Publications related to Geometry of adversarial robustness of deep networks: methods and applications

Square Attack: a query-efficient black-box adversarial attack via random search

Nicolas Henri Bernard Flammarion, Maksym Andriushchenko, Francesco Croce

We propose the Square Attack, a new score-based black-box

l_2

and

l_\infty

adversarial attack that does not rely on local gradient information and thus is not affected by gradient masking. The Square Attack is based on a randomized search scheme where ...

2020

Constructing a provably adversarially-robust classifier from a high accuracy one

Rüdiger Urbanke

Modern machine learning models with very high accuracy have been shown to be vulnerable to small, adversarially chosen perturbations of the input. Given black-box access to a high-accuracy classifier f, we show how to construct a new classifier g that has ...

ADDISON-WESLEY PUBL CO2020

FeGAN: Scaling Distributed GANs

Rachid Guerraoui, Anne-Marie Kermarrec, Arsany Hany Abdelmessih Guirguis

Existing approaches to distribute Generative Adversarial Networks (GANs) either (i) fail to scale for they typically put the two components of a GAN (the generator and the discriminator) on different machines, inducing significant communication overhead, o ...

2020

Shape Reconstruction by Learning Differentiable Surface Representations

Pascal Fua, Mathieu Salzmann, Shaifali Parashar, Jan Bednarík, Erhan Gündogdu

Generative models that produce point clouds have emerged as a powerful tool to represent 3D surfaces, and the best current ones rely on learning an ensemble of parametric representations. Unfortunately, they offer no control over the deformations of the su ...

2020

A geometry-inspired decision-based attack

Pascal Frossard, Seyed Mohsen Moosavi Dezfooli, Yujia Liu

Deep neural networks have recently achieved tremen-dous success in image classification. Recent studies havehowever shown that they are easily misled into incorrectclassification decisions by adversarial examples. Adver-saries can even craft attacks by que ...

2019

A geometry-inspired decision-based attack

Pascal Frossard, Seyed Mohsen Moosavi Dezfooli, Yujia Liu

Deep neural networks have recently achieved tremendous success in image classification. Recent studies have however shown that they are easily misled into incorrect classification decisions by adversarial examples. Adversaries can even craft attacks by que ...

2019

A Geometry-Inspired Decision-Based Attack

Pascal Frossard, Seyed Mohsen Moosavi Dezfooli, Yujia Liu

Deep neural networks have recently achieved tremendous success in image classification. Recent studies have however shown that they are easily misled into incorrect classification decisions by adversarial examples. Adversaries can even craft attacks by que ...

IEEE COMPUTER SOC2019

SparseFool: a few pixels make a big difference

Pascal Frossard, Seyed Mohsen Moosavi Dezfooli, Apostolos Modas

Deep Neural Networks have achieved extraordinary results on image classification tasks, but have been shown to be vulnerable to attacks with carefully crafted perturbations of the input data. Although most attacks usually change values of many image's pixe ...

IEEE2019

Biologically plausible deep learning – but how far can we go with shallow networks?

Wulfram Gerstner, Johanni Michael Brea, Bernd Albert Illing

Training deep neural networks with the error backpropagation algorithm is considered implausible from a biological perspective. Numerous recent publications suggest elaborate models for biologically plausible variants of deep learning, typically defining s ...

2019

A jamming transition from under- to over-parametrization affects generalization in deep learning

Matthieu Wyart, Stefano Spigler, Levent Dogus Sagun

In this paper we first recall the recent result that in deep networks a phase transition, analogous to the jamming transition of granular media, delimits the over- and under-parametrized regimes where fitting can or cannot be achieved. The analysis leading ...

IOP PUBLISHING LTD2019

Geometry of adversarial robustness of deep networks: methods and applications

Graph Chatbot

Chat with Graph Search

Square Attack: a query-efficient black-box adversarial attack via random search

Constructing a provably adversarially-robust classifier from a high accuracy one

FeGAN: Scaling Distributed GANs

Shape Reconstruction by Learning Differentiable Surface Representations

A geometry-inspired decision-based attack

A geometry-inspired decision-based attack

A Geometry-Inspired Decision-Based Attack

SparseFool: a few pixels make a big difference

Biologically plausible deep learning – but how far can we go with shallow networks?

A jamming transition from under- to over-parametrization affects generalization in deep learning

A geometry-inspired decision-based attack

Biologically plausible deep learning – but how far can we go with shallow networks?

Square Attack: a query-efficient black-box adversarial attack via random search

Constructing a provably adversarially-robust classifier from a high accuracy one

FeGAN: Scaling Distributed GANs

Shape Reconstruction by Learning Differentiable Surface Representations

A geometry-inspired decision-based attack

A Geometry-Inspired Decision-Based Attack

SparseFool: a few pixels make a big difference

A jamming transition from under- to over-parametrization affects generalization in deep learning