Related papers: Symmetry Defeats Auditing
We respond to the recent paper by Makelov et al. (2023), which reviews subspace interchange intervention methods like distributed alignment search (DAS; Geiger et al. 2023) and claims that these methods potentially cause "interpretability…
Recognizing symmetries in data allows for significant boosts in neural network training. In many cases, however, the underlying symmetry is present only in an idealized dataset, and is broken in the training data, due to effects such as…
We propose a test-time defense mechanism against adversarial attacks: imperceptible image perturbations that significantly alter the predictions of a model. Unlike existing methods that rely on feature filtering or smoothing, which can lead…
In a recent preprint [ArXiv 1802.02319], Meneses et al. challenge our proof that scale invariance implies conformal invariance for the three-dimensional Ising model [B. Delamotte, M. Tissier and N. Wschebor, Phys. Rev. E 93 (2016),…
In dimensions $\geq 3$, we prove that the X-ray transform of symmetric tensors of arbitrary degree is generically injective with respect to the metric on closed Anosov manifolds and on manifolds with spherical strictly convex boundary, no…
Deep Learning algorithms have achieved the state-of-the-art performance for Image Classification and have been used even in security-critical applications, such as biometric recognition systems and self-driving cars. However, recent works…
Adversarial examples --- perturbations to the input of a model that elicit large changes in the output --- have been shown to be an effective way of assessing the robustness of sequence-to-sequence (seq2seq) models. However, these…
We show that the large sequential decay corrections obtained by Ono {\it et al} [nucl-ex/0507018], is in contradiction with both the other dynamical and statistical model calculations carried out for the same systems and energy. On the…
The results of this paper have been greatly superseded by those in the paper "Contact geometry and isosystolic inequalities" (arXiv:1109.4253) by the same authors.
We introduce a novel generalization of entropy and conditional entropy from which most definitions from the literature can be derived as particular cases. Within this general framework, we investigate the problem of designing…
The task of perspective-aware classification introduces a bottleneck in terms of parametric efficiency that did not get enough recognition in existing studies. In this article, we aim to address this issue by applying an existing…
We compute the supersymmetric (SUSY) corrections to the parity-violating, deep inelastic electron-deuteron asymmetry. Working with the Minimal Supersymmetric Standard Model (MSSM) we consider two cases: R parity conserving and R…
Deep Neural Networks (DNNs) have been shown to be vulnerable to adversarial examples, which are slightly perturbed input images which lead DNNs to make wrong predictions. To protect from such examples, various defense strategies have been…
This paper is twofold. In the first part, we present a refinement of the R\'enyi Entropy Power Inequality (EPI) recently obtained in \cite{BM16}. The proof largely follows the approach in \cite{DCT91} of employing Young's convolution…
Incorporating symmetries can lead to highly data-efficient and generalizable models by defining equivalence classes of data samples related by transformations. However, characterizing how transformations act on input data is often…
In most state-of-the-art image restoration methods, the sum of a data-fidelity and a regularization term is optimized using an iterative algorithm such as ADMM (alternating direction method of multipliers). In recent years, the possibility…
Adversarial attacks on machine learning algorithms have been a key deterrent to the adoption of AI in many real-world use cases. They significantly undermine the ability of high-performance neural networks by forcing misclassifications.…
We use matched asymptotics to derive analytical formulae for the acoustic impedance of a subwavelength orifice consisting of a cylindrical perforation in a rigid plate. In the inviscid case, an end correction to the length of the orifice…
Object detection systems using deep learning models have become increasingly popular in robotics thanks to the rising power of CPUs and GPUs in embedded systems. However, these models are susceptible to adversarial attacks. While some…
We study the membership inference (MI) attack against classifiers, where the attacker's goal is to determine whether a data instance was used for training the classifier. Through systematic cataloging of existing MI attacks and extensive…