activity
20112026
most citedAdversarial Robustness through Local Linearization

190 citations · 950 across the 19 of their papers we have counts for

collaborators

22 papers

quant-ph2026

Automated near-term quantum algorithm discovery for molecular ground states

Fabian Finger, Frederic Rapp, Pranav Kalidindi +10

Designing quantum algorithms is a complex and counterintuitive task, making it an ideal candidate for AI-driven algorithm discovery. To this end, we employ the Hive, an AI platform…

quant-ph2024★ 2 cited

Quantum Circuit Optimization with AlphaTensor

Francisco J. R. Ruiz, Tuomas Laakkonen, Johannes Bausch +10

A key challenge in realizing fault-tolerant quantum computers is circuit optimization. Focusing on the most expensive gates in fault-tolerant quantum computation (namely, the T gat…

stat.ML2019★ 190 cited

Adversarial Robustness through Local Linearization

Chongli Qin, James Martens, Sven Gowal +6

Adversarial training is an effective methodology for training deep neural networks that are robust against adversarial, norm-bounded perturbations. However, the computational cost…

cs.LG2019★ 3 cited

Learning dynamic polynomial proofs

Alhussein Fawzi, Mateusz Malinowski, Hamza Fawzi +1

Polynomial inequalities lie at the heart of many mathematical disciplines. In this paper, we consider the fundamental computational task of automatically searching for proofs of po…

cs.LG2019★ 174 cited

Are Labels Required for Improving Adversarial Robustness?

Jonathan Uesato, Jean-Baptiste Alayrac, Po-Sen Huang +3

Recent work has uncovered the interesting (and somewhat surprising) finding that training models to be invariant to adversarial perturbations requires substantially larger datasets…

cs.LG2018★ 12 cited

Verification of deep probabilistic models

Krishnamurthy Dvijotham, Marta Garnelo, Alhussein Fawzi +1

Probabilistic models are a critical part of the modern deep learning toolbox - ranging from generative models (VAEs, GANs), sequence to sequence models used in machine translation…

cs.LG2018

Robustness via curvature regularization, and vice versa

Seyed-Mohsen Moosavi-Dezfooli, Alhussein Fawzi, Jonathan Uesato +1

State-of-the-art classifiers have been shown to be largely vulnerable to adversarial perturbations. One of the most effective strategies to improve robustness is adversarial traini…

cs.CV2018★ 2 cited

SaaS: Speed as a Supervisor for Semi-supervised Learning

Safa Cicek, Alhussein Fawzi, Stefano Soatto

We introduce the SaaS Algorithm for semi-supervised learning, which uses learning speed during stochastic gradient descent in a deep neural network to measure the quality of an ite…

cs.LG2018★ 8 cited

Robustness of classifiers to uniform and Gaussian noise

Jean-Yves Franceschi, Alhussein Fawzi, Omar Fawzi

We study the robustness of classifiers to various kinds of random noise models. In particular, we consider noise drawn uniformly from the ball for and…

cs.LG2018★ 153 cited

Adversarial vulnerability for any classifier

Alhussein Fawzi, Hamza Fawzi, Omar Fawzi

Despite achieving impressive performance, state-of-the-art classifiers remain highly vulnerable to small, imperceptible, adversarial perturbations. This vulnerability has proven em…

cs.CV2017★ 31 cited

Classification regions of deep neural networks

Alhussein Fawzi, Seyed-Mohsen Moosavi-Dezfooli, Pascal Frossard +1

The goal of this paper is to analyze the geometric properties of deep neural network classifiers in the input space. We specifically study the topology of classification regions cr…

cs.CV2017★ 43 cited

Robustness of classifiers to universal perturbations: a geometric perspective

Seyed-Mohsen Moosavi-Dezfooli, Alhussein Fawzi, Omar Fawzi +2

Deep networks have recently been shown to be vulnerable to universal perturbations: there exist very small image-agnostic perturbations that cause most natural images to be misclas…

cs.CV2016★ 90 cited

Universal adversarial perturbations

Seyed-Mohsen Moosavi-Dezfooli, Alhussein Fawzi, Omar Fawzi +1

Given a state-of-the-art deep neural network classifier, we show the existence of a universal (image-agnostic) and very small perturbation vector that causes natural images to be m…

cs.LG2016★ 121 cited

Robustness of classifiers: from adversarial to random noise

Alhussein Fawzi, Seyed-Mohsen Moosavi-Dezfooli, Pascal Frossard

Several recent works have shown that state-of-the-art classifiers are vulnerable to worst-case (i.e., adversarial) perturbations of the datapoints. On the other hand, it has been e…

cs.LG2015★ 113 cited

DeepFool: a simple and accurate method to fool deep neural networks

Seyed-Mohsen Moosavi-Dezfooli, Alhussein Fawzi, Pascal Frossard

State-of-the-art deep neural networks have achieved impressive results on many image classification tasks. However, these same architectures have been shown to be unstable to small…

cs.CV2015

Manitest: Are classifiers really invariant?

Alhussein Fawzi, Pascal Frossard

Invariance to geometric transformations is a highly desirable property of automatic classifiers in many image recognition tasks. Nevertheless, it is unclear to which extent state-o…

stat.ML2015★ 1 cited

Multi-task additive models with shared transfer functions based on dictionary learning

Alhussein Fawzi, Mathieu Sinn, Pascal Frossard

Additive models form a widely popular class of regression models which represent the relation between covariates and response variables as the sum of low-dimensional transfer funct…

cs.LG2015

Analysis of classifiers' robustness to adversarial perturbations

Alhussein Fawzi, Omar Fawzi, Pascal Frossard

The goal of this paper is to analyze an intriguing phenomenon recently discovered in deep networks, namely their instability to adversarial perturbations (Szegedy et. al., 2014). W…

math.NA2014

Proceedings of the second "international Traveling Workshop on Interactions between Sparse models and Technology" (iTWIST'14)

L. Jacques, C. De Vleeschouwer, Y. Boursier +64

The implicit objective of the biennial "international - Traveling Workshop on Interactions between Sparse models and Technology" (iTWIST) is to foster collaboration between interna…

cs.CV2014★ 2 cited

Dictionary learning for fast classification based on soft-thresholding

Alhussein Fawzi, Mike Davies, Pascal Frossard

Classifiers based on sparse representations have recently been shown to provide excellent results in many visual recognition and classification tasks. However, the high cost of com…

cs.CV2013★ 4 cited

Image registration with sparse approximations in parametric dictionaries

Alhussein Fawzi, Pascal Frossard

We examine in this paper the problem of image registration from the new perspective where images are given by sparse approximations in parametric dictionaries of geometric function…

cs.NI2011★ 1 cited

Thresholding-based reconstruction of compressed correlated signals

Alhussein Fawzi, Tamara Tosic, Pascal Frossard

We consider the problem of recovering a set of correlated signals (e.g., images from different viewpoints) from a few linear measurements per signal. We assume that each sensor in…