69 citations · 222 across the 18 of their papers we have counts for
18 papers
Invariant Learning via Diffusion Dreamed Distribution Shifts
Priyatham Kattakinda, Alexander Levine, Soheil Feizi
Though the background is an important signal for image classification, over reliance on it can lead to incorrect predictions when spurious correlations between foreground and backg…
Goal-Conditioned Q-Learning as Knowledge Distillation
Alexander Levine, Soheil Feizi
Many applications of reinforcement learning can be formalized as goal-conditioned environments, where, in each episode, there is a "goal" that affects the rewards obtained during t…
Lethal Dose Conjecture on Data Poisoning
Wenxiao Wang, Alexander Levine, Soheil Feizi
Data poisoning considers an adversary that distorts the training set of machine learning algorithms for malicious purposes. In this work, we bring to light one conjecture regarding…
Provable Adversarial Robustness for Fractional Lp Threat Models
Alexander Levine, Soheil Feizi
In recent years, researchers have extensively studied adversarial robustness in a variety of threat models, including L_0, L_1, L_2, and L_infinity-norm bounded adversarial attacks…
Improved Certified Defenses against Data Poisoning with (Deterministic) Finite Aggregation
Wenxiao Wang, Alexander Levine, Soheil Feizi
Data poisoning attacks aim at manipulating model behaviors through distorting training data. Previously, an aggregation-based certified defense, Deep Partition Aggregation (DPA), w…
Certifying Model Accuracy under Distribution Shifts
Aounon Kumar, Alexander Levine, Tom Goldstein +1
Certified robustness in machine learning has primarily focused on adversarial perturbations of the input with a fixed attack budget for each point in the data distribution. In this…
Segment and Complete: Defending Object Detectors against Adversarial Patch Attacks with Robust Patch Detection
Jiang Liu, Alexander Levine, Chun Pong Lau +2
Object detection plays a key role in many security-critical systems. Adversarial patch attacks, which are easy to implement in the physical world, pose a serious threat to state-of…
Policy Smoothing for Provably Robust Reinforcement Learning
Aounon Kumar, Alexander Levine, Soheil Feizi
The study of provable adversarial robustness for deep neural networks (DNNs) has mainly focused on static supervised learning tasks such as image classification. However, DNNs have…
Improved, Deterministic Smoothing for L_1 Certified Robustness
Alexander Levine, Soheil Feizi
Randomized smoothing is a general technique for computing sample-dependent robustness guarantees against adversarial attacks for deep classifiers. Prior works on randomized smoothi…
Certifying Confidence via Randomized Smoothing
Aounon Kumar, Alexander Levine, Soheil Feizi +1
Randomized smoothing has been shown to provide good certified-robustness guarantees for high-dimensional classification problems. It uses the probabilities of predicting the top tw…
Tight Second-Order Certificates for Randomized Smoothing
Alexander Levine, Aounon Kumar, Thomas Goldstein +1
Randomized smoothing is a popular way of providing robustness guarantees against adversarial attacks: randomly-smoothed functions have a universal Lipschitz-like bound, allowing fo…
Dual Manifold Adversarial Robustness: Defense against Lp and non-Lp Adversarial Attacks
Wei-An Lin, Chun Pong Lau, Alexander Levine +2
Adversarial training is a popular defense strategy against attack threat models with bounded Lp norms. However, it often degrades the model performance on normal images and the def…
Deep Partition Aggregation: Provable Defense against General Poisoning Attacks
Alexander Levine, Soheil Feizi
Adversarial poisoning attacks distort training data in order to corrupt the test-time behavior of a classifier. A provable defense provides a certificate for each test sample, whic…
(De)Randomized Smoothing for Certifiable Defense against Patch Attacks
Alexander Levine, Soheil Feizi
Patch adversarial attacks on images, in which the attacker can distort pixels within a region of bounded size, are an important threat model since they provide a quantitative model…
Curse of Dimensionality on Randomized Smoothing for Certifiable Robustness
Aounon Kumar, Alexander Levine, Tom Goldstein +1
Randomized smoothing, using just a simple isotropic Gaussian distribution, has been shown to produce good robustness guarantees against -norm bounded adversaries. In this w…
Robustness Certificates for Sparse Adversarial Attacks by Randomized Ablation
Alexander Levine, Soheil Feizi
Recently, techniques have been developed to provably guarantee the robustness of a classifier to adversarial perturbations of bounded L_1 and L_2 magnitudes by using randomized smo…
Wasserstein Smoothing: Certified Robustness against Wasserstein Adversarial Attacks
Alexander Levine, Soheil Feizi
In the last couple of years, several adversarial attack methods based on different threat models have been proposed for the image classification problem. Most existing defenses con…
Certifiably Robust Interpretation in Deep Learning
Alexander Levine, Sahil Singla, Soheil Feizi
Deep learning interpretation is essential to explain the reasoning behind model predictions. Understanding the robustness of interpretation methods is important especially in sensi…