Deep Learning

The Intrinsic Dimension of Images and Its Impact on Learning
It is widely believed that natural image data exhibits low-dimensional structure despite the high dimensionality of conventional pixel …
Phillip Pope, Chen Zhu, Ahmed Abdelkader, Micah Goldblum, Tom Goldstein
Cite Project OpenReview arXiv Code
The Intrinsic Dimension of Images and Its Impact on Learning
Detection as Regression: Certified Object Detection by Median Smoothing
Despite the vulnerability of object detectors to adversarial attacks, very few defenses are known to date. While adversarial training …
Ping-yeh Chiang, Michael Curry, Ahmed Abdelkader, Aounon Kumar, John Dickerson, Tom Goldstein
Cite Project NeurIPS arXiv Code
Certified Defenses for Adversarial Patches
Adversarial patch attacks are among one of the most practical threat models against real-world computer vision systems. This paper …
Ping-yeh Chiang, Renkun Ni, Ahmed Abdelkader, Chen Zhu, Chris Studor, Tom Goldstein
Cite Project OpenReview arXiv Code
Headless Horseman: Adversarial Attacks on Transfer Learning Models
Transfer learning facilitates the training of task-specific classifiers using pre-trained models as feature extractors. We present a …
Ahmed Abdelkader, Michael Curry, Liam Fowl, Tom Goldstein, Avi Schwarzschild, Manli Shu, Christoph Studer, Chen Zhu
Cite Project IEEEXplore arXiv Code
Machine Learning
Mitigating the vulnerabilities of modern machine learning workflows