Fisher sam: Information geometry and sharpness aware minimisation
Recent sharpness-aware minimisation (SAM) is known to find flat minima which is beneficial
for better generalisation with improved robustness. SAM essentially modifies the loss …
for better generalisation with improved robustness. SAM essentially modifies the loss …
Prompt certified machine unlearning with randomized gradient smoothing and quantization
The right to be forgotten calls for efficient machine unlearning techniques that make trained
machine learning models forget a cohort of data. The combination of training and unlearning …
machine learning models forget a cohort of data. The combination of training and unlearning …
Relating adversarially robust generalization to flat minima
Adversarial training (AT) has become the de-facto standard to obtain models robust against
adversarial examples. However, AT exhibits severe robust overfitting: cross-entropy loss on …
adversarial examples. However, AT exhibits severe robust overfitting: cross-entropy loss on …
Industrial practitioners' mental models of adversarial machine learning
Although machine learning is widely used in practice, little is known about practitioners'
understanding of potential security challenges. In this work, we close this substantial gap …
understanding of potential security challenges. In this work, we close this substantial gap …
Formalizing generalization and adversarial robustness of neural networks to weight perturbations
Studying the sensitivity of weight perturbation in neural networks and its impacts on model
performance, including generalization and robustness, is an active research topic due to its …
performance, including generalization and robustness, is an active research topic due to its …
Pela: Learning parameter-efficient models with low-rank approximation
Applying a pre-trained large model to downstream tasks is prohibitive under resource-
constrained conditions. Recent dominant approaches for addressing efficiency issues …
constrained conditions. Recent dominant approaches for addressing efficiency issues …
[LIBRO][B] Adversarial robustness for machine learning
Adversarial Robustness for Machine Learning summarizes the recent progress on this topic
and introduces popular algorithms on adversarial attack, defense and veri? cation. Sections …
and introduces popular algorithms on adversarial attack, defense and veri? cation. Sections …
Holistic adversarial robustness of deep learning models
Adversarial robustness studies the worst-case performance of a machine learning model to
ensure safety and reliability. With the proliferation of deep-learning-based technology, the …
ensure safety and reliability. With the proliferation of deep-learning-based technology, the …
Bit error robustness for energy-efficient dnn accelerators
Deep neural network (DNN) accelerators received considerable attention in past years due
to saved energy compared to mainstream hardware. Low-voltage operation of DNN …
to saved energy compared to mainstream hardware. Low-voltage operation of DNN …
Exploring the vulnerability of deep neural networks: A study of parameter corruption
We argue that the vulnerability of model parameters is of crucial value to the study of model
robustness and generalization but little research has been devoted to understanding this …
robustness and generalization but little research has been devoted to understanding this …