Developments in Adversarial Machine Learning

Thu 19Sep2019

Florian Tramèr, Stanford University

From 12.00 until 13.30

At CNB/F/110 (Lunch) + CAB/F/100.9 (Seminar), ETH Zurich

Universitätstrasse 6, 8092 Zurich


The past five years have seen thousands of academic papers devoted to the study of adversarial examples in machine learning. Yet, despite countless proposed defenses, robustness remains evasive even for the simplest toy threat models. I’ll discuss recent work that shows how defenses degrade when extended to multiple perturbation types, and how models can also be trained to be “too robust” on simple datasets. On the positive side, I’ll describe new ideas for protecting neural networks against special types of localized and universal perturbations that enable adversarial examples to be applied in the physical world.

Download Event to Calendar