activity
20182025
most citedAn Alternative Surrogate Loss for PGD-based Adversarial Testing

51 citations · 122 across the 15 of their papers we have counts for

collaborators
Showing cs.CVShow all

6 papers · 1 filter

cs.CV2023★ 15 cited

Generative models improve fairness of medical classifiers under distribution shifts

Ira Ktena, Olivia Wiles, Isabela Albuquerque +9

A ubiquitous challenge in machine learning is the problem of domain generalisation. This can exacerbate bias against groups or labels that are underrepresented in the datasets used…

cs.CV2023★ 2 cited

Benchmarking Robustness to Adversarial Image Obfuscations

Florian Stimberg, Ayan Chakrabarti, Chun-Ta Lu +9

Automated content filtering and moderation is an important tool that allows online platforms to build striving user communities that facilitate cooperation and prevent abuse. Unfor…

cs.CV2022

Revisiting adapters with adversarial training

Sylvestre-Alvise Rebuffi, Francesco Croce, Sven Gowal

While adversarial training is generally used as a defense mechanism, recent works show that it can also act as a regularizer. By co-training a neural network on clean and adversari…

cs.CV2021★ 13 cited

Data Augmentation Can Improve Robustness

Sylvestre-Alvise Rebuffi, Sven Gowal, Dan A. Calian +3

Adversarial training suffers from robust overfitting, a phenomenon where the robust test accuracy starts to decrease during training. In this paper, we focus on reducing robust ove…

cs.CV2021

Fixing Data Augmentation to Improve Adversarial Robustness

Sylvestre-Alvise Rebuffi, Sven Gowal, Dan A. Calian +3

Adversarial training suffers from robust overfitting, a phenomenon where the robust test accuracy starts to decrease during training. In this paper, we focus on both heuristics-dri…

cs.CV2019

Towards Robust Image Classification Using Sequential Attention Models

Daniel Zoran, Mike Chrzanowski, Po-Sen Huang +3

In this paper we propose to augment a modern neural-network architecture with an attention model inspired by human perception. Specifically, we adversarially train and analyze a ne…