Publications related to Robustness and invariance properties of image classifiers

Tracing in 2D to reduce the annotation effort for 3D deep delineation of linear structures

Pascal Fua, Mathieu Salzmann, Agata Justyna Mosinska, Mateusz Kozinski

The difficulty of obtaining annotations to build training databases still slows down the adoption of recent deep learning approaches for biomedical image analysis. In this paper, we show that we can train a Deep Net to perform 3D volumetric delineation giv ...

ELSEVIER2020

Probabilistic Deep Learning on Spheres for Weather/Climate Applications

This work presents the application of a probabilistic approach to an already existing deep learning model for weather and climate prediction. Probabilistic deep learning allows to capture and address the uncertainties related to the data given as input and ...

2020

Square Attack: a query-efficient black-box adversarial attack via random search

Nicolas Henri Bernard Flammarion, Maksym Andriushchenko, Francesco Croce

We propose the Square Attack, a new score-based black-box

l_2

and

l_\infty

adversarial attack that does not rely on local gradient information and thus is not affected by gradient masking. The Square Attack is based on a randomized search scheme where ...

2020

Robust P2P Personalized Learning

Rachid Guerraoui, Yahya Benkaouz

Decentralized machine learning over peer-to-peer networks is very appealing for it enables to learn personalized models without sharing users data, nor relying on any central server. Peers can improve upon their locally trained model across a network graph ...

IEEE2020

Shape Reconstruction by Learning Differentiable Surface Representations

Pascal Fua, Mathieu Salzmann, Shaifali Parashar, Jan Bednarík, Erhan Gündogdu

Generative models that produce point clouds have emerged as a powerful tool to represent 3D surfaces, and the best current ones rely on learning an ensemble of parametric representations. Unfortunately, they offer no control over the deformations of the su ...

2020

Regression Networks for Meta-Learning Few-Shot Classification

Matthias Grossglauser, Arnout Jan J Devos

We propose regression networks for the problem of few-shot classification, where a classifier must generalize to new classes not seen in the training set, given only a small number of examples of each class. In high dimensional embedding spaces the directi ...

2020

Redundant features can hurt robustness to distribution shift

Pascal Frossard, Seyed Mohsen Moosavi Dezfooli, Guillermo Ortiz Jimenez, Apostolos Modas

In this work, we borrow tools from the field of adversarial robustness, and propose a new framework that permits to relate dataset features to the distance of samples to the decision boundary. Using this framework we identify the subspace of features used ...

2020

SparseFool: a few pixels make a big difference

Pascal Frossard, Seyed Mohsen Moosavi Dezfooli, Apostolos Modas

Deep Neural Networks have achieved extraordinary results on image classification tasks, but have been shown to be vulnerable to attacks with carefully crafted perturbations of the input data. Although most attacks usually change values of many image's pixe ...

IEEE2019

A geometry-inspired decision-based attack

Pascal Frossard, Seyed Mohsen Moosavi Dezfooli, Yujia Liu

Deep neural networks have recently achieved tremen-dous success in image classification. Recent studies havehowever shown that they are easily misled into incorrectclassification decisions by adversarial examples. Adver-saries can even craft attacks by que ...

2019

Geometry of adversarial robustness of deep networks: methods and applications

Seyed Mohsen Moosavi Dezfooli

We are witnessing a rise in the popularity of using artificial neural networks in many fields of science and technology. Deep neural networks in particular have shown impressive classification performance on a number of challenging benchmarks, generally in ...

EPFL2019

Robustness and invariance properties of image classifiers

Graph Chatbot

Chat with Graph Search

Tracing in 2D to reduce the annotation effort for 3D deep delineation of linear structures

Probabilistic Deep Learning on Spheres for Weather/Climate Applications

Square Attack: a query-efficient black-box adversarial attack via random search

Robust P2P Personalized Learning

Shape Reconstruction by Learning Differentiable Surface Representations

Regression Networks for Meta-Learning Few-Shot Classification

Redundant features can hurt robustness to distribution shift

SparseFool: a few pixels make a big difference

A geometry-inspired decision-based attack

Geometry of adversarial robustness of deep networks: methods and applications

Redundant features can hurt robustness to distribution shift

Regression Networks for Meta-Learning Few-Shot Classification

Tracing in 2D to reduce the annotation effort for 3D deep delineation of linear structures

Square Attack: a query-efficient black-box adversarial attack via random search

Probabilistic Deep Learning on Spheres for Weather/Climate Applications

Robust P2P Personalized Learning

A geometry-inspired decision-based attack

SparseFool: a few pixels make a big difference

Shape Reconstruction by Learning Differentiable Surface Representations

Geometry of adversarial robustness of deep networks: methods and applications