activity
20152023
most citedByzantine-Robust Federated Machine Learning through Adaptive Model Averaging

160 citations · 598 across the 22 of their papers we have counts for

collaborators
Showing cs.LGShow all

10 papers · 1 filter

cs.LG2023

Hyperparameter Learning under Data Poisoning: Analysis of the Influence of Regularization via Multiobjective Bilevel Optimization

Javier Carnerero-Cano, Luis Muñoz-González, Phillippa Spencer +1

Machine Learning (ML) algorithms are vulnerable to poisoning attacks, where a fraction of the training data is manipulated to deliberately degrade the algorithms' performance. Opti…

cs.LG2022★ 1 cited

Jacobian Ensembles Improve Robustness Trade-offs to Adversarial Attacks

Kenneth T. Co, David Martinez-Rego, Zhongyuan Hau +1

Deep neural networks have become an integral part of our software infrastructure and are being deployed in many widely-used and safety-critical applications. However, their integra…

cs.LG2021★ 3 cited

Regularization Can Help Mitigate Poisoning Attacks... with the Right Hyperparameters

Javier Carnerero-Cano, Luis Muñoz-González, Phillippa Spencer +1

Machine learning algorithms are vulnerable to poisoning attacks, where a fraction of the training data is manipulated to degrade the algorithms' performance. We show that current a…

cs.LG2021★ 1 cited

Real-time Detection of Practical Universal Adversarial Perturbations

Kenneth T. Co, Luis Muñoz-González, Leslie Kanthan +1

Universal Adversarial Perturbations (UAPs) are a prominent class of adversarial examples that exploit the systemic vulnerabilities and enable physically realizable and robust attac…

cs.LG2021★ 9 cited

Jacobian Regularization for Mitigating Universal Adversarial Perturbations

Kenneth T. Co, David Martinez Rego, Emil C. Lupu

Universal Adversarial Perturbations (UAPs) are input perturbations that can fool a neural network on large sets of data. They are a class of attacks that represents a significant t…

cs.LG2020★ 7 cited

Robustness and Transferability of Universal Attacks on Compressed Models

Alberto G. Matachana, Kenneth T. Co, Luis Muñoz-González +2

Neural network compression methods like pruning and quantization are very effective at efficiently deploying Deep Neural Networks (DNNs) on edge devices. However, DNNs remain vulne…

cs.LG2020★ 8 cited

Regularisation Can Mitigate Poisoning Attacks: A Novel Analysis Based on Multiobjective Bilevel Optimisation

Javier Carnerero-Cano, Luis Muñoz-González, Phillippa Spencer +1

Machine Learning (ML) algorithms are vulnerable to poisoning attacks, where a fraction of the training data is manipulated to deliberately degrade the algorithms' performance. Opti…

cs.LG2019★ 3 cited

Sensitivity of Deep Convolutional Networks to Gabor Noise

Kenneth T. Co, Luis Muñoz-González, Emil C. Lupu

Deep Convolutional Networks (DCNs) have been shown to be sensitive to Universal Adversarial Perturbations (UAPs): input-agnostic perturbations that fool a model on large portions o…

cs.LG2019★ 47 cited

Poisoning Attacks with Generative Adversarial Nets

Luis Muñoz-González, Bjarne Pfitzner, Matteo Russo +2

Machine learning algorithms are vulnerable to poisoning attacks: An adversary can inject malicious points in the training dataset to influence the learning process and degrade the…

cs.LG2017

Towards Poisoning of Deep Learning Algorithms with Back-gradient Optimization

Luis Muñoz-González, Battista Biggio, Ambra Demontis +4

A number of online services nowadays rely upon machine learning to extract valuable information from data collected in the wild. This exposes learning algorithms to the threat of d…