148 citations · 249 across the 20 of their papers we have counts for
11 papers · 1 filter
Rethinking Robustness in Machine Learning: A Posterior Agreement Approach
João Borges S. Carvalho, Victor Jimenez Rodriguez, Alessandro Torcinovich +4
The robustness of algorithms against covariate shifts is a fundamental problem with critical implications for the deployment of machine learning algorithms in the real world. Curre…
On the Robustness of Adversarial Training Against Uncertainty Attacks
Emanuele Ledda, Giovanni Scodeller, Daniele Angioni +5
In learning problems, the noise inherent to the task at hand hinders the possibility to infer without a certain degree of uncertainty. Quantifying this uncertainty, regardless of i…
Over-parameterization and Adversarial Robustness in Neural Networks: An Overview and Empirical Analysis
Srishti Gupta, Zhang Chen, Luca Demetrio +9
Thanks to their extensive capacity, over-parameterized neural networks exhibit superior predictive capabilities and generalization. However, having a large parameter space is consi…
AttackBench: Evaluating Gradient-based Attacks for Adversarial Examples
Antonio Emanuele Cinà, Jérôme Rony, Maura Pintor +5
Adversarial examples are typically optimized with gradient-based attacks. While novel attacks are continuously proposed, each is shown to outperform its predecessors using differen…
-zero: Gradient-based Optimization of -norm Adversarial Examples
Antonio Emanuele Cinà, Francesco Villani, Maura Pintor +3
Evaluating the adversarial robustness of deep networks to gradient-based attacks is challenging. While most attacks consider - and -norm constraints to craft i…
Minimizing Energy Consumption of Deep Learning Models by Energy-Aware Training
Dario Lazzaro, Antonio Emanuele Cinà, Maura Pintor +4
Deep learning models undergo a significant increase in the number of parameters they possess, leading to the execution of a larger number of operations during inference. This expan…
On the Limitations of Model Stealing with Uncertainty Quantification Models
David Pape, Sina Däubener, Thorsten Eisenhofer +2
Model stealing aims at inferring a victim model's functionality at a fraction of the original training cost. While the goal is clear, in practice the model's architecture, weight d…
Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning
Antonio Emanuele Cinà, Kathrin Grosse, Ambra Demontis +7
The success of machine learning is fueled by the increasing availability of computing power and large training datasets. The training data is used to learn new models or update exi…
Backdoor Learning Curves: Explaining Backdoor Poisoning Beyond Influence Functions
Antonio Emanuele Cinà, Kathrin Grosse, Sebastiano Vascon +4
Backdoor attacks inject poisoning samples during training, with the goal of forcing a machine learning model to output an attacker-chosen class when presented a specific trigger at…
The Hammer and the Nut: Is Bilevel Optimization Really Needed to Poison Linear Classifiers?
Antonio Emanuele Cinà, Sebastiano Vascon, Ambra Demontis +3
One of the most concerning threats for modern AI systems is data poisoning, where the attacker injects maliciously crafted training data to corrupt the system's behavior at test ti…
A black-box adversarial attack for poisoning clustering
Antonio Emanuele Cinà, Alessandro Torcinovich, Marcello Pelillo
Clustering algorithms play a fundamental role as tools in decision-making and sensible automation processes. Due to the widespread use of these applications, a robustness analysis…