NeurIPS | Security Research Group

NeurIPS 2019

16 December 2019 adversarial machine learning, Xiao Zhang, NeurIPS, Saeed Mahloujifar, Mohammad Mahmoody

Here's a video of Xiao Zhang's presentation at NeurIPS 2019:
https://slideslive.com/38921718/track-2-session-1 (starting at 26:50)

See this post for info on the paper.

Here are a few pictures from NeurIPS 2019 (by Sicheng Zhu and Mohammad Mahmoody):

NeurIPS 2019: Empirically Measuring Concentration

22 November 2019 adversarial machine learning, Xiao Zhang, NeurIPS, Saeed Mahloujifar, Mohammad Mahmoody

Xiao Zhang will present our work (with Saeed Mahloujifar and Mohamood Mahmoody) as a spotlight at NeurIPS 2019, Vancouver, 10 December 2019. Recent theoretical results, starting with Gilmer et al.’s Adversarial Spheres (2018), show that if inputs are drawn from a concentrated metric probability space, then adversarial examples with small perturbation are inevitable.c The key insight from this line of research is that concentration of measure gives lower bound on adversarial risk for a large collection of classifiers (e.