activity
20132026
most citedScaling provable adversarial defenses

119 citations · 241 across the 10 of their papers we have counts for

collaborators

12 papers

cs.LG2026

Jailbreaking LLMs Without Gradients or Priors: Effective and Transferable Attacks

Zhakshylyk Nurlanov, Frank R. Schmidt, Florian Bernard

As Large Language Models (LLMs) are increasingly deployed in safety-critical domains, rigorously evaluating their robustness against adversarial jailbreaks is essential. However, c…

cs.LG2023

Adaptive Certified Training: Towards Better Accuracy-Robustness Tradeoffs

Zhakshylyk Nurlanov, Frank R. Schmidt, Florian Bernard

As deep learning models continue to advance and are increasingly utilized in real-world systems, the issue of robustness remains a major challenge. Existing certified training meth…

cs.CV2022

Universe Points Representation Learning for Partial Multi-Graph Matching

Zhakshylyk Nurlanov, Frank R. Schmidt, Florian Bernard

Many challenges from natural world can be formulated as a graph matching problem. Previous deep learning-based methods mainly consider a full two-graph matching setting. In this wo…

cs.LG2020

Neural Network Virtual Sensors for Fuel Injection Quantities with Provable Performance Specifications

Eric Wong, Tim Schneider, Joerg Schmitt +2

Recent work has shown that it is possible to learn neural networks with provable guarantees on the output of the model when subject to input perturbations, however these works have…

cs.CV2019★ 61 cited

Adversarial camera stickers: A physical camera-based attack on deep learning systems

Juncheng Li, Frank R. Schmidt, J. Zico Kolter

Recent work has documented the susceptibility of deep learning systems to adversarial examples, but most such attacks directly manipulate the digital input to a classifier. Althoug…

cs.LG2019★ 57 cited

Wasserstein Adversarial Examples via Projected Sinkhorn Iterations

Eric Wong, Frank R. Schmidt, J. Zico Kolter

A rapidly growing area of work has studied the existence of adversarial examples, datapoints which have been perturbed to fool a classifier, but the vast majority of these works ha…

cs.LG2018★ 119 cited

Scaling provable adversarial defenses

Eric Wong, Frank R. Schmidt, Jan Hendrik Metzen +1

Recent work has developed methods for learning deep network classifiers that are provably robust to norm-bounded adversarial perturbation; however, these methods are currently only…

cs.CV2017

Compression for Smooth Shape Analysis

V. Estellers, F. R. Schmidt, D. Cremers

Most 3D shape analysis methods use triangular meshes to discretize both the shape and functions on it as piecewise linear functions. With this representation, shape analysis requir…

cs.LG2017

Discrete-Continuous ADMM for Transductive Inference in Higher-Order MRFs

Emanuel Laude, Jan-Hendrik Lange, Jonas Schüpfer +5

This paper introduces a novel algorithm for transductive inference in higher-order MRFs, where the unary energies are parameterized by a variable classifier. The considered task is…

cs.CV2016

A Combinatorial Solution to Non-Rigid 3D Shape-to-Image Matching

Florian Bernard, Frank R. Schmidt, Johan Thunberg +1

We propose a combinatorial solution for the problem of non-rigidly matching a 3D shape to 3D image data. To this end, we model the shape as a triangular mesh and allow each triangl…

cs.CV2016★ 4 cited

Efficient Globally Optimal 2D-to-3D Deformable Shape Matching

Zorah Lähner, Emanuele Rodolà, Frank R. Schmidt +2

We propose the first algorithm for non-rigid 2D-to-3D shape matching, where the input is a 2D shape represented as a planar curve and a 3D shape represented as a surface; the outpu…

cs.CV2013

An Experimental Comparison of Trust Region and Level Sets

Lena Gorelick, Ismail BenAyed, Frank R. Schmidt +1

High-order (non-linear) functionals have become very popular in segmentation, stereo and other computer vision problems. Level sets is a well established general gradient descent f…