activity
20192025
most citedCertified Defenses for Adversarial Patches

78 citations · 273 across the 16 of their papers we have counts for

collaborators
Showing cs.LGShow all

8 papers · 1 filter

cs.LG2023★ 37 cited

Baseline Defenses for Adversarial Attacks Against Aligned Language Models

Neel Jain, Avi Schwarzschild, Yuxin Wen +7

As Large Language Models quickly become ubiquitous, it becomes critical to understand their security vulnerabilities. Recent work shows that text optimizers can produce jailbreakin…

cs.LG2022★ 2 cited

K-SAM: Sharpness-Aware Minimization at the Speed of SGD

Renkun Ni, Ping-yeh Chiang, Jonas Geiping +3

Sharpness-Aware Minimization (SAM) has recently emerged as a robust technique for improving the accuracy of deep neural networks. However, SAM incurs a high computational cost in p…

cs.LG2022★ 11 cited

Certified Neural Network Watermarks with Randomized Smoothing

Arpit Bansal, Ping-yeh Chiang, Michael Curry +5

Watermarking is a commonly used strategy to protect creators' rights to digital images, videos and audio. Recently, watermarking methods have been extended to deep learning models…

cs.LG2021★ 33 cited

Adversarial Examples Make Strong Poisons

Liam Fowl, Micah Goldblum, Ping-yeh Chiang +3

The adversarial machine learning literature is largely partitioned into evasion attacks on testing data and poisoning attacks on training data. In this work, we show that adversari…

cs.LG2020★ 6 cited

WrapNet: Neural Net Inference with Ultra-Low-Resolution Arithmetic

Renkun Ni, Hong-min Chu, Oscar Castañeda +3

Low-resolution neural networks represent both weights and activations with few bits, drastically reducing the multiplication complexity. Nonetheless, these products are accumulated…

cs.LG2020★ 6 cited

Improving the Tightness of Convex Relaxation Bounds for Training Certifiably Robust Classifiers

Chen Zhu, Renkun Ni, Ping-yeh Chiang +3

Convex relaxations are effective for training and certifying neural networks against norm-bounded adversarial attacks, but they leave a large gap between certifiable and empirical…

cs.LG2019

WITCHcraft: Efficient PGD attacks with random step size

Ping-Yeh Chiang, Jonas Geiping, Micah Goldblum +4

State-of-the-art adversarial attacks on neural networks use expensive iterative methods and numerous random restarts from different initial points. Iterative FGSM-based methods wit…

cs.LG2019★ 61 cited

Compressing GANs using Knowledge Distillation

Angeline Aguinaldo, Ping-Yeh Chiang, Alex Gain +3

Generative Adversarial Networks (GANs) have been used in several machine learning tasks such as domain transfer, super resolution, and synthetic data generation. State-of-the-art G…