activity
20062025
most citedTowards Deep Learning Models Resistant to Adversarial Attacks

1.5k citations · 5.7k across the 60 of their papers we have counts for

collaborators
Showing cs.CVShow all

8 papers · 1 filter

cs.CV2022★ 6 cited

Missingness Bias in Model Debugging

Saachi Jain, Hadi Salman, Eric Wong +4

Missingness, or the absence of features from an input, is a concept fundamental to many model debugging tools. However, in computer vision, pixels cannot simply be removed from an…

cs.CV2021★ 14 cited

3DB: A Framework for Debugging Computer Vision Models

Guillaume Leclerc, Hadi Salman, Andrew Ilyas +9

We introduce 3DB: an extendable, unified framework for testing and debugging vision models using photorealistic simulation. We demonstrate, through a wide range of use cases, that…

cs.CV2020★ 25 cited

Unadversarial Examples: Designing Objects for Robust Vision

Hadi Salman, Andrew Ilyas, Logan Engstrom +3

We study a class of realistic computer vision settings wherein one can influence the design of the objects being recognized. We develop a framework that leverages this capability t…

cs.CV2020★ 19 cited

BREEDS: Benchmarks for Subpopulation Shift

Shibani Santurkar, Dimitris Tsipras, Aleksander Madry

We develop a methodology for assessing the robustness of models to subpopulation shift---specifically, their ability to generalize to novel data subpopulations that were not observ…

cs.CV2020★ 111 cited

Do Adversarially Robust ImageNet Models Transfer Better?

Hadi Salman, Andrew Ilyas, Logan Engstrom +2

Transfer learning is a widely-used paradigm in deep learning, where models pre-trained on standard datasets can be efficiently adapted to downstream tasks. Typically, better pre-tr…

cs.CV2020★ 59 cited

Noise or Signal: The Role of Image Backgrounds in Object Recognition

Kai Xiao, Logan Engstrom, Andrew Ilyas +1

We assess the tendency of state-of-the-art object recognition models to depend on signals from image backgrounds. We create a toolkit for disentangling foreground and background si…