Publications de Chen Liu | EPFL Graph Search

Fast Adversarial Training With Adaptive Step Size

Mathieu Salzmann, Sabine Süsstrunk, Jue Wang, Chen Liu, Yong Zhang, Zhuoyi Huang

While adversarial training and its variants have shown to be the most effective algorithms to defend against adversarial attacks, their extremely slow training process makes it hard to scale to large datasets like ImageNet. The key idea of recent works to ...

Ieee-Inst Electrical Electronics Engineers Inc2023

Towards Stable and Efficient Adversarial Training against $l_1$ Bounded Adversarial Attacks

Mathieu Salzmann, Sabine Süsstrunk, Chen Liu, Zhuoyi Huang, Yulun Jiang

We address the problem of stably and efficiently training a deep neural network robust to adversarial perturbations bounded by an

l_1

norm. We demonstrate that achieving robustness against

l_1

-bounded perturbations is more challenging than in the

l_2

...

2023

Training Provably Robust Models by Polyhedral Envelope Regularization

Mathieu Salzmann, Sabine Süsstrunk, Chen Liu

Training certifiable neural networks enables us to obtain models with robustness guarantees against adversarial attacks. In this work, we introduce a framework to obtain a provable adversarial-free region in the neighborhood of the input data by a polyhedr ...

IEEE-INST ELECTRICAL ELECTRONICS ENGINEERS INC2023

Towards Verifiable, Generalizable and Efficient Robust Deep Neural Networks

Chen Liu

In the last decade, deep neural networks have achieved tremendous success in many fields of machine learning. However, they are shown vulnerable against adversarial attacks: well-designed, yet imperceptible, perturbations can make the state-of-the-art deep ...

EPFL2022

Robust Binary Models by Pruning Randomly-initialized Networks

Mathieu Salzmann, Sabine Süsstrunk, Chen Liu, Ziqi Zhao

Robustness to adversarial attacks was shown to require a larger model capacity, and thus a larger memory footprint. In this paper, we introduce an approach to obtain robust yet compact models by pruning randomly-initialized binary networks. Unlike adversar ...

2022

On the Loss Landscape of Adversarial Training: Identifying Challenges and How to Overcome Them

Mathieu Salzmann, Sabine Süsstrunk, Tao Lin, Chen Liu

We analyze the influence of adversarial training on the loss landscape of machine learning models. To this end, we first provide analytical studies of the properties of adversarial loss functions under different adversarial budgets. We then demonstrate tha ...

2021

Simultaneous dual-contrast three-dimensional imaging in live cells via optical diffraction tomography and fluorescence

Christian Depeursinge, Pierre Marquet, Shanshan Kou, Chen Liu

We report a dual-contrast method of simultaneously measuring and visualizing the volumetric structural information in live biological samples in three-dimensional (3D) space. By introducing a direct way of deriving the 3D scattering potential of the object ...

2019

On Certifying Non-Uniform Bounds against Adversarial Attacks

Volkan Cevher, Chen Liu

This work studies the robustness certification problem of neural network models, which aims to find certified adversary-free regions as large as possible around data points. In contrast to the existing approaches that seek regions bounded uniformly along a ...

2019

Finding Mixed Nash Equilibria of Generative Adversarial Networks

Volkan Cevher, Ya-Ping Hsieh, Chen Liu

We reconsider the training objective of Generative Adversarial Networks (GANs) from the mixed Nash Equilibria (NE) perspective. Inspired by the classical prox methods, we develop a novel algorithmic framework for GANs via an infinite-dimensional two-player ...

2018