the two derivatives.

Modularized implementation: forward/ backward API (example multiply code):

class MultuplyGate(object): """ x,y are scalars """ def forward(x,y): z = x*y self.x = x # Cache self.y = y # Cache # We cache x and y because we know that the derivatives contains them. return z def backward(dz): dx = self.y * dz #self.y is dx dy = self.x * dz return [dx, dy]


If you look at a deep learning framework you will find it follow the Modularized implementation where each class has a definition for forward and backward. For example:
 Multiplication
 Max
 Plus
 Minus
 Sigmoid
 Convolution


So to define neural network as a function:
 (Before) Linear score function:
f = Wx
 (Now) 2layer neural network:
f = W2*max(0,W1*x)
 Where max is the RELU non linear function
 (Now) 3layer neural network:
f = W3*max(0,W2*max(0,W1*x)
 And so on..
 (Before) Linear score function:

Neural networks is a stack of some simple operation that forms complex operations.
05. Convolutional neural networks (CNNs)
 Neural networks history:
 First perceptron machine was developed by Frank Rosenblatt in 1957. It was used to recognize letters of the alphabet. Back propagation wasn't developed yet.
 Multilayer perceptron was developed in 1960 by Adaline/Madaline. Back propagation wasn't developed yet.
 Back propagation was developed in 1986 by Rumeelhart.
 There was a period which nothing new was happening with NN. Cause of the limited computing resources and data.
 In 2006 Hinton released a paper that shows that we can train a deep neural network using Restricted Boltzmann machines to initialize the weights then back propagation.
 The first strong results was in 2012 by Hinton in speech recognition. And the Alexnet "Convolutional neural networks" that wins the image net in 2012 also by Hinton's team.
 After that NN is widely used in various applications.
 Convolutional neural networks history:
 Hubel & Wisel in 1959 to 1968 experiments on cats cortex found that there are a topographical mapping in the cortex and that the neurons has hireical organization from simple to complex.
 In 1998, Yann Lecun gives the paper Gradientbased learning applied to document recognition that introduced the Convolutional neural networks. It was good for recognizing zip letters but couldn't run on a more complex examples.
 In 2012 AlexNet used the same Yan Lecun architecture and won the image net challenge. The difference from 1998 that now we have a large data sets that can be used also the power of the GPUs solved a lot of performance problems.
 Starting from 2012 there are CNN that are used for various tasks (Here are some applications):
 Image classification.
 Image retrieval.
 Extracting features using a NN and then do a similarity matching.
 Object detection.
 Segmentation.
 Each pixel in an image takes a label.
 Face recognition.
 Pose recognition.
 Medical images.
 Playing Atari games with reinforcement learning.
 Galaxies classification.
 Street signs recognition.
 Image captioning.
 Deep dream.
 ConvNet architectures make the explicit assumption that the inputs are images, which allows us to encode certain properties into the architecture.
 There are a few distinct types of Layers in ConvNet (e.g. CONV/FC/RELU/POOL are by far the most popular)
 Each Layer may or may not have parameters (e.g. CONV/FC do, RELU/POOL don't)
 Each Layer may or may not have additional hyperparameters (e.g. CONV/FC/POOL do, RELU doesn't)
 How Convolutional neural networks works?
 A fully connected layer is a layer in which all the neurons is connected. Sometimes we call it a dense layer.
 If input shape is
(X, M)
the weighs shape for this will be(NoOfHiddenNeurons, X)
 If input shape is
 Convolution layer is a layer in which we will keep the structure of the input by a filter that goes through all the image.
 We do this with dot product:
W.T*X + b
. This equation uses the broadcasting technique.  So we need to get the values of
W
andb
 We usually deal with the filter (
W
) as a vector not a matrix.
 We do this with dot product:
 We call output of the convolution activation map. We need to have multiple activation map.
 Example if we have 6 filters, here are the shapes:
 Input image
(32,32,3)
 filter size
(5,5,3)
 We apply 6 filters. The depth must be three because the input map has depth of three.
 Output of Conv.
(28,28,6)
 if one filter it will be
(28,28,1)
 if one filter it will be
 After RELU
(28,28,6)
 Another filter
(5,5,6)
 Output of Conv.
(24,24,10)
 Input image
 Example if we have 6 filters, here are the shapes:
 It turns out that convNets learns in the first layers the low features and then the midlevel features and then the high level features.
 After the Convnets we can have a linear classifier for a classification task.
 In Convolutional neural networks usually we have some (Conv ==> Relu)s and then we apply a pool operation to downsample the size of the activation.
 A fully connected layer is a layer in which all the neurons is connected. Sometimes we call it a dense layer.
 What is stride when we are doing convolution:
 While doing a conv layer we have many choices to make regarding the stride of which we will take. I will explain this by examples.
 Stride is skipping while sliding. By default its 1.
 Given a matrix with shape of
(7,7)
and a filter with shape(3,3)
: If stride is
1
then the output shape will be(5,5)
# 2 are dropped
 If stride is
2
then the output shape will be(3,3)
# 4 are dropped
 If stride is
3
it doesn't work.
 If stride is
 A general formula would be
((NF)/stride +1)
 If stride is
1
thenO = ((73)/1)+1 = 4 + 1 = 5
 If stride is
2
thenO = ((73)/2)+1 = 2 + 1 = 3
 If stride is
3
thenO = ((73)/3)+1 = 1.33 + 1 = 2.33
# doesn't work
 If stride is
 In practice its common to zero pad the border.
# Padding from both sides.
 Give a stride of
1
its common to pad to this equation:(F1)/2
where F is the filter size Example
F = 3
==> Zero pad with1
 Example
F = 5
==> Zero pad with2
 Example
 If we pad this way we call this same convolution.
 Adding zeros gives another features to the edges thats why there are different padding techniques like padding the corners not zeros but in practice zeros works!
 We do this to maintain our full size of the input. If we didn't do that the input will be shrinking too fast and we will lose a lot of data.
 Give a stride of
 Example:
 If we have input of shape
(32,32,3)
and ten filters with shape is(5,5)
with stride1
and pad2
 Output size will be
(32,32,10)
# We maintain the size.
 Output size will be
 Size of parameters per filter
= 5*5*3 + 1 = 76
 All parameters
= 76 * 10 = 76
 If we have input of shape
 Number of filters is usually common to be to the power of 2.
# To vectorize well.
 So here are the parameters for the Conv layer:
 Number of filters K.
 Usually a power of 2.
 Spatial content size F.
 3,5,7 ….
 The stride S.
 Usually 1 or 2 (If the stride is big there will be a downsampling but different of pooling)
 Amount of Padding
 If we want the input shape to be as the output shape, based on the F if 3 its 1, if F is 5 the 2 and so on.
 Number of filters K.
 Pooling makes the representation smaller and more manageable.
 Pooling Operates over each activation map independently.
 Example of pooling is the maxpooling.
 Parameters of max pooling is the size of the filter and the stride"
 Example
2x2
with stride2
# Usually the two parameters are the same 2 , 2
 Example
 Parameters of max pooling is the size of the filter and the stride"
 Also example of pooling is average pooling.
 In this case it might be learnable.
06. Training neural networks I

As a revision here are the Mini batch stochastic gradient descent algorithm steps:
 Loop:
 Sample a batch of data.
 Forward prop it through the graph (network) and get loss.
 Backprop to calculate the gradients.
 Update the parameters using the gradients.
 Loop:

Activation functions:

Different choices for activation function includes Sigmoid, tanh, RELU, Leaky RELU, Maxout, and ELU.

Sigmoid:
 Squashes the numbers between [0,1]
 Used as a firing rate like human brains.
Sigmoid(x) = 1 / (1 + e^x)
 Problems with sigmoid:
 big values neurons kill the gradients.
 Gradients are in most cases near 0 (Big values/small values), that kills the updates if the graph/network are large.
 Not Zerocentered.
 Didn't produce zeromean data.

exp()
is a bit compute expensive. just to mention. We have a more complex operations in deep learning like convolution.
 big values neurons kill the gradients.

Tanh:
 Squashes the numbers between [1,1]
 Zero centered.
 Still big values neurons "kill" the gradients.

Tanh(x)
is the equation.  Proposed by Yann Lecun in 1991.

RELU (Rectified linear unit):
RELU(x) = max(0,x)
 Doesn't kill the gradients.
 Only small values that are killed. Killed the gradient in the half
 Computationally efficient.
 Converges much faster than Sigmoid and Tanh
(6x)
 More biologically plausible than sigmoid.
 Proposed by Alex Krizhevsky in 2012 Toronto university. (AlexNet)
 Problems:
 Not zero centered.
 If weights aren't initialized good, maybe 75% of the neurons will be dead and thats a waste computation. But its still works. This is an active area of research to optimize this.
 To solve the issue mentioned above, people might initialize all the biases by 0.01

Leaky RELU:
leaky_RELU(x) = max(0.01x,x)
 Doesn't kill the gradients from both sides.
 Computationally efficient.
 Converges much faster than Sigmoid and Tanh (6x)
 Will not die.
 PRELU is placing the 0.01 by a variable alpha which is learned as a parameter.

Exponential linear units (ELU):

ELU(x) = { x if x > 0 alpah *(exp(x) 1) if x <= 0 # alpah are a learning parameter }

It has all the benefits of RELU

Closer to zero mean outputs and adds some robustness to noise.

problems

exp()
is a bit compute expensive.



Maxout activations:
maxout(x) = max(w1.T*x + b1, w2.T*x + b2)
 Generalizes RELU and Leaky RELU
 Doesn't die!
 Problems:
 oubles the number of parameters per neuron

In practice:
 Use RELU. Be careful for your learning rates.
 Try out Leaky RELU/Maxout/ELU
 Try out tanh but don't expect much.
 Don't use sigmoid!


Data preprocessing:

Normalize the data:

# Zero centered data. (Calculate the mean for every input). # On of the reasons we do this is because we need data to be between positive and negative and not all the be negative or positive. X = np.mean(X, axis = 1) # Then apply the standard deviation. Hint: in images we don't do this. X /= np.std(X, axis = 1)

To normalize images:
 Subtract the mean image (E.g. Alexnet)
 Mean image shape is the same as the input images.
 Or Subtract perchannel mean
 Means calculate the mean for each channel of all images. Shape is 3 (3 channels)
 Subtract the mean image (E.g. Alexnet)


Weight initialization:

What happened when initialize all Ws with zeros?
 All the neurons will do exactly the same thing. They will have the same gradient and they will have the same update.
 So if W's of a specific layer is equal the thing described happened

First idea is to initialize the w's with small random numbers:

W = 0.01 * np.random.rand(D, H) # Works OK for small networks but it makes problems with deeper networks!

The standard deviations is going to zero in deeper networks. and the gradient will vanish sooner in deep networks.

W = 1 * np.random.rand(D, H) # Works OK for small networks but it makes problems with deeper networks!
 The network will explode with big numbers!


Xavier initialization:

W = np.random.rand(in, out) / np.sqrt(in)

It works because we want the variance of the input to be as the variance of the output.
 But it has an issue, It breaks when you are using RELU.


He initialization (Solution for the RELU issue):

W = np.random.rand(in, out) / np.sqrt(in/2)
 Solves the issue with RELU. Its recommended when you are using RELU


Proper initialization is an active area of research.


Batch normalization:
 is a technique to provide any layer in a Neural Network with inputs that are zero mean/unit variance.
 It speeds up the training. You want to do this a lot.
 Made by Sergey Ioffe and Christian Szegedy at 2015.
 We make a Gaussian activations in each layer. by calculating the mean and the variance.
 Usually inserted after (fully connected or Convolutional layers) and (before nonlinearity).
 Steps (For each output of a layer)
 First we compute the mean and variance^2 of the batch for each feature.
 We normalize by subtracting the mean and dividing by square root of (variance^2 + epsilon)
 epsilon to not divide by zero
 Then we make a scale and shift variables:
Result = gamma * normalizedX + beta
 gamma and beta are learnable parameters.
 it basically possible to say "Hey!! I don't want zero mean/unit variance input, give me back the raw input  it's better for me."
 Hey shift and scale by what you want not just the mean and variance!
 The algorithm makes each layer flexible (It chooses which distribution it wants)
 We initialize the BatchNorm Parameters to transform the input to zero mean/unit variance distributions but during training they can learn that any other distribution might be better.
 During the running of the training we need to calculate the globalMean and globalVariance for each layer by using weighted average.

Benefits of Batch Normalization:
 Networks train faster.
 Allows higher learning rates.
 helps reduce the sensitivity to the initial starting weights.
 Makes more activation functions viable.
 Provides some regularization.
 Because we are calculating mean and variance for each batch that gives a slight regularization effect.
 In conv layers, we will have one variance and one mean per activation map.
 Batch normalization have worked best for CONV and regular deep NN, But for recurrent NN and reinforcement learning its still an active research area.
 Its challengey in reinforcement learning because the batch is small.

Baby sitting the learning process
 Preprocessing of data.
 Choose the architecture.
 Make a forward pass and check the loss (Disable regularization). Check if the loss is reasonable.
 Add regularization, the loss should go up!
 Disable the regularization again and take a small number of data and try to train the loss and reach zero loss.
 You should overfit perfectly for small datasets.
 Take your full training data, and small regularization then try some value of learning rate.
 If loss is barely changing, then the learning rate is small.
 If you got
NAN
then your NN exploded and your learning rate is high.  Get your learning rate range by trying the min value (That can change) and the max value that doesn't explode the network.
 Do Hyperparameters optimization to get the best hyperparameters values.

Hyperparameter Optimization
 Try Cross validation strategy.
 Run with a few ephocs, and try to optimize the ranges.
 Its best to optimize in log space.
 Adjust your ranges and try again.
 Its better to try random search instead of grid searches (In log space)
 Try Cross validation strategy.
07. Training neural networks II

Optimization algorithms:

Problems with stochastic gradient descent:
 if loss quickly in one direction and slowly in another (For only two variables), you will get very slow progress along shallow dimension, jitter along steep direction. Our NN will have a lot of parameters then the problem will be more.
 Local minimum or saddle points
 If SGD went into local minimum we will stuck at this point because the gradient is zero.
 Also in saddle points the gradient will be zero so we will stuck.
 Saddle points says that at some point:
 Some gradients will get the loss up.
 Some gradients will get the loss down.
 And that happens more in high dimensional (100 million dimension for example)
 The problem of deep NN is more about saddle points than about local minimum because deep NN has high dimensions (Parameters)
 Mini batches are noisy because the gradient is not taken for the whole batch.

SGD + momentum:

Build up velocity as a running mean of gradients:

# Computing weighted average. rho best is in range [0.9  0.99] V[t+1] = rho * v[t] + dx x[t+1] = x[t]  learningRate * V[t+1]

V[0]
is zero. 
Solves the saddle point and local minimum problems.
 It overshoots the problem and returns to it back.


Nestrov momentum:

dx = compute_gradient(x) old_v = v v = rho * v  learning_rate * dx x+= rho * old_v + (1+rho) * v
 Doesn't overshoot the problem but slower than SGD + momentum


AdaGrad

grad_squared = 0 while(True): dx = compute_gradient(x) # here is a problem, the grad_squared isn't decayed (gets so large) grad_squared += dx * dx x = (learning_rate*dx) / (np.sqrt(grad_squared) + 1e7)


RMSProp

grad_squared = 0 while(True): dx = compute_gradient(x) #Solved ADAgra grad_squared = decay_rate * grad_squared + (1grad_squared) * dx * dx x = (learning_rate*dx) / (np.sqrt(grad_squared) + 1e7)
 People uses this instead of AdaGrad


Adam
 Calculates the momentum and RMSProp as the gradients.
 It need a Fixing bias to fix starts of gradients.
 Is the best technique so far runs best on a lot of problems.
 With
beta1 = 0.9
andbeta2 = 0.999
andlearning_rate = 1e3
or5e4
is a great starting point for many models!

Learning decay
 Ex. decay learning rate by half every few epochs.
 To help the learning rate not to bounce out.
 Learning decay is common with SGD+momentum but not common with Adam.
 Dont use learning decay from the start at choosing your hyperparameters. Try first and check if you need decay or not.

All the above algorithms we have discussed is a first order optimization.

Second order optimization
 Use gradient and Hessian to from quadratic approximation.
 Step to the minima of the approximation.
 What is nice about this update?
 It doesn't has a learning rate in some of the versions.
 But its unpractical for deep learning
 Has O(N^2) elements.
 Inverting takes O(N^3).

LBFGS is a version of second order optimization
 Works with batch optimization but not with minibatches.

In practice first use ADAM and if it didn't work try LBFGS.

Some says all the famous deep architectures uses SGS + Nestrov momentum


Regularization
 So far we have talked about reducing the training error, but we care about most is how our model will handle unseen data!
 What if the gab of the error between training data and validation data are too large?
 This error is called high variance.

Model Ensembles:
 Algorithm:
 Train multiple independent models of the same architecture with different initializations.
 At test time average their results.
 It can get you extra 2% performance.
 It reduces the generalization error.
 You can use some snapshots of your NN at the training ensembles them and take the results.
 Algorithm:
 Regularization solves the high variance problem. We have talked about L1, L2 Regularization.
 Some Regularization techniques are designed for only NN and can do better.

Drop out:
 In each forward pass, randomly set some of the neurons to zero. Probability of dropping is a hyperparameter that are 0.5 for almost cases.
 So you will chooses some activation and makes them zero.
 It works because:
 It forces the network to have redundant representation; prevent coadaption of features!
 If you think about this, It ensemble some of the models in the same model!
 At test time we might multiply each dropout layer by the probability of the dropout.
 Sometimes at test time we don't multiply anything and leave it as it is.
 With drop out it takes more time to train.

Data augmentation:
 Another technique that makes Regularization.
 Change the data!
 For example flip the image, or rotate it.
 Example in ResNet:
 Training: Sample random crops and scales:
 Pick random L in range [256,480]
 Resize training image, short side = L
 Sample random 224x244 patch.
 Testing: average a fixed set of crops
 Resize image at 5 scales: {224, 256, 384, 480, 640}
 For each size, use 10 224x224 crops: 4 corners + center + flips
 Apply Color jitter or PCA
 Translation, rotation, stretching.
 Training: Sample random crops and scales:
 Drop connect
 Like drop out idea it makes a regularization.
 Instead of dropping the activation, we randomly zeroing the weights.
 Fractional Max Pooling
 Cool regularization idea. Not commonly used.
 Randomize the regions in which we pool.
 Stochastic depth
 New idea.
 Eliminate layers, instead on neurons.
 Has the similar effect of drop out but its a new idea.

Transfer learning:

Some times your data is overfitted by your model because the data is small not because of regularization.

You need a lot of data if you want to train/use CNNs.

Steps of transfer learning
 Train on a big dataset that has common features with your dataset. Called pretraining.
 Freeze the layers except the last layer and feed your small dataset to learn only the last layer.
 Not only the last layer maybe trained again, you can fine tune any number of layers you want based on the number of data you have

Guide to use transfer learning:

Very Similar dataset very different dataset very little dataset Use Linear classifier on top layer You're in trouble.. Try linear classifier from different stages quite a lot of data Finetune a few layers Finetune a large layers


Transfer learning is the normal not an exception.

08. Deep learning software
 This section changes a lot every year in CS231n due to rabid changes in the deep learning softwares.
 CPU vs GPU
 GPU The graphics card was developed to render graphics to play games or make 3D media,. etc.
 NVIDIA vs AMD
 Deep learning choose NVIDIA over AMD GPU because NVIDIA is pushing research forward deep learning also makes it architecture more suitable for deep learning.
 NVIDIA vs AMD
 CPU has fewer cores but each core is much faster and much more capable; great at sequential tasks. While GPUs has more cores but each core is much slower "dumber"; great for parallel tasks.
 GPU cores needs to work together. and has its own memory.
 Matrix multiplication is from the operations that are suited for GPUs. It has MxN independent operations that can be done on parallel.
 Convolution operation also can be paralyzed because it has independent operations.
 Programming GPUs frameworks:

CUDA (NVIDIA only)
 Write clike code that runs directly on the GPU.
 Its hard to build a good optimized code that runs on GPU. Thats why they provided high level APIs.
 Higher level APIs: cuBLAS, cuDNN, etc
 CuDNN has implemented back prop. , convolution, recurrent and a lot more for you!
 In practice you won't write a parallel code. You will use the code implemented and optimized by others!

OpenCl
 Similar to CUDA, but runs on any GPU.
 Usually Slower .
 Haven't much support yet from all deep learning softwares.

CUDA (NVIDIA only)
 There are a lot of courses for learning parallel programming.
 If you aren't careful, training can bottleneck on reading dara and transferring to GPU. So the solutions are:
 Read all the data into RAM. # If possible
 Use SSD instead of HDD
 Use multiple CPU threads to prefetch data!
 While the GPU are computing, a CPU thread will fetch the data for you.
 A lot of frameworks implemented that for you because its a little bit painful!
 GPU The graphics card was developed to render graphics to play games or make 3D media,. etc.

Deep learning Frameworks
 Its super fast moving!
 Currently available frameworks:
 Tensorflow (Google)
 Caffe (UC Berkeley)
 Caffe2 (Facebook)
 Torch (NYU / Facebook)
 PyTorch (Facebook)
 Theano (U monteral)
 Paddle (Baidu)
 CNTK (Microsoft)
 MXNet (Amazon)
 The instructor thinks that you should focus on Tensorflow and PyTorch.
 The point of deep learning frameworks:
 Easily build big computational graphs.
 Easily compute gradients in computational graphs.
 Run it efficiently on GPU (cuDNN  cuBLAS)
 Numpy doesn't run on GPU.
 Most of the frameworks tries to be like NUMPY in the forward pass and then they compute the gradients for you.

Tensorflow (Google)
 Code are two parts:
 Define computational graph.
 Run the graph and reuse it many times.
 Tensorflow uses a static graph architecture.
 Tensorflow variables live in the graph. while the placeholders are feed each run.
 Global initializer function initializes the variables that lives in the graph.
 Use predefined optimizers and losses.
 You can make a full layers with layers.dense function.

Keras (High level wrapper):
 Keras is a layer on top pf Tensorflow, makes common things easy to do.
 So popular!
 Trains a full deep NN in a few lines of codes.
 There are a lot high level wrappers:
 Keras
 TFLearn
 TensorLayer
 tf.layers
#Ships with tensorflow
 tfSlim
#Ships with tensorflow
 tf.contrib.learn
#Ships with tensorflow
 Sonnet
# New from deep mind
 Tensorflow has pretrained models that you can use while you are using transfer learning.
 Tensorboard adds logging to record loss, stats. Run server and get pretty graphs!
 It has distributed code if you want to split your graph on some nodes.
 Tensorflow is actually inspired from Theano. It has the same inspirations and structure.
 Code are two parts:

PyTorch (Facebook)
 Has three layers of abstraction:
 Tensor:
ndarray
but runs on GPU#Like numpy arrays in tensorflow
 Variable: Node in a computational graphs; stores data and gradient
#Like Tensor, Variable, Placeholders
 Variable: Node in a computational graphs; stores data and gradient
 Module: A NN layer; may store state or learnable weights
#Like tf.layers in tensorflow
 Tensor:
 In PyTorch the graphs runs in the same loop you are executing which makes it easier for debugging. This is called a dynamic graph.
 In PyTorch you can define your own autograd functions by writing forward and backward for tensors. Most of the times it will implemented for you.
 Torch.nn is a high level api like keras in tensorflow. You can create the models and go on and on.
 You can define your own nn module!
 Also Pytorch contains optimizers like tensorflow.
 It contains a data loader that wraps a Dataset and provides minbatches, shuffling and multithreading.
 PyTorch contains the best and super easy to use pretrained models
 PyTorch contains Visdom that are like tensorboard. but Tensorboard seems to be more powerful.
 PyTorch is new and still evolving compared to Torch. Its still in beta state.
 PyTorch is best for research.
 Has three layers of abstraction:

Tensorflow builds the graph once, then run them many times (Called static graph)

In each PyTorch iteration we build a new graph (Called dynamic graph)

Static vs dynamic graphs:

Optimization:
 With static graphs, framework can optimize the graph for you before it runs.

Serialization

Static: Once graph is built, can serialize it and run it without the code that built the graph. Ex use the graph in c++

Dynamic: Always need to keep the code around.


Conditional
 Is easier in dynamic graphs. And more complicated in static graphs.

Loops:
 Is easier in dynamic graphs. And more complicated in static graphs.


Tensorflow fold make dynamic graphs easier in Tensorflow through dynamic batching.

Dynamic graph applications include: recurrent networks and recursive networks.

Caffe2 uses static graphs and can train model in python also works on IOS and Android
 Tensorflow/Caffe2 are used a lot in production especially on mobile.
09. CNN architectures

This section talks about the famous CNN architectures. Focuses on CNN architectures that won ImageNet competition since 2012.

These architectures includes: AlexNet, VGG, GoogLeNet, and ResNet.

Also we will discuss some interesting architectures as we go.

The first ConvNet that was made was LeNet5 architectures are:by Yann Lecun at 1998.
 Architecture are:
CONVPOOLCONVPOOLFCFCFC
 Each conv filters was
5x5
applied at stride 1  Each pool was
2x2
applied at stride2
 It was useful in Digit recognition.
 In particular the insight that image features are distributed across the entire image, and convolutions with learnable parameters are an effective way to extract similar features at multiple location with few parameters.
 It contains exactly 5 layers
 Architecture are:

In 2010 Dan Claudiu Ciresan and Jurgen Schmidhuber published one of the very fist implementations of GPU Neural nets. This implementation had both forward and backward implemented on a a NVIDIA GTX 280 graphic processor of an up to 9 layers neural network.

AlexNet (2012):
 ConvNet that started the evolution and wins the ImageNet at 2012.
 Architecture are:
CONV1MAXPOOL1NORM1CONV2MAXPOOL2NORM2CONV3CONV4CONV5MAXPOOL3FC6FC7FC8
 Contains exactly 8 layers the first 5 are Convolutional and the last 3 are fully connected layers.
 AlexNet accuracy error was
16.4%
 For example if the input is 227 x 227 x3 then these are the shapes of the of the outputs at each layer:
 CONV1 (96 11 x 11 filters at stride 4, pad 0)
 Output shape
(55,55,96)
, Number of weights are(11*11*3*96)+96 = 34944
 Output shape
 MAXPOOL1 (3 x 3 filters applied at stride 2)
 Output shape
(27,27,96)
, No Weights
 Output shape
 NORM1
 Output shape
(27,27,96)
, We don't do this any more
 Output shape
 CONV2 (256 5 x 5 filters at stride 1, pad 2)
 MAXPOOL2 (3 x 3 filters at stride 2)
 NORM2
 CONV3 (384 3 x 3 filters ar stride 1, pad 1)
 CONV4 (384 3 x 3 filters ar stride 1, pad 1)
 CONV5 (256 3 x 3 filters ar stride 1, pad 1)
 MAXPOOL3 (3 x 3 filters at stride 2)
 Output shape
(6,6,256)
 Output shape
 FC6 (4096)
 FC7 (4096)
 FC8 (1000 neurons for class score)
 CONV1 (96 11 x 11 filters at stride 4, pad 0)
 Some other details:
 First use of RELU.
 Norm layers but not used any more.
 heavy data augmentation
 Dropout
0.5
 batch size
128
 SGD momentum
0.9
 Learning rate
1e2
reduce by 10 at some iterations  7 CNN ensembles!
 AlexNet was trained on GTX 580 GPU with only 3 GB which wasn't enough to train in one machine so they have spread the feature maps in half. The first AlexNet was distributed!
 Its still used in transfer learning in a lot of tasks.
 Total number of parameters are
60 million

ZFNet (2013)
 Won in 2013 with error 11.7%
 It has the same general structure but they changed a little in hyperparameters to get the best output.
 Also contains 8 layers.
 AlexNet but:

CONV1
: change from (11 x 11 stride 4) to (7 x 7 stride 2) 
CONV3,4,5
: instead of 384, 384, 256 filters use 512, 1024, 512


OverFeat (2013)
 Won the localization in imageNet in 2013
 We show how a multiscale and sliding window approach can be efficiently implemented within a ConvNet. We also introduce a novel deep learning approach to localization by learning to predict object boundaries.

VGGNet (2014) (Oxford)
 Deeper network with more layers.
 Contains 19 layers.
 Won on 2014 with GoogleNet with error 7.3%
 Smaller filters with deeper layers.
 The great advantage of VGG was the insight that multiple 3 × 3 convolution in sequence can emulate the effect of larger receptive fields, for examples 5 × 5 and 7 × 7.
 Used the simple 3 x 3 Conv all through the network.
 3 (3 x 3) filters has the same effect as 7 x 7
 The Architecture contains several CONV layers then POOL layer over 5 times and then the full connected layers.
 It has a total memory of 96MB per image for only forward propagation!
 Most memory are in the earlier layers
 Total number of parameters are 138 million
 Most of the parameters are in the fully connected layers
 Has a similar details in training like AlexNet. Like using momentum and dropout.
 VGG19 are an upgrade for VGG16 that are slightly better but with more memory

GoogleNet (2014)
 Deeper network with more layers.
 Contains 22 layers.
 It has Efficient Inception module.
 Only 5 million parameters! 12x less than AlexNet
 Won on 2014 with VGGNet with error 6.7%
 Inception module:
 Design a good local network topology (network within a network (NiN)) and then stack these modules on top of each other.
 It consists of:
 Apply parallel filter operations on the input from previous layer
 Multiple convs of sizes (1 x 1, 3 x 3, 5 x 5)
 Adds padding to maintain the sizes.
 Pooling operation. (Max Pooling)
 Adds padding to maintain the sizes.
 Multiple convs of sizes (1 x 1, 3 x 3, 5 x 5)
 Concatenate all filter outputs together depthwise.
 Apply parallel filter operations on the input from previous layer
 For example:
 Input for inception module is 28 x 28 x 256
 Then the parallel filters applied:
 (1 x 1), 128 filter
# output shape (28,28,128)
 (3 x 3), 192 filter
# output shape (28,28,192)
 (5 x 5), 96 filter
# output shape (28,28,96)
 (3 x 3) Max pooling
# output shape (28,28,256)
 (1 x 1), 128 filter
 After concatenation this will be
(28,28,672)
 By this design We call Naive it has a big computation complexity.
 The last example will make:
 [1 x 1 conv, 128] ==> 28 * 28 * 128 * 1 * 1 * 256 = 25 Million approx
 [3 x 3 conv, 192] ==> 28 * 28 * 192 *3 *3 * 256 = 346 Million approx
 [5 x 5 conv, 96] ==> 28 * 28 * 96 * 5 * 5 * 256 = 482 Million approx
 In total around 854 Million operation!
 The last example will make:
 Solution: bottleneck layers that use 1x1 convolutions to reduce feature depth.
 Inspired from NiN (Network in network)
 The bottleneck solution will make a total operations of 358M on this example which is good compared with the naive implementation.
 So GoogleNet stacks this Inception module multiple times to get a full architecture of a network that can solve a problem without the Fully connected layers.
 Just to mention, it uses an average pooling layer at the end before the classification step.
 Full architecture:
 In February 2015 Batchnormalized Inception was introduced as Inception V2. Batchnormalization computes the mean and standarddeviation of all feature maps at the output of a layer, and normalizes their responses with these values.
 In December 2015 they introduced a paper "Rethinking the Inception Architecture for Computer Vision" which explains the older inception models well also introducing a new version V3.

The first GoogleNet and VGG was before batch normalization invented so they had some hacks to train the NN and converge well.

ResNet (2015) (Microsoft Research)

152layer model for ImageNet. Winner by 3.57% which is more than human level error.

This is also the very first time that a network of > hundred, even 1000 layers was trained.

Swept all classification and detection competitions in ILSVRC'15 and COCO'15!

What happens when we continue stacking deeper layers on a "plain" Convolutional neural network?
 The deeper model performs worse, but it's not caused by overfitting!
 The learning stops performs well somehow because deeper NN are harder to optimize!

The deeper model should be able to perform at least as well as the shallower model.

A solution by construction is copying the learned layers from the shallower model and setting additional layers to identity mapping.

Residual block:

Microsoft came with the Residual block which has this architecture:

# Instead of us trying To learn a new representation, We learn only Residual Y = (W2* RELU(W1x+b1) + b2) + X

Say you have a network till a depth of N layers. You only want to add a new layer if you get something extra out of adding that layer.

One way to ensure this new (N+1)th layer learns something new about your network is to also provide the input(x) without any transformation to the output of the (N+1)th layer. This essentially drives the new layer to learn something different from what the input has already encoded.
 The other advantage is such connections help in handling the Vanishing gradient problem in very deep networks.


With the Residual block we can now have a deep NN of any depth without the fearing that we can't optimize the network.

ResNet with a large number of layers started to use a bottleneck layer similar to the Inception bottleneck to reduce the dimensions.

Full ResNet architecture:
 Stack residual blocks.
 Every residual block has two 3 x 3 conv layers.
 Additional conv layer at the beginning.
 No FC layers at the end (only FC 1000 to output classes)
 Periodically, double number of filters and downsample spatially using stride 2 (/2 in each dimension)
 Training ResNet in practice:
 Batch Normalization after every CONV layer.
 Xavier/2 initialization from He et al.
 SGD + Momentum (
0.9
)  Learning rate: 0.1, divided by 10 when validation error plateaus
 Minibatch size
256
 Weight decay of
1e5
 No dropout used.
 Stack residual blocks.


Inceptionv4: Resnet + Inception and was founded in 2016.

The complexity comparing over all the architectures:
 VGG: Highest memory, most operations.
 GoogLeNet: most efficient.

ResNets Improvements:
 (2016) Identity Mappings in Deep Residual Networks
 From the creators of ResNet.
 Gives better performance.
 (2016) Wide Residual Networks
 Argues that residuals are the important factor, not depth
 50layer wide ResNet outperforms 152layer original ResNet
 Increasing width instead of depth more computationally efficient (parallelizable)
 (2016) Deep Networks with Stochastic Depth
 Motivation: reduce vanishing gradients and training time through short networks during training.
 Randomly drop a subset of layers during each training pass
 Use full deep network at test time.
 (2016) Identity Mappings in Deep Residual Networks

Beyond ResNets:
 (2017) FractalNet: UltraDeep Neural Networks without Residuals
 Argues that key is transitioning effectively from shallow to deep and residual representations are not necessary.
 Trained with dropping out subpaths
 Full network at test time.
 (2017) Densely Connected Convolutional Networks
 (2017) SqueezeNet: AlexNetlevel Accuracy With 50x Fewer Parameters and <0.5Mb Model Size
 Good for production.
 It is a rehash of many concepts from ResNet and Inception, and show that after all, a better design of architecture will deliver small network sizes and parameters without needing complex compression algorithms.
 (2017) FractalNet: UltraDeep Neural Networks without Residuals

Conclusion:
 ResNet current best default.
 Trend towards extremely deep networks
 In the last couple of years, some models all using the shortcuts like "ResNet" to eaisly flow the gradients.
10. Recurrent Neural networks

Vanilla Neural Networks "Feed neural networks", input of fixed size goes through some hidden units and then go to output. We call it a one to one network.

Recurrent Neural Networks RNN Models:
 One to many
 Example: Image Captioning
 image ==> sequence of words
 Example: Image Captioning
 Many to One
 Example: Sentiment Classification
 sequence of words ==> sentiment
 Example: Sentiment Classification
 Many to many
 Example: Machine Translation
 seq of words in one language ==> seq of words in another language
 Example: Video classification on frame level
 Example: Machine Translation
 One to many

RNNs can also work for NonSequence Data (One to One problems)
 It worked in Digit classification through taking a series of "glimpses"
 "Multiple Object Recognition with Visual Attention", ICLR 2015.
 It worked on generating images one piece at a time
 i.e generating a captcha
 It worked in Digit classification through taking a series of "glimpses"

So what is a recurrent neural network?

Recurrent core cell that take an input x and that cell has an internal state that are updated each time it reads an input.

The RNN block should return a vector.

We can process a sequence of vectors x by applying a recurrence formula at every time step:

h[t] = fw (h[t1], x[t]) # Where fw is some function with parameters W
 The same function and the same set of parameters are used at every time step.


(Vanilla) Recurrent Neural Network:

h[t] = tanh (W[h,h]*h[t1] + W[x,h]*x[t]) # Then we save h[t] y[t] = W[h,y]*h[t]
 This is the simplest example of a RNN.


RNN works on a sequence of related data.


Recurrent NN Computational graph:

h0
are initialized to zero.  Gradient of
W
is the sum of all theW
gradients that has been calculated!  A many to many graph:
 Also the last is the sum of all losses and the weights of Y is one and is updated through summing all the gradients!
 A many to one graph:
 A one to many graph:
 sequence to sequence graph:
 Encoder and decoder philosophy.


Examples:
 Suppose we are building words using characters. We want a model to predict the next character of a sequence. Lets say that the characters are only
[h, e, l, o]
and the words are [hello] Training:
 Only the third prediction here is true. The loss needs to be optimized.
 We can train the network by feeding the whole word(s).
 Testing time:
 At test time we work with a character by character. The output character will be the next input with the other saved hidden activations.
 This link contains all the code but uses Truncated Backpropagation through time as we will discuss.
 Training:
 Suppose we are building words using characters. We want a model to predict the next character of a sequence. Lets say that the characters are only

Backpropagation through time Forward through entire sequence to compute loss, then backward through entire sequence to compute gradient.
 But if we choose the whole sequence it will be so slow and take so much memory and will never converge!

So in practice people are doing "Truncated Backpropagation through time" as we go on we Run forward and backward through chunks of the sequence instead of whole sequence
 Then Carry hidden states forward in time forever, but only backpropagate for some smaller number of steps.

Example on image captioning:
 They use
token to finish running.  The biggest dataset for image captioning is Microsoft COCO.
 They use

Image Captioning with Attention is a project in which when the RNN is generating captions, it looks at a specific part of the image not the whole image.
 Image Captioning with Attention technique is also used in "Visual Question Answering" problem

Multilayer RNNs is generally using some layers as the hidden layer that are feed into again. LSTM is a multilayer RNNs.

Backward flow of gradients in RNN can explode or vanish. Exploding is controlled with gradient clipping. Vanishing is controlled with additive interactions (LSTM)

LSTM stands for Long Short Term Memory. It was designed to help the vanishing gradient problem on RNNs.
 It consists of:
 f: Forget gate, Whether to erase cell
 i: Input gate, whether to write to cell
 g: Gate gate (?), How much to write to cell
 o: Output gate, How much to reveal cell
 The LSTM gradients are easily computed like ResNet
 The LSTM is keeping data on the long or short memory as it trains means it can remember not just the things from last layer but layers.
 It consists of:

Highway networks is something between ResNet and LSTM that is still in research.

Better/simpler architectures are a hot topic of current research

Better understanding (both theoretical and empirical) is needed.

RNN is used for problems that uses sequences of related inputs more. Like NLP and Speech recognition.
11. Detection and Segmentation

So far we are talking about image classification problem. In this section we will talk about Segmentation, Localization, Detection.

Semantic Segmentation

We want to Label each pixel in the image with a category label.

As you see the cows in the image, Semantic Segmentation Don't differentiate instances, only care about pixels.

The first idea is to use a sliding window. We take a small window size and slide it all over the picture. For each window we want to label the center pixel.
 It will work but its not a good idea because it will be computational expensive!
 Very inefficient! Not reusing shared features between overlapping patches.
 In practice nobody uses this.

The second idea is designing a network as a bunch of Convolutional layers to make predictions for pixels all at once!
 Input is the whole image. Output is the image with each pixel labeled.
 We need a lot of labeled data. And its very expensive data.
 It needs a deep Conv. layers.
 The loss is cross entropy between each pixel provided.
 Data augmentation are good here.
 The problem with this implementation that convolutions at original image resolution will be very expensive.
 So in practice we don't see something like this right now.

The third idea is based on the last idea. The difference is that we are downsampling and upsampling inside the network.

We downsample because using the whole image as it is very expensive. So we go on multiple layers downsampling and then upsampling in the end.

Downsampling is an operation like Pooling and strided convolution.

Upsampling is like "Nearest Neighbor" or "Bed of Nails" or "Max unpooling"

Nearest Neighbor example:

Input: 1 2 Output: 1 1 2 2 3 4 1 1 2 2 3 3 4 4 3 3 4 4


Bed of Nails example:

Input: 1 2 Output: 1 0 2 0 3 4 0 0 0 0 3 0 4 0 0 0 0 0


Max unpooling is depending on the earlier steps that was made by max pooling. You fill the pixel where max pooling took place and then fill other pixels by zero.


Max unpooling seems to be the best idea for upsampling.

There are an idea of Learnable Upsampling called "Transpose Convolution"
 Rather than making a convolution we make the reverse.
 Also called:
 Upconvolution.
 Fractionally strided convolution
 Backward strided convolution
 Learn the artimitic of the upsampling please refer to chapter 4 in this paper.



Classification + Localization:
 In this problem we want to classify the main object in the image and its location as a rectangle.
 We assume there are one object.
 We will create a multi task NN. The architecture are as following:
 Convolution network layers connected to:
 FC layers that classify the object.
# The plain classification problem we know
 FC layers that connects to a four numbers
(x,y,w,h)
 We treat Localization as a regression problem.
 FC layers that classify the object.
 Convolution network layers connected to:
 This problem will have two losses:
 Softmax loss for classification
 Regression (Linear loss) for the localization (L2 loss)
 Loss = SoftmaxLoss + L2 loss
 Often the first Conv layers are pretrained NNs like AlexNet!
 This technique can be used in so many other problems like: Human Pose Estimation.

Object Detection
 A core idea of computer vision. We will talk by details in this problem.
 The difference between "Classification + Localization" and this problem is that here we want to detect one or mode different objects and its locations!
 First idea is to use a sliding window
 Worked well and long time.
 The steps are:
 Apply a CNN to many different crops of the image, CNN classifies each crop as object or background.
 The problem is we need to apply CNN to huge number of locations and scales, very computationally expensive!
 The brute force sliding window will make us take thousands of thousands of time.
 Region Proposals will help us deciding which region we should run our NN at:
 Find blobby image regions that are likely to contain objects.
 Relatively fast to run; e.g. Selective Search gives 1000 region proposals in a few seconds on CPU
 So now we can apply one of the Region proposals networks and then apply the first idea.
 There is another idea which is called RCNN
 The idea is bad because its taking parts of the image With Region Proposals if different sizes and feed it to CNN after scaling them all to one size. Scaling is bad
 Also its very slow.
 Fast RCNN is another idea that developed on RCNN
 It uses one CNN to do everything.
 Faster RCNN does its own region proposals by Inserting Region Proposal Network (RPN) to predict proposals from features.
 The fastest of the RCNNs.
 Another idea is Detection without Proposals: YOLO / SSD
 YOLO stands for you only look once.
 YOLO/SDD is two separate algorithms.
 Faster but not as accurate.
 Takeaways
 Faster RCNN is slower but more accurate.
 SSD/YOLO is much faster but not as accurate.

Denese Captioning
 Denese Captioning is "Object Detection + Captioning"
 Paper that covers this idea can be found here.

Instance Segmentation
 This is like the full problem.
 Rather than we want to predict the bounding box, we want to know which pixel label but also distinguish them.
 There are a lot of ideas.
 There are a new idea "Mask RCNN"
 Like RCNN but inside it we apply the Semantic Segmentation
 There are a lot of good results out of this paper.
 It sums all the things that we have discussed in this lecture.
 Performance of this seems good.
12. Visualizing and Understanding

We want to know what's going on inside ConvNets?

People want to trust the black box (CNN) and know how it exactly works and give and good decisions.

A first approach is to visualize filters of the first layer.
 Maybe the shape of the first layer filter is 5 x 5 x 3, and the number of filters are 16. Then we will have 16 different "colored" filter images.
 It turns out that these filters learns primitive shapes and oriented edges like the human brain does.
 These filters really looks the same on each Conv net you will train, Ex if you tried to get it out of AlexNet, VGG, GoogleNet, or ResNet.
 This will tell you what is the first convolution layer is looking for in the image.

We can visualize filters from the next layers but they won't tell us anything.
 Maybe the shape of the first layer filter is 5 x 5 x 20, and the number of filters are 16. Then we will have 16*20 different "gray" filter images.

In AlexNet, there was some FC layers in the end. If we took the 4096dimensional feature vector for an image, and collecting these feature vectors.
 If we made a nearest neighbors between these feature vectors and get the real images of these features we will get something very good compared with running the KNN on the images directly!
 This similarity tells us that these CNNs are really getting the semantic meaning of these images instead of on the pixels level!
 We can make a dimensionality reduction on the 4096 dimensional feature and compress it to 2 dimensions.
 This can be made by PCA, or tSNE.
 tSNE are used more with deep learning to visualize the data. Example can be found here.

We can Visualize the activation maps.
 For example if CONV5 feature map is 128 x 13 x 13, We can visualize it as 128 13 x 13 grayscale images.
 One of these features are activated corresponding to the input, so now we know that this particular map are looking for something.
 Its done by Yosinski et. More info are here.

There are something called Maximally Activating Patches that can help us visualize the intermediate features in Convnets
 The steps of doing this is as following:
 We choose a layer then a neuron
 Ex. We choose Conv5 in AlexNet which is 128 x 13 x 13 then pick channel (Neuron) 17/128
 Run many images through the network, record values of chosen channel.
 Visualize image patches that correspond to maximal activations.
 We will find that each neuron is looking into a specific part of the image.
 Extracted images are extracted using receptive field.
 We choose a layer then a neuron
 The steps of doing this is as following:

Another idea is Occlusion Experiments
 We mask part of the image before feeding to CNN, draw heatmap of probability (Output is true) at each mask location
 It will give you the most important parts of the image in which the Conv. Network has learned from.

Saliency Maps tells which pixels matter for classification
 Like Occlusion Experiments but with a completely different approach
 We Compute gradient of (unnormalized) class score with respect to image pixels, take absolute value and max over RGB channels. It will get us a gray image that represents the most important areas in the image.
 This can be used for Semantic Segmentation sometimes.

(guided) backprop Makes something like Maximally Activating Patches but unlike it gets the pixels in which we are caring of.
 In this technique choose a channel like Maximally Activating Patches and then compute gradient of neuron value with respect to image pixels
 Images come out nicer if you only backprop positive gradients through each RELU (guided backprop)

Gradient Ascent

Generate a synthetic image that maximally activates a neuron.

Reverse of gradient decent. Instead of taking the minimum it takes the maximum.

We want to maximize the neuron with the input image. So here instead we are trying to learn the image that maximize the activation:

# R(I) is Natural image regularizer, f(I) is the neuron value. I *= argmax(f(I)) + R(I)


Steps of gradient ascent
 Initialize image to zeros.
 Forward image to compute current scores.
 Backprop to get gradient of neuron value with respect to image pixels.
 Make a small update to the image

R(I)
may equal to L2 of generated image. 
To get a better results we use a better regularizer:
 penalize L2 norm of image; also during optimization periodically:
 Gaussian blur image
 Clip pixels with small values to 0
 Clip pixels with small gradients to 0
 penalize L2 norm of image; also during optimization periodically:

A better regularizer makes out images cleaner!

The results in the latter layers seems to mean something more than the other layers.


We can fool CNN by using this procedure:
 Start from an arbitrary image.
# Random picture based on nothing.
 Pick an arbitrary class.
# Random class
 Modify the image to maximize the class.
 Repeat until network is fooled.
 Start from an arbitrary image.

Results on fooling the network is pretty surprising!
 For human eyes they are the same, but it fooled the network by adding just some noise!

DeepDream: Amplify existing features
 Google released deep dream on their website.
 What its actually doing is the same procedure as fooling the NN that we discussed, but rather than synthesizing an image to maximize a specific neuron, instead try to amplify the neuron activations at some layer in the network.
 Steps:
 Forward: compute activations at chosen layer.
# form an input image (Any image)
 Set gradient of chosen layer equal to its activation.
 Equivalent to
I* = arg max[I] sum(f(I)^2)
 Equivalent to
 Backward: Compute gradient on image.
 Update image.
 Forward: compute activations at chosen layer.
 The code of deep dream is online you can download and check it yourself.

Feature Inversion
 Gives us to know what types of elements parts of the image are captured at different layers in the network.
 Given a CNN feature vector for an image, find a new image that:
 Matches the given feature vector.
 looks natural (image prior regularization)

Texture Synthesis
 Old problem in computer graphics.
 Given a sample patch of some texture, can we generate a bigger image of the same texture?
 There is an algorithm which doesn't depend on NN:
 Wei and Levoy, Fast Texture Synthesis using Treestructured Vector Quantization, SIGGRAPH 2000
 Its a really simple algorithm
 The idea here is that this is an old problem and there are a lot of algorithms that has already solved it but simple algorithms doesn't work well on complex textures!
 An idea of using NN has been proposed on 2015 based on gradient ascent and called it "Neural Texture Synthesis"
 It depends on something called Gram matrix.

Neural Style Transfer = Feature + Gram Reconstruction
 Gatys, Ecker, and Bethge, Image style transfer using Convolutional neural networks, CVPR 2016
 Implementation by pytorch here.

Style transfer requires many forward / backward passes through VGG; very slow!
 Train another neural network to perform style transfer for us!
 Fast Style Transfer is the solution.
 Johnson, Alahi, and FeiFei, Perceptual Losses for RealTime Style Transfer and SuperResolution, ECCV 2016
 https://github.com/jcjohnson/fastneuralstyle

There are a lot of work on these style transfer and it continues till now!

Summary:
 Activations: Nearest neighbors, Dimensionality reduction, maximal patches, occlusion
 Gradients: Saliency maps, class visualization, fooling images, feature inversion
 Fun: DeepDream, Style Transfer
13. Generative models

Generative models are type of Unsupervised learning.

Supervised vs Unsupervised Learning:

Supervised Learning Unsupervised Learning Data structure Data: (x, y), and x is data, y is label Data: x, Just data, no labels! Data price Training data is expensive in a lot of cases. Training data are cheap! Goal Learn a function to map x > y Learn some underlying hidden structure of the data Examples Classification, regression, object detection, semantic segmentation, image captioning Clustering, dimensionality reduction, feature learning, density estimation


Autoencoders are a Feature learning technique.
 It contains an encoder and a decoder. The encoder downsamples the image while the decoder upsamples the features.
 The loss are L2 loss.

Density estimation is where we want to learn/estimate the underlaying distribution for the data!

There are a lot of research open problems in unsupervised learning compared with supervised learning!

Generative Models
 Given training data, generate new samples from same distribution.
 Addresses density estimation, a core problem in unsupervised learning.
 We have different ways to do this:
 Explicit density estimation: explicitly define and solve for the learning model.
 Learn model that can sample from the learning model without explicitly defining it.
 Why Generative Models?
 Realistic samples for artwork, superresolution, colorization, etc
 Generative models of timeseries data can be used for simulation and planning (reinforcement learning applications!)
 Training generative models can also enable inference of latent representations that can be useful as general features
 Taxonomy of Generative Models:
 In this lecture we will discuss: PixelRNN/CNN, Variational Autoencoder, and GANs as they are the popular models in research now.

PixelRNN and PixelCNN
 In a full visible belief network we use the chain rule to decompose likelihood of an image x into product of 1d distributions
p(x) = sum(p(x[i] x[1]x[2]....x[i1]))
 Where p(x) is the Likelihood of image x and x[i] is Probability of i'th pixel value given all previous pixels.
 To solve the problem we need to maximize the likelihood of training data but the distribution is so complex over pixel values.
 Also we will need to define ordering of previous pixels.
 PixelRNN
 Founded by [van der Oord et al. 2016]
 Dependency on previous pixels modeled using an RNN (LSTM)
 Generate image pixels starting from corner
 Drawback: sequential generation is slow! because you have to generate pixel by pixel!
 PixelCNN
 Also Founded by [van der Oord et al. 2016]
 Still generate image pixels starting from corner.
 Dependency on previous pixels now modeled using a CNN over context region
 Training is faster than PixelRNN (can parallelize convolutions since context region values known from training images)
 Generation must still proceed sequentially still slow.
 There are some tricks to improve PixelRNN & PixelCNN.
 PixelRNN and PixelCNN can generate good samples and are still active area of research.
 In a full visible belief network we use the chain rule to decompose likelihood of an image x into product of 1d distributions

Autoencoders
 Unsupervised approach for learning a lowerdimensional feature representation from unlabeled training data.
 Consists of Encoder and decoder.
 The encoder:
 Converts the input x to the features z. z should be smaller than x to get only the important values out of the input. We can call this dimensionality reduction.
 The encoder can be made with:
 Linear or non linear layers (earlier days days)
 Deep fully connected NN (Then)
 RELU CNN (Currently we use this on images)
 The decoder:
 We want the encoder to map the features we have produced to output something similar to x or the same x.
 The decoder can be made with the same techniques we made the encoder and currently it uses a RELU CNN.
 The encoder is a conv layer while the decoder is deconv layer! Means Decreasing and then increasing.
 The loss function is L2 loss function:

L[i] = y[i]  y'[i]^2
 After training we though away the decoder.
# Now we have the features we need
 After training we though away the decoder.

 We can use this encoder we have to make a supervised model.
 The value of this it can learn a good feature representation to the input you have.
 A lot of times we will have a small amount of data to solve problem. One way to tackle this is to use an Autoencoder that learns how to get features from images and train your small dataset on top of that model.
 The question is can we generate data (Images) from this Autoencoder?

Variational Autoencoders (VAE)
 Probabilistic spin on Autoencoders  will let us sample from the model to generate data!
 We have z as the features vector that has been formed using the encoder.
 We then choose prior p(z) to be simple, e.g. Gaussian.
 Reasonable for hidden attributes: e.g. pose, how much smile.

Conditional p(x z) is complex (generates image) => represent with neural network 
But we cant compute integral for P(z)p(x z)dz as the following equation:  After resolving all the equations that solves the last equation we should get this:
 Variational Autoencoder are an approach to generative models but Samples blurrier and lower quality compared to stateoftheart (GANs)
 Active areas of research:
 More flexible approximations, e.g. richer approximate posterior instead of diagonal Gaussian
 Incorporating structure in latent variables

Generative Adversarial Networks (GANs)

GANs don't work with any explicit density function!

Instead, take gametheoretic approach: learn to generate from training distribution through 2player game.

Yann LeCun, who oversees AI research at Facebook, has called GANs:

The coolest idea in deep learning in the last 20 years


Problem: Want to sample from complex, highdimensional training distribution. No direct way to do this as we have discussed!

Solution: Sample from a simple distribution, e.g. random noise. Learn transformation to training distribution.

So we create a noise image which are drawn from simple distribution feed it to NN we will call it a generator network that should learn to transform this into the distribution we want.

Training GANs: Twoplayer game:
 Generator network: try to fool the discriminator by generating reallooking images.
 Discriminator network: try to distinguish between real and fake images.

If we are able to train the Discriminator well then we can train the generator to generate the right images.

The loss function of GANs as minimax game are here:

The label of the generator network will be 0 and the real images are 1.

To train the network we will do:
 Gradient ascent on discriminator.
 Gradient ascent on generator but with different loss.

You can read the full algorithm with the equations here:

Aside: Jointly training two networks is challenging, can be unstable. Choosing objectives with better loss landscapes helps training is an active area of research.

Convolutional Architectures:
 Generator is an upsampling network with fractionallystrided convolutions Discriminator is a Convolutional network.
 Guidelines for stable deep Conv GANs:
 Replace any pooling layers with strided convs (discriminator) and fractionalstrided convs with (Generator).
 Use batch norm for both networks.
 Remove fully connected hidden layers for deeper architectures.
 Use RELU activation in generator for all layers except the output which uses Tanh
 Use leaky RELU in discriminator for all the layers.

2017 is the year of the GANs! it has exploded and there are some really good results.

Active areas of research also is GANs for all kinds of applications.

The GAN zoo can be found here: https://github.com/hindupuravinash/theganzoo

Tips and tricks for using GANs: https://github.com/soumith/ganhacks

NIPS 2016 Tutorial GANs: https://www.youtube.com/watch?v=AJVyzd0rqdc

14. Deep reinforcement learning
 This section contains a lot of math.
 Reinforcement learning problems are involving an agent interacting with an environment, which provides numeric reward signals.
 Steps are:
 Environment –> State
s[t]
–> Agent –> Actiona[t]
–> Environment –>Reward r[t]
+ Next states[t+1]
–> Agent –> and so on..
 Environment –> State
 Our goal is learn how to take actions in order to maximize reward.
 An example is Robot Locomotion:
 Objective: Make the robot move forward
 State: Angle and position of the joints
 Action: Torques applied on joints
 1 at each time step upright + forward movement
 Another example is Atari Games:
 Deep learning has a good state of art in this problem.
 Objective: Complete the game with the highest score.
 State: Raw pixel inputs of the game state.
 Action: Game controls e.g. Left, Right, Up, Down
 Reward: Score increase/decrease at each time step
 Go game is another example which AlphaGo team won in the last year (2016) was a big achievement for AI and deep learning because the problem was so hard.
 We can mathematically formulate the RL (reinforcement learning) by using **Markov Decision Process**

Markov Decision Process
 Defined by (
S
,A
,R
,P
,Y
) where:
S
: set of possible states. 
A
: set of possible actions 
R
: distribution of reward given (state, action) pair 
P
: transition probability i.e. distribution over next state given (state, action) pair
Y
: discount factor# How much we value rewards coming up soon verses later on.


 Algorithm:
 At time step
t=0
, environment samples initial states[0]
 Then, for t=0 until done:
 Agent selects action
a[t]
 Environment samples reward from
R
with (s[t]
,a[t]
)  Environment samples next state from
P
with (s[t]
,a[t]
)  Agent receives reward
r[t]
and next states[t+1]
 Agent selects action
 At time step
 A policy
pi
is a function from S to A that specifies what action to take in each state.  Objective: find policy
pi*
that maximizes cumulative discounted reward:Sum(Y^t * r[t], t>0)
 For example:
 Solution would be:
 Defined by (
 The value function at state
s
, is the expected cumulative reward from following the policy from states
:V[pi](s) = Sum(Y^t * r[t], t>0) given s0 = s, pi
 The Qvalue function at state s and action
a
, is the expected cumulative reward from taking actiona
in states
and then following the policy:Q[pi](s,a) = Sum(Y^t * r[t], t>0) given s0 = s,a0 = a, pi
 The optimal Qvalue function
Q*
is the maximum expected cumulative reward achievable from a given (state, action) pair:Q*[s,a] = Max(for all of pi on (Sum(Y^t * r[t], t>0) given s0 = s,a0 = a, pi))
 Bellman equation
 Important thing is RL.
 Given any state action pair (s,a) the value of this pair is going to be the reward that you are going to get r plus the value of the state that you end in.
Q*[s,a] = r + Y * max Q*(s',a') given s,a # Hint there is no policy in the equation
 The optimal policy
pi*
corresponds to taking the best action in any state as specified byQ*
 We can get the optimal policy using the value iteration algorithm that uses the Bellman equation as an iterative update
 Due to the huge space dimensions in real world applications we will use a function approximator to estimate
Q(s,a)
. E.g. a neural network! this is called Qlearning Any time we have a complex function that we cannot represent we use Neural networks!

Qlearning
 The first deep learning algorithm that solves the RL.
 Use a function approximator to estimate the actionvalue function
 If the function approximator is a deep neural network => deep qlearning
 The loss function:
 Now lets consider the "Playing Atari Games" problem:
 Our total reward are usually the reward we are seeing in the top of the screen.
 Qnetwork Architecture:
 Learning from batches of consecutive samples is a problem. If we recorded a training data and set the NN to work with it, if the data aren't enough we will go to a high bias error. so we should use "experience replay" instead of consecutive samples where the NN will try the game again and again until it masters it.
 Continually update a replay memory table of transitions (
s[t]
,a[t]
,r[t]
,s[t+1]
) as game (experience) episodes are played.  Train Qnetwork on random minibatches of transitions from the replay memory, instead of consecutive samples.
 The full algorithm:
 A video that demonstrate the algorithm on Atari game can be found here: "https://www.youtube.com/watch?v=V1eYniJ0Rnk"

Policy Gradients
 The second deep learning algorithm that solves the RL.
 The problem with Qfunction is that the Qfunction can be very complicated.
 Example: a robot grasping an object has a very highdimensional state.
 But the policy can be much simpler: just close your hand.
 Can we learn a policy directly, e.g. finding the best policy from a collection of policies?
 Policy Gradients equations:
 Converges to a local minima of
J(ceta)
, often good enough!  REINFORCE algorithm is the algorithm that will get/predict us the best policy
 Equation and intuition of the Reinforce algorithm:
 the problem was high variance with this equation can we solve this?
 variance reduction is an active research area!
 Recurrent Attention Model (RAM) is an algorithm that are based on REINFORCE algorithm and is used for image classification problems:
 Take a sequence of "glimpses" selectively focusing on regions of the image, to predict class
 Inspiration from human perception and eye movements.
 Saves computational resources => scalability
 If an image with high resolution you can save a lot of computations
 Able to ignore clutter / irrelevant parts of image
 RAM is used now in a lot of tasks: including finegrained image recognition, image captioning, and visual questionanswering
 Take a sequence of "glimpses" selectively focusing on regions of the image, to predict class
 AlphaGo are using a mix of supervised learning and reinforcement learning, It also using policy gradients.
 A good course from Standford on deep reinforcement learning
 http://web.stanford.edu/class/cs234/index.html
 https://www.youtube.com/playlist?list=PLkFD6_40KJIwTmSbCv9OVJB3YaO4sFwkX
 A good course on deep reinforcement learning (2017)
 http://rll.berkeley.edu/deeprlcourse/
 https://www.youtube.com/playlist?list=PLkFD6_40KJIznC9CDbVTjAF2oyt8_VAe3
 A good article
 https://www.kdnuggets.com/2017/09/5waysgetstartedreinforcementlearning.html
15. Efficient Methods and Hardware for Deep Learning
 The original lecture was given by Song Han a PhD Candidate at standford.
 Deep Conv nets, Recurrent nets, and deep reinforcement learning are shaping a lot of applications and changing a lot of our lives.
 Like self driving cars, machine translations, alphaGo and so on.
 But the trend now says that if we want a high accuracy we need a larger (Deeper) models.
 The model size in ImageNet competation from 2012 to 2015 has increased 16x to achieve a high accurecy.
 Deep speech 2 has 10x training operations than deep speech 1 and thats in only one year!
# At Baidu
 There are three challenges we got from this

Model Size
 Its hard to deploy larger models on our PCs, mobiles, or cars.

Speed
 ResNet152 took 1.5 weeks to train and give the 6.16% accurecy!
 Long training time limits ML researcher's productivity

Energy Efficiency
 AlphaGo: 1920 CPUs and 280 GPUs. $3000 electric bill per game
 If we use this on our mobile it will drain the battery.
 Google mentioned in thier blog if all the users used google speech for 3 minutes, they have to double thier datacenter!
 Where is the Energy Consumed?
 larger model => more memory reference => more energy

Model Size
 We can improve the Efficiency of Deep Learning by AlgorithmHardware CoDesign.
 From both the hardware and the algorithm perspectives.
 Hardware 101: the Family

General Purpose
# Used for any hardware
 CPU
# Latency oriented, Single strong threaded like a single elepahnt
 GPU
# Throughput oriented, So many small threads like a lot of ants
 GPU
 GPGPU

Specialized HW
#Tuned for a domain of applications
 FPGA# Programmable logic, Its cheaper but less effiecnet`
 ASIC
# Fixed logic, Designed for a certian applications (Can be designed for deep learning applications)

Specialized HW
 CPU

General Purpose
 Hardware 101: Number Representation
 Numbers in computer are represented with a discrete memory.
 Its very good and energy efficent for hardware to go from 32 bit to 16 bit in float point operations.
 Part 1: Algorithms for Efficient Inference

Pruning neural networks
 Idea is can we remove some of the weights/neurons and the NN still behave the same?
 In 2015 Han made AlexNet parameters from 60 million to 6 Million! by using the idea of Pruning.
 Pruning can be applied to CNN and RNN, iteratively it will reach the same accurecy as the original.
 Pruning actually happends to humans:
 Newborn(50 Trillion Synapses) ==> 1 year old(1000 Trillion Synapses) ==> Adolescent(500 Trillion Synapses)
 Algorithm:
 Get Trained network.
 Evaluate importance of neurons.
 Remove the least important neuron.
 Fine tune the network.
 If we need to continue Pruning we go to step 2 again else we stop.

Weight Sharing
 The idea is that we want to make the numbers is our models less.
 Trained Quantization:
 Example: all weight values that are 2.09, 2.12, 1.92, 1.87 will be replaced by 2
 To do that we can make k means clustering on a filter for example and reduce the numbers in it. By using this we can also reduce the number of operations that are used from calculating the gradients.
 After Trained Quantization the Weights are Discrete.
 Trained Quantization can reduce the number of bits we need for a number in each layer significantly.
 Pruning + Trained Quantization can Work Together to reduce the size of the model.
 Huffman Coding
 We can use Huffman Coding to reduce/compress the number of bits of the weight.
 Infrequent weights: use more bits to represent.
 Frequent weights: use less bits to represent.
 Using Pruning + Trained Quantization + Huffman Coding is called deep compression.

SqueezeNet
 All the models we have talked about till now was using a pretrained models. Can we make a new arcitecutre that saves memory and computations?
 SqueezeNet gets the alexnet accurecy with 50x fewer parameters and 0.5 model size.
 SqueezeNet can even be further compressed by applying deep compression on them.
 Models are now more energy efficient and has speed up a lot.
 Deep compression was applied in Industry through facebook and Baidu.

SqueezeNet

Quantization
 Algorithm (Quantizing the Weight and Activation):
 Train with float.
 Quantizing the weight and activation:
 Gather the statistics for weight and activation.
 Choose proper radix point position.
 Finetune in float format.
 Convert to fixedpoint format.
 Algorithm (Quantizing the Weight and Activation):

Low Rank Approximation
 Is another size reduction algorithm that are used for CNN.
 Idea is decompose the conv layer and then try both of the composed layers.

Binary / Ternary Net
 Can we only use three numbers to represent weights in NN?
 The size will be much less with only 1, 0, 1.
 This is a new idea that was published in 2017 "Zhu, Han, Mao, Dally. Trained Ternary Quantization, ICLR'17"
 Works after training.
 They have tried it on AlexNet and it has reached almost the same error as AlexNet.
 Number of operation will increase per register: https://xnor.ai/

Winograd Transformation
 Based on 3x3 WINOGRAD Convolutions which makes less operations than the ordiany convolution
 cuDNN 5 uses the WINOGRAD Convolutions which has improved the speed.

Pruning neural networks
 Part 2: Hardware for Efficient Inference
 There are a lot of ASICs that we developed for deep learning. All in which has the same goal of minimize memory access.
 Eyeriss MIT
 DaDiannao
 TPU Google (Tensor processing unit)
 It can be put to replace the disk in the server.
 Up to 4 cards per server.
 Power consumed by this hardware is a lot less than a GPU and the size of the chip is less.
 EIE Standford
 By Han at 2016 [et al. ISCA'16]
 We don't save zero weights and make quantization for the numbers from the hardware.
 He says that EIE has a better Throughput and energy efficient.
 There are a lot of ASICs that we developed for deep learning. All in which has the same goal of minimize memory access.
 Part 3: Algorithms for Efficient Training

Parallelization

Data Parallel – Run multiple inputs in parallel
 Ex. Run two images in the same time!
 Run multiple training examples in parallel.
 Limited by batch size.
 Gradients have to be applied by a master node.

Model Parallel
 Split up the Model – i.e. the network
 Split model over multiple processors By layer.
 HyperParameter Parallel
 Try many alternative networks in parallel.
 Easy to get 1664 GPUs training one model in parallel.

Data Parallel – Run multiple inputs in parallel

Mixed Precision with FP16 and FP32
 We have discussed that if we use 16 bit real numbers all over the model the energy cost will be less by x4.
 Can we use a model entirely with 16 bit number? We can partially do this with mixed FP16 and FP32. We use 16 bit everywhere but at some points we need the FP32.
 By example in multiplying FP16 by FP16 we will need FP32.
 After you train the model you can be a near accuracy of the famous models like AlexNet and ResNet.

Model Distillation
 The question is can we use a senior (Good) trained neural network(s) and make them guide a student (New) neural network?
 For more information look at Hinton et al. Dark knowledge / Distilling the Knowledge in a Neural Network
 DSD: DenseSparseDense Training
 Han et al. "DSD: DenseSparseDense Training for Deep Neural Networks", ICLR 2017
 Has a better regularization.
 The idea is Train the model lets call this the Dense, we then apply Pruning to it lets call this sparse.
 DSD produces same model architecture but can find better optimization solution arrives at better local minima, and achieves higher prediction accuracy.
 After the above two steps we go connect the remain connection and learn them again (To dense again).
 This improves the performace a lot in many deep learning models.

Parallelization
 Part 4: Hardware for Efficient Training
 GPUs for training:
 Nvidia PASCAL GP100 (2016)
 Nvidia Volta GV100 (2017)
 Can make mixed precision operations!
 So powerful.
 The new neclar bomb!
 Google Announced "Google Cloud TPU" on May 2017!
 Cloud TPU delivers up to 180 teraflops to train and run machine learning models.
 One of our new largescale translation models used to take a full day to train on 32 of the best commerciallyavailable GPUs—now it trains to the same accuracy in an afternoon using just one eighth of a TPU pod.
 GPUs for training:
 We have moved from PC Era ==> MobileFirst Era ==> AIFirst Era
16. Adversarial Examples and Adversarial Training

What are adversarial examples?
 Since 2013, deep neural networks have matched human performance at..
 Face recognition
 Object recognition
 Captcha recognition
 Because its accuracy was higher than humans, Websites tried to find another solution than Captcha.
 And other tasks..
 Before 2013 no body was surprised if they saw a computer made a mistake! But now the deep learning exists and its so important to know the problems and the causes.
 Adversarial are problems and unusual mistake that deep learning make.
 This topic wasn't hot until deep learning can now do better and better than human!
 An adversarial is an example that has been carefully computed to to be misclassified.
 In a lot of cases the adversarial image isn't changed much compared to the original image from the human perspective.
 History of recent papers:
 So the first story was in 2013. When Szegedy had a CNN that can classify images very well.
 He wanted to understand more about how CNN works to improve it.
 He give an image of an object and by using gradient ascent he tried to update the images so that it can be another object.
 Strangely he found that the result image hasn't changed much from the human perspective!
 If you tried it you won't notify any change and you will think that this is a bug! but it isn't if you go for the image you will notice that they are completely different!
 These mistakes can be found in almost any deep learning algorithm we have studied!
 It turns out that RBF (Radial Basis Network) can resist this.
 Deep Models for Density Estimation can resist this.
 Not just for neural nets can be fooled:
 Linear models
 Logistic regression
 Softmax regression
 SVMs
 Decision trees
 Nearest neighbors
 Linear models
 Since 2013, deep neural networks have matched human performance at..

Why do adversarial happen?
 In the process in trying to understand what is happening, in 2016 they thought it was from overfitting models in the high dimensional data case.
 Because in such high dimensions we could have some random errors which can be found.
 So if we trained a model with another parameters it should not make the same mistake?
 They found that not right. Models are reaching to the same mistakes so it doesn't mean its overfitting.
 In the previous mentioned experiment the found that the problem is caused by systematic thing not a random.
 If they add some vector to an example it would misclassified to any model.
 Maybe they are coming from underfitting not overfitting.
 Modern deep nets are very piecewise linear
 Rectified linear unit
 Carefully tuned sigmoid
# Most of the time we are inside the linear curve
 Maxout
 LSTM
 Relation between the parameter and the output are non linear because it's multiplied together thats what make training NN difficult, while mapping from linear from input and output are linear and much easier.
 In the process in trying to understand what is happening, in 2016 they thought it was from overfitting models in the high dimensional data case.

How can adversarial be used to compromise machine learning systems?
 If we are experimenting how easy a NN to fool, We want to make sure we are actually fooling it not just changing the output class, and if we are attackers we want to make this behavior to the NN (Get hole).
 When we build Adversarial example we use the max norm constrain to perturbation.
 The fast gradient sign method:
 This method comes from the fact that almost all NN are using a linear activations (Like RELU) the assumption we have told before.
 No pixel can be changed more than some amount epsilon.
 Fast way is to take the gradient of the cost you used to train the network with respect to the input and then take the sign of that gradient multiply this by epsilon.
 Equation:
Xdash = x + epslion * (sign of the gradient)
 Where Xdash is the adversarial example and x is the normal example
 So it can be detected by just using the sign (direction) and some epsilon.
 Some attacks are based on ADAM optimizer.
 Adversarial examples are not random noises!
 NN are trained on some distribution and behaves well in that distribution. But if you shift this distribution the NN won't answer the right answers. They will be so easy to fool.
 deep RL can also be fooled.
 Attack of the weights:
 In linear models, We can take the learned weights image, take the signs of the image and add it to any example to force the class of the weights to be true. Andrej Karpathy, "Breaking Linear Classifiers on ImageNet"
 It turns out that some of the linaer models performs well (We cant get advertisal from them easily)
 In particular Shallow RBFs network resist adversarial perturbation # By The fast gradient sign method
 The problem is RBFs doesn't get so much accuracy on the datasets because its just a shallow model and if you tried to get this model deeper the gradients will become zero in almost all the layers.
 RBFs are so difficult to train even with batch norm. algorithm.
 Ian thinks if we have a better hyper parameters or a better optimization algorithm that gradient decent we will be able to train RBFs and solve the adversarial problem!
 In particular Shallow RBFs network resist adversarial perturbation # By The fast gradient sign method
 We also can use another model to fool current model. Ex use an SVM to fool a deep NN.
 For more details follow the paper: "Papernot 2016"
 Transferability Attack
 Target model with unknown weights, machine learning algorithm, training set; maybe non differentiable
 Make your training set from this model using inputs from you, send them to the model and then get outputs from the model
 Train you own model. "Following some table from Papernot 2016"
 Create an Adversarial example on your model.
 Use these examples against the model you are targeting.
 You are almost likely to get good results and fool this target!
 In Transferability Attack to increase your probability by 100% of fooling a network, You can make more than just one model may be five models and then apply them. "(Liu et al, 2016)"
 Adversarial Examples are works for human brain also! for example images that tricks your eyes. They are a lot over the Internet.
 In practice some researches have fooled real models from (MetaMind, Amazon, Google)
 Someone has uploaded some perturbation into facebook and facebook was fooled :D

What are the defenses?
 A lot of defenses Ian tried failed really bad! Including:
 Ensembles
 Weight decay
 Dropout
 Adding noise at train time or at test time
 Removing perturbation with an autoencoder
 Generative modeling
 Universal approximator theorem
 Whatever shape we would like our classification function to have a big enough NN can make it.
 We could have train a NN that detects the Adversarial!
 Linear models & KNN can be fooled easier than NN. Neural nets can actually become more secure than other models. Adversarial trained neural nets have the best empirical success rate on adversarial examples of any machine learning model.
 Deep NNs can be trained with non linear functions but we will just need a good optimization technique or solve the problem with using such linear activator like "RELU"
 A lot of defenses Ian tried failed really bad! Including:

How to use adversarial examples to improve machine learning, even when there is no adversary?
 Universal engineering machine (modelbased optimization)
#Is called Universal engineering machine by Ian
 For example:
 Imagine that we want to design a car that are fast.
 We trained a NN to look at the blueprints of a car and tell us if the blueprint will make us a fast car or not.
 The idea here is to optimize the input to the network so that the output will max this could give us the best blueprint for a car!
 Make new inventions by finding input that maximizes model's predicted performance.
 Right now by using adversarial examples we are just getting the results we don't like but if we have solve this problem we can have the fastest car, the best GPU, the best chair, new drugs…..
 For example:
 The whole adversarial is an active area of research especially defending the network!
 Universal engineering machine (modelbased optimization)
 Conclusion
 Attacking is easy
 Defending is difficult
 Adversarial training provides regularization and semisupervised learning
 The outofdomain input problem is a bottleneck for modelbased optimization generally
 There are a Github code that can make you learn everything about adversarial by code (Built above tensorflow):
 An adversarial example library for constructing attacks, building defenses, and benchmarking both: https://github.com/tensorflow/cleverhans
These Notes was made by Mahmoud Badry @2017