Under review as a conference paper at ICLR 2017

R EGULARIZING N EURAL N ETWORKS BY P ENALIZING
C ONFIDENT O UTPUT D ISTRIBUTIONS

arXiv:1701.06548v1 [] 23 Jan 2017

Gabriel Pereyra ∗ †
Google Brain
pereyra@google.com
Łukasz Kaiser
Google Brain
lukaszkaiser@google.com

George Tucker ∗ †
Google Brain
gjt@google.com

Jan Chorowski
Google Brain
chorowski@google.com

Geoffrey Hinton
University of Toronto & Google Brain
geoffhinton@google.com

A BSTRACT
We systematically explore regularizing neural networks by penalizing low entropy
output distributions. We show that penalizing low entropy output distributions,
which has been shown to improve exploration in reinforcement learning, acts as
a strong regularizer in supervised learning. Furthermore, we connect a maximum
entropy based confidence penalty to label smoothing through the direction of the
KL divergence. We exhaustively evaluate the proposed confidence penalty and
label smoothing on 6 common benchmarks: image classification (MNIST and
Cifar-10), language modeling (Penn Treebank), machine translation (WMT’14
English-to-German), and speech recognition (TIMIT and WSJ). We find that both
label smoothing and the confidence penalty improve state-of-the-art models across
benchmarks without modifying existing hyperparameters, suggesting the wide applicability of these regularizers.

1

I NTRODUCTION

Large neural networks with millions of parameters achieve strong performance on image classification (Szegedy et al., 2015a), machine translation (Wu et al., 2016), language modeling (Jozefowicz
et al., 2016), and speech recognition (Graves et al., 2013). However, despite using large datasets,
neural networks are still prone to overfitting. Numerous techniques have been proposed to prevent
overfitting, including early stopping, L1/L2 regularization (weight decay), dropout (Srivastava et al.,
2014), and batch normalization (Ioffe & Szegedy, 2015). These techniques, along with most other
forms of regularization, act on the hidden activations or weights of a neural network. Alternatively,
regularizing the output distribution of large, deep neural networks has largely been unexplored.
To motivate output regularizers, we can view the knowledge of a model as the conditional distribution it produces over outputs given an input (Hinton et al., 2015) as opposed to the learned values
of its parameters. Given this functional view of knowledge, the probabilities assigned to class labels
that are incorrect (according to the training data) are part of the knowledge of the network. For
example, when shown an image of a BMW, a network that assigns a probability of 10−3 to “Audi”
and 10−9 to “carrot” is clearly better than a network that assigns 10−9 to “Audi” and 10−3 to carrot,
all else being equal. One reason it is better is that the probabilities assigned to incorrect classes are
an indication of how the network generalizes. Distillation (Hinton et al., 2015; Bucilu et al., 2006)
exploits this fact by explicitly training a small network to assign the same probabilities to incorrect
classes as a large network or ensemble of networks that generalizes well. Further, by operating on
the output distribution that has a natural scale rather than on internal weights, whose significance
depends on the values of the other weights, output regularization has the property that it is invariant
to the parameterization of the underlying neural network.
∗
†

Work done as part of the Google Brain Residency Program
Equal Contribution

1

Under review as a conference paper at ICLR 2017

In this paper, we systematically evaluated two output regularizers: a maximum entropy based confidence penalty and label smoothing (uniform and unigram) for large, deep neural networks on 6 common benchmarks: image classification (MNIST and Cifar-10), language modeling (Penn Treebank),
machine translation (WMT’14 English-to-German), and speech recognition (TIMIT and WSJ). We
find that both label smoothing and the confidence penalty improve state-of-the-art models across
benchmarks without modifying existing hyperparameters.

2

R ELATED W ORK

The maximum entropy principle (Jaynes, 1957) has a long history with deep connections to many
areas of machine learning including unsupervised learning, supervised learning, and reinforcement
learning. In supervised learning, we can search for the model with maximum entropy subject to
constraints on empirical statistics, which naturally gives rise to maximum likelihood in log-linear
models (see (Berger et al., 1996) for a review). Deterministic annealing Rose (1998) is a general
approach for optimization that is widely applicable, avoids local minima, and can minimize discrete
objectives, and it can be derived from the maximum entropy principle. Closely related to our work,
Miller et al. (1996) apply deterministic annealing to train multilayer perceptrons, where an entropy
based regularizer is introduced and slowly annealed. However, their focus is avoiding poor initialization and local minima, and while they find that deterministic annealing helps, the improvement
diminishes quickly as the number of hidden units exceeds eight.
In reinforcement learning, encouraging the policy to have an output distribution with high entropy
has been used to improve exploration (Williams & Peng, 1991). This prevents the policy from
converging early and leads to improved performance (Mnih et al., 2016). Penalizing low entropy
has also been used when combining reinforcement learning and supervised learning to train a neural
speech recognition model to learn when to emit tokens (Luo et al., 2016). When learning to emit,
the entropy of the emission policy was added to the training objective and was annealed throughout
training. Indeed, in recent work on reward augmented maximum likelihood (Norouzi et al., 2016),
this entropy augmented reinforcement learning objective played a direct role in linking maximum
likelihood and reinforcement learning objectives.
Penalizing the entropy of a network’s output distribution has not been evaluated for large deep neural
networks in supervised learning, but a closely related idea, label smoothing regularization, has been
shown to improve generalization (Szegedy et al., 2015b). Label smoothing regularization estimates
the marginalized effect of label-dropout during training, reducing overfitting by preventing a network
from assigning full probability to each training example and maintaining a reasonable ratio between
the logits of the incorrect classes. Simply adding label noise has also been shown to be effective
at regularizing neural networks (Xie et al., 2016). Instead of smoothing the labels with a uniform
distribution, as in label smoothing, we can smooth the labels with a teacher model (Hinton et al.,
2015) or the model’s own distribution (Reed et al., 2014). Distillation and self-distillation both
regularize a network by incorporating information about the ratios between incorrect classes.
Virtual adversarial training (VAT) (Miyato et al., 2015) is another promising smoothing regularizer.
However, we did not compare to VAT because it has multiple hyperparameters and the approximated
gradient of the local distributional smoothness can be computed with no more than three pairs of forward and back propagations, which is significantly more computation in grid-searching and training
than the other approaches we compared to.

3

D IRECTLY P ENALIZING C ONFIDENCE

Confident predictions correspond to output distributions that have low entropy. A network is overconfident when it places all probability on a single class in the training set, which is often a symptom
of overfitting (Szegedy et al., 2015b). The confidence penalty constitutes a regularization term that
prevents these peaked distributions, leading to better generalization.
A neural network produces a conditional distribution pθ (y|x) over classes y given an input x
through a softmax function. The entropy of this conditional distribution is given by
2

Under review as a conference paper at ICLR 2017

Dropout

1.0

1.0

Density

0.6

0.6

0.4

0.6

0.4

0.2

0.4

0.2

0.2

0.4

0.6

0.8

Predicted probability

1.0

Confidence penalty

0.8

Density

0.8

Density

0.8

0.0
0.0

Label smoothing

1.0

0.2

0.0
0.0

0.2

0.4

0.6

0.8

Predicted probability

1.0

0.0
0.0

0.2

0.4

0.6

0.8

Predicted probability

1.0

Figure 1: Distribution of the magnitude of softmax probabilities on the MNIST validation set. A
fully-connected, 2-layer, 1024-unit neural network was trained with dropout (left), label smoothing
(center), and the confidence penalty (right). Dropout leads to a softmax distribution where probabilities are either 0 or 1. By contrast, both label smoothing and the confidence penalty lead to smoother
output distributions, which results in better generalization.

H(pθ (y|x)) = −

X

pθ (y i |x) log(pθ (y i |x)).

i

To penalize confident output distributions, we add the negative entropy to the negative log-likelihood
during training
L(θ) = −

X

log pθ (y|x) − βH(pθ (y|x)),

where β controls the strength of the confidence penalty. Notably, the gradient of the entropy term
with respect to the logits is simple to compute. Denoting the ith logit by z i , then
∂H(pθ )
= pθ (y i |x) (− log pθ (y i |x) − H(pθ )) ,
∂z i
which is the weighted deviation from the mean.
3.1

A NNEALING AND T HRESHOLDING THE C ONFIDENCE P ENALTY

In reinforcement learning, penalizing low entropy distributions prevents a policy network from converging early and encourages exploration. However, in supervised learning, we typically want quick
convergence, while preventing overfitting near the end of training, suggesting a confidence penalty
that is weak at the beginning of training and strong near convergence. A simple way to achieve this
is to anneal the confidence penalty.
Another way to strengthen the confidence penalty as training progresses is to only penalize output
distributions when they are below a certain entropy threshold. We can achieve this by adding a hinge
loss to the confidence penalty, leading to an objective of the form
L(θ) = −

X

log pθ (y|x) − β max(0, Γ − H(pθ (y|x)),

where Γ is the entropy threshold below which we begin applying the confidence penalty.
Initial experiments suggest that thresholding the confidence penalty leads to faster convergence at
the cost of introducing an extra hyper-parameter. For the majority of our experiments, we were
able to achieve comparable performance without using the thresholded version. For the sake of
simplicity, we focus on the single hyper-parameter version in our experiments.
3

Under review as a conference paper at ICLR 2017

3.2

C ONNECTION TO L ABEL S MOOTHING

Label smoothing estimates the marginalized effect of label noise during training. When the prior
label distribution is uniform, label smoothing is equivalent to adding the KL divergence between the
uniform distribution u and the network’s predicted distribution pθ to the negative log-likelihood
L(θ) = −

X

log pθ (y|x) − DKL (ukpθ (y|x)).

By reversing the direction of the KL divergence, DKL (pθ (y|x)ku), we recover the confidence
penalty. This interpretation suggests further confidence regularizers that use alternative target distributions instead of the uniform distribution. We leave the exploration of these regularizers to future
work.

4

E XPERIMENTS

We evaluated the confidence penalty and label smoothing on MNIST and CIFAR-10 for image classification, Penn Treebank for language modeling, WMT’14 English-to-German for machine translation, and TIMIT and WSJ for speech recognition. All models were implemented using TensorFlow
(Abadi et al., 2016) and trained on NVIDIA Tesla K40 or K80 GPUs.
4.1
4.1.1

I MAGE C LASSIFICATION
MNIST

As a preliminary experiment, we evaluated the approaches on the standard MNIST digit recognition
task. We used the standard split into 60k training images and 10k testing images. We use the last 10k
images of the training set as a held-out validation set for hyper-parameter tuning and then retrained
the models on the entire dataset with the best configuration.
We trained fully-connected, ReLu activation neural networks with 1024 units per layer and two
hidden layers. Weights were initialized from a normal distribution with standard deviation 0.01.
Models were optimized with stochastic gradient descent with a constant learning rate 0.05 (except
for dropout where we set the learning rate to 0.001).
For label smoothing, we varied the smoothing parameter in the range [0.05, 0.1, 0.2, 0.3, 0.4, 0.5],
and found 0.1 to work best for both methods. For the confidence penalty, we varied the weight
values over [0.1, 0.3, 0.5, 1.0, 2.0, 4.0, 8.0] and found a confidence penalty weight of 1.0 to work
best.
We also plotted the norm of the gradient as training progressed in Figure 2. We observed that label
smoothing and confidence penalty had smaller gradient norms and converged more quickly than
models regularized with dropout. If the output distributions is peaked on a misclassified example,
the model receives a large gradient. This may explain why the regularized models have smaller
gradient norms.
Model

Layers

Size

Test

Wan et al. (2013) - Unregularized
Srivastava et al. (2014) - Dropout
Wan et al. (2013) - DropConnect
Srivastava et al. (2014) - MaxNorm + Dropout

2
3
2
2

800
1024
800
8192

1.40%
1.25%
1.20%
0.95%

Dropout
Label Smoothing
Confidence Penalty

2
2
2

1024
1024
1024

1.28 ± 0.06%
1.23 ± 0.06%
1.17 ± 0.06%

Table 1: Test error (%) for permutation-invariant MNIST.

4

Under review as a conference paper at ICLR 2017

4.1.2

CIFAR-10

CIFAR-10 is an image classification dataset consisting of 32x32x3 RGB images of 10 classes. The
dataset is split into 50k training images and 10k testing images. We use the last 5k images of the
training set as a held-out validation set for hyper-parameter tuning, as is common practice.
For our experiments, we used a densely connected convolutional neural network, which represents
the current state-of-the-art on CIFAR-10 (Huang et al., 2016a). We use the small configuration from
(Huang et al., 2016a), which consists of 40-layers, with a growth rate of 12. All models were trained
for 300 epochs, with a batch-size of 50 and a learning rate 0.1. The learning rate was reduced by
a factor of 10 at 150 and 225 epochs. We present results for training without data-augmentation.
We found that the confidence penalty did not lead to improved performance when training with data
augmentation, however neither did other regularization techniques, including dropout.
For our final test scores, we trained on the entire training set. For label smoothing, we tried smoothing parameter values of [0.05, 0.1, 0.2, 0.3, 0.4, 0.5], and found 0.1 to work best. For the confidence
penalty, we performed a grid search over confidence penalty weight values of [0.1, 0.25, 0.5, 1.0,
1.5] and found a confidence penalty weight of 0.1 to work best.

Model

Layers

Parameters

Test

He et al. (2015) - Residual CNN
Huang et al. (2016b) - Stochastic Depth Residual CNN
Larsson et al. (2016) - Fractal CNN
Larsson et al. (2016) - Fractal CNN (Dropout)
Huang et al. (2016a) - Densely Connected CNN
Huang et al. (2016a) - Densely Connected CNN

110
110
21
21
40
100

1.7M
1.7M
38.6M
38.6M
1.0M
7.0M

13.63%
11.66%
10.18%
7.33%
7.00%
5.77%

Densely Connected CNN (Dropout)
Densely Connected CNN (Dropout + Label Smoothing)
Densely Connected CNN (Dropout + Confidence Penalty)

40
40
40

1.0M
1.0M
1.0M

7.04%
6.89%
6.77%

Table 2: Test error (%) on Cifar-10 without data augmentation.

4.2

L ANGUAGE M ODELING

For language modeling, we found that confidence penalty significantly outperforms label noise and
label smoothing. We performed word-level language modeling experiments using the Penn Treebank dataset (PTB) (Marcus et al., 1993). We used the hyper-parameter settings from the large
configuration in (Zaremba et al., 2014). Briefly, we used a 2-layer, 1500-unit LSTM, with 65%
dropout applied on all non-recurrent connections. We trained using stochastic gradient descent for
55 epochs, decaying the learning rate by 1.15 after 14 epochs, and clipped the norm of the gradients
when they were larger than 10.
For label noise and label smoothing, we performed a grid search over noise and smoothing values of
[0.05, 0.1, 0.15, 0.2, 0.3, 0.4, 0.5]. For label noise, we found 0.1 to work best. For label smoothing,
we found 0.1 to work best. For the confidence penalty, we performed a grid search over confidence
penalty weight values of [0.1, 0.5, 1.0, 2.0, 3.0]. We found a confidence penalty weight of 2.0 to
work best, which led to an improvement of 3.7 perplexity points over the baseline.
For reference, we also include results of the existing state-of-the-art models for the word-level language modeling task on PTB. Variational dropout (Gal, 2015) applies a fixed dropout mask (stochastic for each sample) at each time-step, instead of resampling at each time-step as in traditional
dropout. Note, that we do not include the variational dropout results that use Monte Carlo (MC)
model averaging, which achieves lower perplexity on the test set but requires 1000 model evaluations, which are then averaged. Recurrent highway networks (Zilly et al., 2016) currently represent
the state-of-the-art performance on PTB.
5

Under review as a conference paper at ICLR 2017

Model

Parameters

Validation

Test

Zaremba et al. (2014) - Regularized LSTM
Gal (2015) - Variational LSTM
Press & Wolf (2016) - Tied Variational LSTM
Merity et al. (2016) - Pointer Sentinel LSTM
Zilly et al. (2016) - Variational RHN
Zilly et al. (2016) - Tied Variational RHN

66M
66M
51M
21M
32M
24M

82.2
77.9
79.6
72.4
71.2
68.1

78.4
75.2
75.0
70.9
68.5
66.0

Regularized LSTM (label noise)
Regularized LSTM (label smoothing)
Regularized LSTM (unigram smoothing)
Regularized LSTM (confidence penalty)

66M
66M
66M
66M

79.7
78.9
79.1
77.8

77.7
76.6
76.3
74.7

Table 3: Validation and test perplexity for word-level Penn Treebank.
4.3

M ACHINE T RANSLATION

For machine translation, we evaluated the confidence penalty on the WMT’14 English-to-German
translation task using Google’s production-level translation system Wu et al. (2016). The training set
consists of 5M sentence pairs, and we used newstest2012 and newtests2013 for validation and newstest2014 for testing. We report tokenized BLEU scores as computed by the multi-bleu.perl
script from the Moses translation machine translation package.
Our model was an 8-layer sequence-to-sequence model with attention (Bahdanau et al., 2014). The
first encoder was a bidirectional LSTM, the remaining encoder and decoder layers were unidirectional LSTMs, and the attention network was a single layer feed-forward network. Each layer had
512 units (compared to 1024 in (Wu et al., 2016)). The model was trained using 12 replicas running
concurrently with asynchronous updates. Dropout of 30% was applied as described in (Zaremba
et al., 2014). Optimization used a mix of Adam and SGD with gradient clipping. Unlike (Wu et al.,
2016), we did not use reinforcement learning to fine-tune our model. We used a beam size of 12
during decoding. For more details, see (Wu et al., 2016).
For label smoothing, we performed a grid search over values [0.05, 0.1, 0.2, 0.3, 0.4, 0.5] and found
0.1 to work best for both uniform and unigram smoothing. For the confidence penalty, we searched
over values of [0.5, 2.5, 4.5] and found a value of 2.5 to work best . For machine translation, we
found label smoothing slightly outperformed confidence penalty. When applied without dropout,
both lead to an improvement of just over 1 BLEU point (dropout leads to an improvement of just
over 2 BLEU points). However, when combined with dropout, the effect of both regularizers was
diminished.
Model

Parameters

Validation

Test

Buck et al. (2014) - PBMT
Cho et al. (2015) - RNNSearch
Zhou et al. (2016) - Deep-Att
Luong et al. (2015) - P-Attention
Wu et al. (2016) - WPM-16K
Wu et al. (2016) - WPM-32K

164M
167M
278M

-

20.7
16.9
20.6
20.9
24.4
24.6

WPM-32K (without dropout)
WPM-32K (label smoothing)
WPM-32K (confidence penalty)
WPM-32K (dropout)
WPM-32K (dropout + label smoothing)
WPM-32K (dropout + unigram smoothing)
WPM-32K (dropout + confidence penalty)

94M
94M
94M
94M
94M
94M
94M

22.33
23.85
23.25
24.1 ± 0.1
24.3 ± 0.1
24.3 ± 0.1
24.3 ± 0.1

21.24
22.42
22.52
23.41 ± 0.04
23.52 ± 0.03
23.57 ± 0.02
23.4 ± 0.1

Table 4: Validation and test BLEU for WMT’14 English-to-German. For the last four model configurations, we report the mean and standard error of the mean (SEM) over 5 random initializations.

6

Under review as a conference paper at ICLR 2017

4.4
4.4.1

S PEECH R ECOGNITION
TIMIT

In the TIMIT corpus, the training set consists of 3512 utterances, the validation set consists of 184
utterances and the test set consists of 192 utterances. All 61 phonemes were used during training
and decoding, and during scoring, these 61 phonemes were reduced to 39 to compute the phoneme
error rate (PER).
As our base model, we used a sequence-to-sequence model with attention. The encoder consisted
of 3 bidirectional LSTM layers, the decoder consisted of a single unidirectional LSTM layer, and
the attention network consisted of a single layer feed-forward network. All layers consisted of 256
units. Dropout of 15% was applied as described in Zaremba et al. (2014). We trained the model
with asynchronous SGD with 5 replicas. We used a batch size of 32, a learning rate of 0.01, and
momentum of 0.9. Gradients were clipped at 5.0. For more details, see Norouzi et al. (2016).
For label smoothing, we performed a grid search over values [0.05, 0.1, 0.15, 0.2, 0.3, 0.4, 0.5, 0.6,
0.8] and found 0.2 to work best. For the confidence penalty, we performed a grid search over values
of [0.125, 0.25, 0.5, 1.0, 2.0, 4.0, 8.0] and found a value of 1.0 to work best. Label smoothing led to
an absolute improvement over the dropout baseline of 1.6%, while the confidence penalty led to an
absolute improvement of 1.2%.
Model

Parameters

Validation

Test

Mohamed et al. (2012) - DNN-HMM
Norouzi et al. (2016) - RML
Graves et al. (2006) - CTC
Graves et al. (2013) - RNN Transducer
Tóth (2014) - CNN

6.5M
6.8M
4.3M
-

18.0
13.9

20.7
19.9
18.4
17.7
16.7

Dropout
Dropout + Label Smoothing
Dropout + Confidence Penalty

6.5M
6.5M
6.5M

21.0 ± 0.1
19.3 ± 0.1
19.9 ± 0.2

23.2 ± 0.4
21.6 ± 0.2
22.0 ± 0.4

Table 5: Validation and test phoneme error rates (PER) for TIMIT. We report the mean and SEM
over 5 random initializations.

4.4.2

WALL S TREET J OURNAL

For the WSJ corpus we used attention-based sequence-to-sequence networks that directly predicted
characters. We used the SI284 subset for training, DEV93 for validation, and EVAL92 for testing. We used 240-dimensional vectors consisting of 80-bin filterbank features augmented with their
deltas and delta-deltas with per-speaker normalized mean and variances computed with Kaldi Povey
et al. (2011). We did not use text-only data or separate language models during decoding.
Network architecture details were as follows. The encoder of the network consisted of 4 bidirectional
LSTM layers each having 256 units, interleaved with 3 time-subsampling layers, configured to drop
every second frame (Bahdanau et al., 2016; Chan et al., 2015). The decoder used a single LSTM
layer with 256 units. The attention vectors were computed with a single layer feedforward network
having 64 hidden units and the convolutional filters as described in Chorowski et al. (2015). Weights
were initialized from a uniform distribution [−0.075, 0.075]. All models used weight decay of 10−6 ,
additive Gaussian weight noise with standard deviation 0.075, applied after 20K steps, and were
trained for 650K steps. We used the ADAM optimizer asynchronously over 8 GPUs. We used a
learning rate of 10−3 , which was reduced to 10−4 after 400K and 10−5 after 500K steps.
We tested three methods of increasing the entropy of outputs: the confidence penalty and two variants of label smoothing: uniform and unigram. All resulted in improved Word Error Rates (WER),
however the unigram smoothing resulted in the greatest WER reduction, and we found it to be least
sensitive to its hyperparameter (the smoothing value). Furthermore, uniform smoothing and confidence penalty required masking network outputs corresponding to tokens that never appeared as
labels, such as the start-of-sequence token.
7

Under review as a conference paper at ICLR 2017

Table 6 compares the performance of the regularized networks with several recent results. We observe that the benefits of label smoothing (WER reduction from 14.2 to 11) improve over the recently proposed Latent Sequence Decompositions (LSD) method (Chan et al., 2016) which reduces
the WER from 14.7 to 12.9 by extending the space of output tokens to dynamically chosen character
n-grams.
Model

Parameters

Validation

Test

Graves & Jaitly (2014) - CTC
Bahdanau et al. (2016) - seq2seq
Chan et al. (2016) - Baseline
Chan et al. (2016) - LSD

26.5M
5.7M
5.1M
5.9M

-

27.3
18.6
14.7
12.9

Baseline
Uniform Label Smoothing
Unigram Label Smoothing
Confidence Penalty

6.6M
6.6M
6.6M
6.6M

17.9
14.7
14.0 ± 0.25
17.2

14.2
11.3
11.0 ± 0.35
12.7

Table 6: Validation and test word error rates (WER) for WSJ. For Baseline, Uniform Label Smoothing and Confidence Penalty we report the average over two runs. For the best setting (Unigram
Label Smoothing), we report the average over 6 runs together with the standard deviation.

5

C ONCLUSION

Motivated by recent successes of output regularizers (Szegedy et al., 2015b; Xie et al., 2016), we
conduct a systematic evaluation of two output regularizers: the confidence penalty and label smoothing. We show that this form of regularization, which has been shown to improve exploration in
reinforcement learning, also acts as a strong regularizer in supervised learning. We find that both the
confidence penalty and label smoothing improve a wide range of state-of-the-art models, without
the need to modify hyper-parameters.
ACKNOWLEDGMENTS
We would like to thank Sergey Ioffe, Alex Alemi and Navdeep Jaitly for helpful discussions. We
would also like to thank Prajit Ramachandran, Barret Zoph, Mohammad Norouzi, and Yonghui
Wu for technical help with the various models used in our experiments. We thank the anonymous
reviewers for insightful comments.

R EFERENCES
Martın Abadi, Ashish Agarwal, Paul Barham, Eugene Brevdo, Zhifeng Chen, Craig Citro, Greg S
Corrado, Andy Davis, Jeffrey Dean, Matthieu Devin, et al. Tensorflow: Large-scale machine
learning on heterogeneous distributed systems. arXiv preprint arXiv:1603.04467, 2016.
D. Bahdanau, J. Chorowski, D. Serdyuk, P. Brakel, and Y. Bengio. End-to-end attention-based large
vocabulary speech recognition. In 2016 IEEE International Conference on Acoustics, Speech and
Signal Processing (ICASSP), pp. 4945–4949, March 2016. doi: 10.1109/ICASSP.2016.7472618.
Dzmitry Bahdanau, Kyunghyun Cho, and Yoshua Bengio. Neural machine translation by jointly
learning to align and translate. arXiv preprint arXiv:1409.0473, 2014.
Adam L Berger, Vincent J Della Pietra, and Stephen A Della Pietra. A maximum entropy approach
to natural language processing. Computational linguistics, 22(1):39–71, 1996.
Cristian Bucilu, Rich Caruana, and Alexandru Niculescu-Mizil. Model compression. In Proceedings
of the 12th ACM SIGKDD international conference on Knowledge discovery and data mining, pp.
535–541. ACM, 2006.
Christian Buck, Kenneth Heafield, and Bas Van Ooyen. N-gram counts and language models from
the common crawl. In LREC, volume 2, pp. 4. Citeseer, 2014.
8

Under review as a conference paper at ICLR 2017

William Chan, Navdeep Jaitly, Quoc V Le, and Oriol Vinyals. Listen, attend and spell. arXiv
preprint arXiv:1508.01211, 2015.
William Chan, Yu Zhang, Quoc Le, and Navdeep Jaitly. Latent sequence decompositions. arXiv
preprint arXiv:1610.03035, 2016.
Sébastien Jean Kyunghyun Cho, Roland Memisevic, and Yoshua Bengio. On using very large target
vocabulary for neural machine translation. 2015.
Jan K Chorowski, Dzmitry Bahdanau, Dmitriy Serdyuk, Kyunghyun Cho, and Yoshua Bengio.
Attention-based models for speech recognition. In Advances in Neural Information Processing
Systems, pp. 577–585, 2015.
Yarin Gal. A theoretically grounded application of dropout in recurrent neural networks. arXiv
preprint arXiv:1512.05287, 2015.
Alex Graves and Navdeep Jaitly. Towards end-to-end speech recognition with recurrent neural
networks. In ICML, volume 14, pp. 1764–1772, 2014.
Alex Graves, Santiago Fernández, Faustino Gomez, and Jürgen Schmidhuber. Connectionist temporal classification: labelling unsegmented sequence data with recurrent neural networks. In Proceedings of the 23rd international conference on Machine learning, pp. 369–376. ACM, 2006.
Alex Graves, Abdel-rahman Mohamed, and Geoffrey Hinton. Speech recognition with deep recurrent neural networks. In 2013 IEEE international conference on acoustics, speech and signal
processing, pp. 6645–6649. IEEE, 2013.
Kaiming He, Xiangyu Zhang, Shaoqing Ren, and Jian Sun. Deep residual learning for image recognition. arXiv preprint arXiv:1512.03385, 2015.
Geoffrey Hinton, Oriol Vinyals, and Jeff Dean. Distilling the knowledge in a neural network. arXiv
preprint arXiv:1503.02531, 2015.
Gao Huang, Zhuang Liu, and Kilian Q Weinberger. Densely connected convolutional networks.
arXiv preprint arXiv:1608.06993, 2016a.
Gao Huang, Yu Sun, Zhuang Liu, Daniel Sedra, and Kilian Weinberger. Deep networks with stochastic depth. arXiv preprint arXiv:1603.09382, 2016b.
Sergey Ioffe and Christian Szegedy. Batch normalization: Accelerating deep network training by
reducing internal covariate shift. arXiv preprint arXiv:1502.03167, 2015.
Edwin T Jaynes. Information theory and statistical mechanics. Physical review, 106(4):620, 1957.
Rafal Jozefowicz, Oriol Vinyals, Mike Schuster, Noam Shazeer, and Yonghui Wu. Exploring the
limits of language modeling. arXiv preprint arXiv:1602.02410, 2016.
Gustav Larsson, Michael Maire, and Gregory Shakhnarovich. Fractalnet: Ultra-deep neural networks without residuals. arXiv preprint arXiv:1605.07648, 2016.
Yuping Luo, Chung-Cheng Chiu, Navdeep Jaitly, and Ilya Sutskever. Learning online alignments
with continuous rewards policy gradient. arXiv preprint arXiv:1608.01281, 2016.
Minh-Thang Luong, Hieu Pham, and Christopher D Manning. Effective approaches to attentionbased neural machine translation. arXiv preprint arXiv:1508.04025, 2015.
Mitchell P Marcus, Mary Ann Marcinkiewicz, and Beatrice Santorini. Building a large annotated
corpus of english: The penn treebank. Computational linguistics, 19(2):313–330, 1993.
Stephen Merity, Caiming Xiong, James Bradbury, and Richard Socher. Pointer sentinel mixture
models. arXiv preprint arXiv:1609.07843, 2016.
David Miller, Ajit V Rao, Kenneth Rose, and Allen Gersho. A global optimization technique for
statistical classifier design. IEEE Transactions on Signal Processing, 44(12):3108–3122, 1996.
9

Under review as a conference paper at ICLR 2017

Takeru Miyato, Shin-ichi Maeda, Masanori Koyama, Ken Nakae, and Shin Ishii. Distributional
smoothing by virtual adversarial examples. arXiv preprint arXiv:1507.00677, 2015.
Volodymyr Mnih, Adria Puigdomenech Badia, Mehdi Mirza, Alex Graves, Timothy P Lillicrap, Tim
Harley, David Silver, and Koray Kavukcuoglu. Asynchronous methods for deep reinforcement
learning. arXiv preprint arXiv:1602.01783, 2016.
Abdel-rahman Mohamed, George E Dahl, and Geoffrey Hinton. Acoustic modeling using deep
belief networks. IEEE Transactions on Audio, Speech, and Language Processing, 20(1):14–22,
2012.
Mohammad Norouzi, Dale Schuurmans, Samy Bengio, Zhifeng Chen, Navdeep Jaitly, Mike Schuster, and Yonghui Wu. Reward augmented maximum likelihood for neural structured prediction.
In Advances in Neural Information Processing Systems, 2016.
Daniel Povey, Arnab Ghoshal, Gilles Boulianne, Lukas Burget, Ondrej Glembek, Nagendra Goel,
Mirko Hannemann, Petr Motlicek, Yanmin Qian, Petr Schwarz, Jan Silovsky, Georg Stemmer,
and Karel Vesely. The kaldi speech recognition toolkit. In IEEE 2011 Workshop on Automatic
Speech Recognition and Understanding. IEEE Signal Processing Society, December 2011. IEEE
Catalog No.: CFP11SRW-USB.
Ofir Press and Lior Wolf. Using the output embedding to improve language models. arXiv preprint
arXiv:1608.05859, 2016.
Scott Reed, Honglak Lee, Dragomir Anguelov, Christian Szegedy, Dumitru Erhan, and Andrew
Rabinovich. Training deep neural networks on noisy labels with bootstrapping. arXiv preprint
arXiv:1412.6596, 2014.
Kenneth Rose. Deterministic annealing for clustering, compression, classification, regression, and
related optimization problems. Proceedings of the IEEE, 86(11):2210–2239, 1998.
Nitish Srivastava, Geoffrey E Hinton, Alex Krizhevsky, Ilya Sutskever, and Ruslan Salakhutdinov.
Dropout: a simple way to prevent neural networks from overfitting. Journal of Machine Learning
Research, 15(1):1929–1958, 2014.
Christian Szegedy, Wei Liu, Yangqing Jia, Pierre Sermanet, Scott Reed, Dragomir Anguelov, Dumitru Erhan, Vincent Vanhoucke, and Andrew Rabinovich. Going deeper with convolutions.
In Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp. 1–9,
2015a.
Christian Szegedy, Vincent Vanhoucke, Sergey Ioffe, Jonathon Shlens, and Zbigniew Wojna. Rethinking the inception architecture for computer vision. arXiv preprint arXiv:1512.00567, 2015b.
László Tóth. Combining time-and frequency-domain convolution in convolutional neural networkbased phone recognition. In 2014 IEEE International Conference on Acoustics, Speech and Signal
Processing (ICASSP), pp. 190–194. IEEE, 2014.
Li Wan, Matthew Zeiler, Sixin Zhang, Yann L Cun, and Rob Fergus. Regularization of neural
networks using dropconnect. In Proceedings of the 30th International Conference on Machine
Learning (ICML-13), pp. 1058–1066, 2013.
Ronald J Williams and Jing Peng. Function optimization using connectionist reinforcement learning
algorithms. Connection Science, 3(3):241–268, 1991.
Yonghui Wu, Mike Schuster, Zhifeng Chen, Quoc V Le, Mohammad Norouzi, Wolfgang Macherey,
Maxim Krikun, Yuan Cao, Qin Gao, Klaus Macherey, et al. Google’s neural machine translation system: Bridging the gap between human and machine translation. arXiv preprint
arXiv:1609.08144, 2016.
Lingxi Xie, Jingdong Wang, Zhen Wei, Meng Wang, and Qi Tian. Disturblabel: Regularizing cnn
on the loss layer. arXiv preprint arXiv:1605.00055, 2016.
Wojciech Zaremba, Ilya Sutskever, and Oriol Vinyals. Recurrent neural network regularization.
arXiv preprint arXiv:1409.2329, 2014.
10

Under review as a conference paper at ICLR 2017

Jie Zhou, Ying Cao, Xuguang Wang, Peng Li, and Wei Xu. Deep recurrent models with fast-forward
connections for neural machine translation. arXiv preprint arXiv:1606.04199, 2016.
Julian Georg Zilly, Rupesh Kumar Srivastava, Jan Koutnı́k, and Jürgen Schmidhuber. Recurrent
highway networks. arXiv preprint arXiv:1607.03474, 2016.

11

Under review as a conference paper at ICLR 2017

A PPENDIX
6

G RADIENT NORMS
2.0

No regularization
Label Smoothing
Dropout
Confidence Penalty

Gradient norm

1.5

1.0

0.5

0.0

0

10

20

30

40

50

Steps (x1e4)

60

70

80

90

Figure 2: Norm of the gradient as training proceeds on the MNIST dataset. We plot the norm of
the gradient while training with confidence penalty, dropout, label smoothing, and without regularization. We use early stopping on the validation set, which explains the difference in training steps
between methods. Both confidence penalty and label smoothing result in smaller gradient norm.

12

