1k citations · 2.2k across the 34 of their papers we have counts for
20 papers · 1 filter
Evaluating Model Bias Requires Characterizing its Mistakes
Isabela Albuquerque, Jessica Schrouff, David Warde-Farley +3
The ability to properly benchmark model performance in the face of spurious correlations is important to both build better predictors and increase confidence that models are operat…
Differentially Private Diffusion Models Generate Useful Synthetic Images
Sahra Ghalebikesabi, Leonard Berrada, Sven Gowal +7
The ability to generate privacy-preserving synthetic versions of sensitive image datasets could unlock numerous ML applications currently constrained by data availability. Due to t…
Seasoning Model Soups for Robustness to Adversarial and Natural Distribution Shifts
Francesco Croce, Sylvestre-Alvise Rebuffi, Evan Shelhamer +1
Adversarial training is widely used to make classifiers robust to a specific threat or adversary, such as -norm bounded perturbations of a given -norm. However, existing…
Hindering Adversarial Attacks with Implicit Neural Representations
Andrei A. Rusu, Dan A. Calian, Sven Gowal +1
We introduce the Lossy Implicit Network Activation Coding (LINAC) defence, an input transformation which successfully hinders several common adversarial attacks on CIFAR- class…
Robustness of Epinets against Distributional Shifts
Xiuyuan Lu, Ian Osband, Seyed Mohammad Asghari +4
Recent work introduced the epinet as a new approach to uncertainty modeling in deep learning. An epinet is a small neural network added to traditional neural networks, which, toget…
Evaluating the Adversarial Robustness of Adaptive Test-time Defenses
Francesco Croce, Sven Gowal, Thomas Brunner +3
Adaptive defenses, which optimize at test time, promise to improve adversarial robustness. We categorize such adaptive test-time defenses, explain their potential benefits and draw…
A Fine-Grained Analysis on Distribution Shift
Olivia Wiles, Sven Gowal, Florian Stimberg +4
Robustness to distribution shifts is critical for deploying machine learning models in the real world. Despite this necessity, there has been little work in defining the underlying…
An Empirical Investigation of Learning from Biased Toxicity Labels
Neel Nanda, Jonathan Uesato, Sven Gowal
Collecting annotations from human raters often results in a trade-off between the quantity of labels one wishes to gather and the quality of these labels. As such, it is often only…
Improving Robustness using Generated Data
Sven Gowal, Sylvestre-Alvise Rebuffi, Olivia Wiles +3
Recent work argues that robust training requires substantially larger datasets than those required for standard classification. On CIFAR-10 and CIFAR-100, this translates into a si…
A Closer Look at the Adversarial Robustness of Information Bottleneck Models
Iryna Korshunova, David Stutz, Alexander A. Alemi +2
We study the adversarial robustness of information bottleneck models for classification. Previous works showed that the robustness of models trained with information bottlenecks ca…
Make Sure You're Unsure: A Framework for Verifying Probabilistic Specifications
Leonard Berrada, Sumanth Dathathri, Krishnamurthy Dvijotham +5
Most real world applications require dealing with stochasticity like sensor noise or predictive uncertainty, where formal specifications of desired behavior are inherently probabil…
Autoencoding Variational Autoencoder
A. Taylan Cemgil, Sumedh Ghaisas, Krishnamurthy Dvijotham +2
Does a Variational AutoEncoder (VAE) consistently encode typical samples generated from its decoder? This paper shows that the perhaps surprising answer to this question is `No'; a…
An empirical investigation of the challenges of real-world reinforcement learning
Gabriel Dulac-Arnold, Nir Levine, Daniel J. Mankowitz +4
Reinforcement learning (RL) has proven its worth in a series of artificial domains, and is beginning to show some successes in real-world scenarios. However, much of the research a…
Achieving Robustness in the Wild via Adversarial Mixing with Disentangled Representations
Sven Gowal, Chongli Qin, Po-Sen Huang +4
Recent research has made the surprising finding that state-of-the-art deep learning models sometimes fail to generalize to small variations of the input. Adversarial training has b…
An Alternative Surrogate Loss for PGD-based Adversarial Testing
Sven Gowal, Jonathan Uesato, Chongli Qin +3
Adversarial testing methods based on Projected Gradient Descent (PGD) are widely used for searching norm-bounded perturbations that cause the inputs of neural networks to be miscla…
Verification of Non-Linear Specifications for Neural Networks
Chongli Qin, Krishnamurthy, Dvijotham +7
Prior work on neural network verification has focused on specifications that are linear functions of the output of the network, e.g., invariance of the classifier output under adve…
On the Effectiveness of Interval Bound Propagation for Training Verifiably Robust Models
Sven Gowal, Krishnamurthy Dvijotham, Robert Stanforth +6
Recent work has shown that it is possible to train deep neural networks that are provably robust to norm-bounded adversarial perturbations. Most of these methods are based on minim…
Learning from Delayed Outcomes via Proxies with Applications to Recommender Systems
Timothy A. Mann, Sven Gowal, András György +4
Predicting delayed outcomes is an important problem in recommender systems (e.g., if customers will finish reading an ebook). We formalize the problem as an adversarial, delayed on…
Training verified learners with learned verifiers
Krishnamurthy Dvijotham, Sven Gowal, Robert Stanforth +4
This paper proposes a new algorithmic framework, predictor-verifier training, to train neural networks that are verifiable, i.e., networks that provably satisfy some desired input-…
A Dual Approach to Scalable Verification of Deep Networks
Krishnamurthy, Dvijotham, Robert Stanforth +3
This paper addresses the problem of formally verifying desirable properties of neural networks, i.e., obtaining provable guarantees that neural networks satisfy specifications rela…