103 citations · 469 across the 31 of their papers we have counts for
3 papers · 1 filter
Enhancing Certifiable Robustness via a Deep Model Ensemble
Huan Zhang, Minhao Cheng, Cho-Jui Hsieh
We propose an algorithm to enhance certified robustness of a deep model ensemble by optimally weighting each base model. Unlike previous works on using ensembles to empirically imp…
Natural Adversarial Sentence Generation with Gradient-based Perturbation
Yu-Lun Hsieh, Minhao Cheng, Da-Cheng Juan +3
This work proposes a novel algorithm to generate natural language adversarial input for text classification models, in order to investigate the robustness of these models. It invol…
Sign-OPT: A Query-Efficient Hard-label Adversarial Attack
Minhao Cheng, Simranjit Singh, Patrick Chen +3
We study the most practical problem setup for evaluating adversarial robustness of a machine learning system with limited access: the hard-label black-box attack setting for genera…