Publications (19)
Improving Robustness using Generated Data
Sven Gowal, Sylvestre-Alvise Rebuffi, Olivia Wiles +3
Recent work argues that robust training requires substantially larger datasets than those required for standard classification. On CIFAR-10 and CIFAR-100, this translates into a si…
Achieving Robustness in the Wild via Adversarial Mixing with Disentangled Representations
Sven Gowal, Chongli Qin, Po-Sen Huang +4
Recent research has made the surprising finding that state-of-the-art deep learning models sometimes fail to generalize to small variations of the input. Adversarial training has b…
Uncovering the Limits of Adversarial Training against Norm-Bounded Adversarial Examples
Sven Gowal, Chongli Qin, Jonathan Uesato +2
Adversarial training and its variants have become de facto standards for learning robust deep neural networks. In this paper, we explore the landscape around adversarial training i…
Fixing Data Augmentation to Improve Adversarial Robustness
Sylvestre-Alvise Rebuffi, Sven Gowal, Dan A. Calian +3
Adversarial training suffers from robust overfitting, a phenomenon where the robust test accuracy starts to decrease during training. In this paper, we focus on both heuristics-dri…
Data Augmentation Can Improve Robustness
Sylvestre-Alvise Rebuffi, Sven Gowal, Dan A. Calian +3
Adversarial training suffers from robust overfitting, a phenomenon where the robust test accuracy starts to decrease during training. In this paper, we focus on reducing robust ove…
On the Effectiveness of Interval Bound Propagation for Training Verifiably Robust Models
Sven Gowal, Krishnamurthy Dvijotham, Robert Stanforth +6
Recent work has shown that it is possible to train deep neural networks that are provably robust to norm-bounded adversarial perturbations. Most of these methods are based on minim…