Develops robust few-shot learning models resistant to adversarial attacks.
problem Adversarial vulnerability in few-shot learning models.
method Adversarial Querying (AQ) algorithm for robust meta-learners.
result Achieves superior robust performance on few-shot image classification tasks.
Boosts barely robust learners to be more adversarially robust.
problem Learning predictors robust to small perturbations on a small fraction of data.
method Oracle-efficient algorithm for robustness with larger perturbation set.
result Qualitative and quantitative equivalence between strongly robust and barely robust learning.
Study on robustness in linear regression models, focusing on adversarial perturbations.
problem Understanding and improving robustness in linear regression models to adversarial perturbations.
method Developed a two-stage adversarial learning framework that incorporates model structure information.
result Proved the consistency and developed the Bahadur representation of the adversarially robust estimator.
Proposes robust features for adversarial attacks.
problem Learning robust models to adversarial perturbations is hard.
method Develops robust features by leveraging spectral properties of dataset geometry.
result Establishes strong connections between robust features and spectral geometry.
Robust RL with learned optimal adversary improves agent performance under adversarial state observations.
problem Ensuring reinforcement learning agents' robustness against adversarial perturbations of state observations.
method Proposed a framework of alternating training with learned adversaries (ATLA) to find optimal adversarial policies and enhance agent robustness.
result ATLA achieves state-of-the-art performance under strong adversaries in continuous control environments.
Paper proposes a method to train robust neural networks without labeled data.
problem Training robust neural networks without class labels.
method Adversarial contrastive learning framework using unlabeled data.
result Robust Contrastive Learning (RoCL) achieves comparable robust accuracy to supervised methods and significantly improved robustness.
New metric learning improves deep networks' robustness to adversarial attacks.
problem Deep networks' fragility to adversarial attacks.
method Metric learning to regularize representation space under attack.
result Improvement of robustness accuracy by up to 4% and detection efficiency by up to 6%.
Study reveals adversarially robust domain adaptation is harder to generalize across domains.
problem Hardness of transferring adversarial robustness across different domains.
method Analysis of adversarial Rademacher complexity over symmetric difference hypothesis space.
result Adversarial Rademacher complexity is always greater than non-adversarial, indicating intrinsic hardness.
BN helps learn fragile features, which can improve adversarial robustness.
problem The role of batch normalization in adversarial training and its impact on robustness.
method Investigated the expressiveness of BN in learning robust features compared to random features.
result Adversarially fine-tuning BN layers can result in non-trivial adversarial robustness.
Paper tackles robustness in adversarial noise with a meta-optimizer.
problem Sensitivity to adversarial noise hinders machine learning deployment.
method Meta-optimizer learns to robustly optimize models using adversarial examples.
result Meta-optimizer transfers adversarial knowledge to new models without generating new examples.
New method improves graph representations against adversarial attacks.
problem Adversarial robustness in graph contrastive learning.
method Adversarial and edge insertion transformations.
result Promising results in preliminary experiments.
ADT improves model robustness by learning adversarial distributions.
problem Ineffective robustness against unseen attacks due to specific attack algorithms.
method Formulates adversarial distributional training as a minimax optimization problem, learning adversarial distributions and training robust models.
result Empirical validation of ADT's effectiveness compared to state-of-the-art methods.
Robust RL improves controller robustness to dynamics variations using adversarial populations.
problem Robustness issues in RL when dynamics are perturbed.
method Adversarial population augmentation to the Robust RL formulation.
result Population-based adversarial approach yields more robust and generalizable policies.
Study shows computational hardness can improve adversarial robustness in learning.
problem Developing robust machine learning models against adversarial attacks.
method Investigate if computational limitations of attackers can enhance robustness.
result Demonstrated a learning task where computational robustness outperforms information-theoretic robustness.
New method improves robustness of neural network features.
problem Neural networks are vulnerable to adversarial attacks.
method Adversarial training extended to improve feature robustness.
result Improved robustness of learned features and resistance to adversarial attacks.
Interpolated adversarial training improves robustness without sacrificing accuracy.
problem Improving adversarial robustness without degrading generalization performance.
method Interpolated adversarial training using interpolation-based methods.
result Retains adversarial robustness while achieving a standard test error of 6.45%.
ORAT improves model robustness against outliers and adversarial attacks.
problem Challenges of training data like outliers and adversarial samples.
method Bi-level optimization with robust rank-based loss function.
result ORAT achieves theoretical consistency and uniform convergence rates.
The paper tackles adversarial robustness by maximizing worst-case mutual information.
problem Training robust machine learning models against adversarial inputs is challenging.
method Develops a notion of representation vulnerability and an unsupervised learning method to maximize worst-case mutual information.
result Proves a lower bound on minimum adversarial risk and supports robustness of representations.
RTFE provides adversarial robustness to multiple models.
problem Adversarial examples can transfer to other models, compromising robustness.
method Proposes RTFE, a deep learning-based pre-processing mechanism.
result RTFE provides adversarial robustness to multiple independently trained classifiers.
Study efficient learning of robust halfspaces with noise.
problem Learning robust halfspaces in the presence of adversarial perturbations and random label noise.
method Provides conditions for robust learnability and a simple algorithm for any ℓ_p perturbation.
result Simple computationally efficient algorithm for robust learning with random label noise.
This paper explores the trade-off between spatial and adversarial robustness in neural networks.
problem Understanding the trade-off between spatial and adversarial robustness in neural networks.
method Quantitative analysis and empirical testing with curriculum learning.
result Spatial robustness and adversarial robustness are quantitatively related and can be improved simultaneously.
This thesis explores robust machine learning against adversarial examples.
problem How to create machine learning systems robust to adversarial examples.
method Theoretical exploration and development of new learning algorithms with robustness guarantees.
result Developed new learning algorithms with provable robustness guarantees.
Aims to make neural networks robust to small, imperceptible perturbations.
problem Neural networks can be fooled by small, imperceptible changes.
method Proposes a Generative Adversarial Networks (GAN) framework to learn robust classifiers.
result Our method outperforms adversarial training in robustness.
Study shows AmI attacks are not robust to adversarial examples.
problem Robustness of AmI attacks to adversarial examples.
method Evaluation of AmI attacks on adversarial examples.
result AmI attacks are not robust to adversarial examples.
New global adversarial attacks improve DNN robustness assessment.
problem Vulnerability of deep neural networks to adversarial attacks.
method Proposed global adversarial example pairs and attack methods.
result DNNs hardened with local adversarial training are vulnerable to global attacks.
New algorithm ATENT improves adversarial robustness in neural networks.
problem Improving neural network robustness against adversarial attacks.
method Proposes a new loss function with entropic regularization for training robust neural networks.
result ATENT achieves competitive robust classification accuracy on benchmark datasets.
This paper improves adversarial robustness of deep learning models.
problem Vulnerability of machine learning models to adversarial perturbations.
method Analyzes adversarial training for linear regression and neural networks, incorporating L1 penalty.
result Incorporating L1 penalty leads to consistent adversarially robust estimation in high-dimensional settings.
New method improves model robustness against adversarial attacks.
problem Models trained with adversarial samples can be vulnerable to simple attacks.
method Graybox Adversarial Training using intermediate models to seed adversaries.
result Models trained with Graybox Adversarial Training are more robust to simple attacks.
ART is a Python library for defending ML models against adversarial threats.
problem Vulnerability of ML models to adversarial examples.
method Pre-processing, adversarial data augmentation, runtime detection.
result Provides tools to certify and verify model robustness.
Adversarially trained transformers can learn robustly across tasks with minimal tuning.
problem Adversarial attacks and the high cost of adversarial training.
method Adversarial pretraining followed by in-context learning.
result Single-layer linear transformers can generalize robustly to unseen tasks.
Adversarially robust transfer learning improves model robustness with minimal data.
problem Data scarcity and computational limitations in adversarially robust transfer learning.
method Train classifiers on top of robust feature extractors from source models, or fine-tune end-to-end in target domain using lifelong learning strategies.
result Accurate and robust models can be produced with little data and without adversarial training.
New taxonomy divides defense methods for neural networks.
problem Improving adversarial robustness of neural networks.
method Reframing existing defense categories into two new categories.
result There is no universal trade-off between robustness and accuracy.
Combines adversarial and interventional robustness for machine learning models.
problem Designing robust models for distribution shifts in machine learning.
method RISe formulation using distributionally robust optimization.
result Demonstrates efficacy of RISe approach with synthetic and real-world datasets.
AAT separates robust and non-robust features without supervision.
problem Adversarial vulnerability and accuracy reduction in machine learning models.
method Adversarial Asymmetric Training (AAT) algorithm.
result Preserves accuracy and achieves better disentanglement than previous methods.
New contest evaluates machine learning robustness against unrestricted adversarial examples.
problem Evaluating machine learning robustness against arbitrary adversarial inputs.
method Two-player contest with a prize pool, focusing on unconstrained adversarial examples.
result Demonstrates the need for comprehensive evaluation of machine learning models' worst-case adversarial risk.
RS-DQN protects RL agents from adversarial attacks.
problem Adversarial attacks can disrupt deep RL training and evaluation.
method Online robustness training with RS-DQN combining state-of-the-art adversarial and provably robust training.
result RS-DQN makes RL agents resilient to strong attacks.
Advances adversarial training of smoothed classifiers for robust deep learning.
problem Building neural network classifiers robust to adversarial attacks.
method Adversarial training of randomized smoothed classifiers with an adapted attack.
result Significantly outperforms existing provably robust classifiers on ImageNet and CIFAR-10.
LVQ models robustness evaluated against adversarial attacks.
problem Robustness of LVQ models against adversarial attacks.
method Evaluation of three LVQ models: Generalized LVQ, Generalized Matrix LVQ, and Generalized Tangent LVQ.
result Generalized LVQ and Generalized Tangent LVQ are robust, while Generalized Matrix LVQ is not.
Surveying strategies for making machine learning models robust against adversarial attacks.
problem Ensuring machine learning models are robust and reliable in real-world applications.
method Taxonomy of adversarial attacks and defenses, Robust Optimization problem formulation, and survey of methods.
result Surveyed recent results in adversarial example generation, defense mechanisms, and formal robustness certificates.
Adversarial attacks found to be effective on code models.
problem Adversarial robustness of code models.
method Instantiated adversarial attacks for code, demonstrated vulnerability, and improved robustness.
result Neural models for code are vulnerable to adversarial attacks.
New method improves adversarial robustness without extra training steps.
problem Improving robustness of deep learning models against adversarial attacks.
method Guided Complement Entropy (GCE) training paradigm.
result GCE achieves better adversarial robustness with improved performance.
The paper evaluates machine learning cyber defenses using log data against adversarial attacks.
problem Evaluating the robustness of machine learning cyber defenses against adversarial attacks.
method Developed a testing framework using deep reinforcement learning and adversarial natural language processing.
result Higher dropout levels increase robustness, with 90% dropout probability showing the highest robustness.
New model improves deep learning robustness against adversarial attacks.
problem Improving adversarial robustness of deep learning models.
method Local competition principle, LWTA nonlinearities, Bayesian non-parametrics.
result The new model achieves high robustness to adversarial perturbations on MNIST and CIFAR10 datasets.
Study evaluates adversarial attacks on speech emotion recognition systems.
problem Adversarial examples challenge the robustness of speech emotion recognition systems.
method Proposes adversarial training and GAN as defenses.
result Demonstrates effective use of adversarial examples for robustness.
Theoretical study shows adversarial training improves robustness in deep learning models.
problem Ensuring robustness in pre-trained deep learning models.
method Theoretical analysis of adversarial training and feature purification in two-layer neural networks.
result Adversarial training leads to feature purification, making models more robust to attacks.
New attack reveals adversarial training's inability to handle both ℓ2 and ℓ∞ norms.
problem Adversarial training's inability to ensure robustness across ℓ2 and ℓ∞ norms. method Proposed a new attack to expose the weakness of adversarial training.
result Adversarial training fails to achieve robustness in both ℓ2 and ℓ∞ norms. A new method transfers adversarial robustness from teacher to student using feature distillation.
problem Adversarial robustness transfer across different models and tasks.
method Guided Adversarial Contrastive Distillation (GACD) with contrastive learning and sample reweighted estimation.
result GACD effectively transfers adversarial robustness from teacher to student, achieving comparable or better results.
This work explores how neural architecture search can improve adversarial robustness without adversarial training.
problem Improving adversarial robustness of neural networks without adversarial training.
method Experimented with hand-crafted and NAS-based architectures to compare robustness to PGD attacks.
result NAS-based architectures are more robust for small-scale attacks, but hand-crafted architectures are more robust for larger datasets and tasks.