activity
20222026
most citedWhen Flatness Does (Not) Guarantee Adversarial Robustness

1 citations · 3 across the 10 of their papers we have counts for

collaborators

10 papers

cs.LG2026

Discovering Subgroups with Exceptional Survival Characteristics

Mhd Jawad Al Rahwanji, Sascha Xu, Nils Philipp Walter +1

In many applications, it is important to identify subpopulations that survive longer or shorter than the rest of the population. In medicine, for example, it allows determining whi…

cs.LG2025

Can LLMs subtract numbers?

Mayank Jobanputra, Nils Philipp Walter, Maitrey Mehta +7

We present a systematic study of subtraction in large language models (LLMs). While prior benchmarks emphasize addition and multiplication, subtraction has received comparatively l…

cs.LG2025★ 1 cited

When Flatness Does (Not) Guarantee Adversarial Robustness

Nils Philipp Walter, Linara Adilova, Jilles Vreeken +1

Despite their empirical success, neural networks remain vulnerable to small, adversarial perturbations. A longstanding hypothesis suggests that flat minima, regions of low curvatur…

cs.CR2025

Soft Instruction De-escalation Defense

Nils Philipp Walter, Chawin Sitawarin, Jamie Hayes +2

Large Language Models (LLMs) are increasingly deployed in agentic systems that interact with an external environment; this makes them susceptible to prompt injections when dealing…

cs.CV2025

Hidden in Plain Sight -- Class Competition Focuses Attribution Maps

Nils Philipp Walter, Jilles Vreeken, Jonas Fischer

Attribution methods reveal which input features a neural network uses for a prediction, adding transparency to their decisions. A common problem is that these attributions seem uns…

cs.LG2024★ 1 cited

Neuro-Symbolic Rule Lists

Sascha Xu, Nils Philipp Walter, Jilles Vreeken

Machine learning models deployed in sensitive areas such as healthcare must be interpretable to ensure accountability and fairness. Rule lists (if Age < 35 Priors > 0 then…

cs.LG2024

The Uncanny Valley: Exploring Adversarial Robustness from a Flatness Perspective

Nils Philipp Walter, Linara Adilova, Jilles Vreeken +1

Flatness of the loss surface not only correlates positively with generalization, but is also related to adversarial robustness since perturbations of inputs relate non-linearly to…

cs.LG2024

Learning Exceptional Subgroups by End-to-End Maximizing KL-divergence

Sascha Xu, Nils Philipp Walter, Janis Kalofolias +1

Finding and describing sub-populations that are exceptional regarding a target property has important applications in many scientific disciplines, from identifying disadvantaged de…

cs.LG2023

Finding Interpretable Class-Specific Patterns through Efficient Neural Search

Nils Philipp Walter, Jonas Fischer, Jilles Vreeken

Discovering patterns in data that best describe the differences between classes allows to hypothesize and reason about class-specific mechanisms. In molecular biology, for example,…

cs.LG2022★ 1 cited

On Fragile Features and Batch Normalization in Adversarial Training

Nils Philipp Walter, David Stutz, Bernt Schiele

Modern deep learning architecture utilize batch normalization (BN) to stabilize training and improve accuracy. It has been shown that the BN layers alone are surprisingly expressiv…