Sat 4:45 a.m. - 5:00 a.m.
|
Opening Remarks
(
Demonstration
)
>
SlidesLive Video
|
Hang Su
🔗
|
Sat 5:00 a.m. - 5:30 a.m.
|
Invited Talk #1
(
Demonstration
)
>
SlidesLive Video
|
Liwei Wang
🔗
|
Sat 5:30 a.m. - 6:00 a.m.
|
Invited Talk #2
(
Demonstration
)
>
SlidesLive Video
|
Sven Gowal
🔗
|
Sat 6:00 a.m. - 6:05 a.m.
|
Contributed Talk #1
(
Demonstration
)
>
SlidesLive Video
|
Yiming Li
🔗
|
Sat 6:05 a.m. - 6:10 a.m.
|
Contributed Talk #2
(
Demonstration
)
>
SlidesLive Video
|
Evani Radiya-Dixit
🔗
|
Sat 6:10 a.m. - 6:40 a.m.
|
Invited Talk #3
(
Demonstration
)
>
SlidesLive Video
|
Matthias Hein
🔗
|
Sat 6:40 a.m. - 7:10 a.m.
|
Invited Talk #4
(
Demonstration
)
>
SlidesLive Video
|
Aleksander Madry
🔗
|
Sat 7:10 a.m. - 7:15 a.m.
|
Contributed Talk #3
(
Demonstration
)
>
SlidesLive Video
|
Maura Pintor
🔗
|
Sat 7:15 a.m. - 7:20 a.m.
|
Contributed Talk #4
(
Demonstration
)
>
SlidesLive Video
|
Florian Tramer
🔗
|
Sat 7:20 a.m. - 7:50 a.m.
|
Invited Talk #5
(
Demonstration
)
>
SlidesLive Video
|
Jan Hendrik Metzen
🔗
|
Sat 7:50 a.m. - 8:30 a.m.
|
Discussion Panel #1
(
Discussion Panel
)
>
SlidesLive Video
|
Hang Su · Matthias Hein · Liwei Wang · Sven Gowal · Jan Hendrik Metzen · Henry Liu · Yisen Wang
🔗
|
Sat 8:30 a.m. - 9:30 a.m.
|
Poster Session #1
(
Poster
)
>
|
🔗
|
Sat 9:30 a.m. - 10:00 a.m.
|
Invited Talk #6
(
Demonstration
)
>
SlidesLive Video
|
Henry Liu
🔗
|
Sat 10:00 a.m. - 10:30 a.m.
|
Invited Talk #7
(
Demonstration
)
>
SlidesLive Video
|
Nicholas Carlini
🔗
|
Sat 10:30 a.m. - 10:35 a.m.
|
Contributed Talk #5
(
Demonstration
)
>
SlidesLive Video
|
Wan-Yi Lin
🔗
|
Sat 10:35 a.m. - 10:40 a.m.
|
Contributed Talk #6
(
Demonstration
)
>
SlidesLive Video
|
Jihoon Tack
🔗
|
Sat 10:40 a.m. - 11:10 a.m.
|
Invited Talk #8
(
Demonstration
)
>
SlidesLive Video
|
Andrzej Banburski
🔗
|
Sat 11:10 a.m. - 11:40 a.m.
|
Invited Talk #9
(
Demonstration
)
>
SlidesLive Video
|
Kamalika Chaudhuri
🔗
|
Sat 11:40 a.m. - 11:45 a.m.
|
Contributed Talk #7
(
Demonstration
)
>
SlidesLive Video
|
Rahul Rade
🔗
|
Sat 11:45 a.m. - 11:50 a.m.
|
Contributed Talk #8
(
Demonstration
)
>
SlidesLive Video
|
Sandeep Silwal
🔗
|
Sat 11:50 a.m. - 12:20 p.m.
|
Invited Talk #10
(
Demonstration
)
>
SlidesLive Video
|
Cihang Xie
🔗
|
Sat 12:20 p.m. - 12:50 p.m.
|
Invited Talk #11
(
Demonstration
)
>
SlidesLive Video
|
Will Xiao
🔗
|
Sat 12:50 p.m. - 1:30 p.m.
|
Discussion Panel #2
(
Discussion Panel
)
>
SlidesLive Video
|
Bo Li · Nicholas Carlini · Andrzej Banburski · Kamalika Chaudhuri · Will Xiao · Cihang Xie
🔗
|
Sat 1:30 p.m. - 1:35 p.m.
|
Contributed Talk #9
(
Demonstration
)
>
SlidesLive Video
|
Keji Han
🔗
|
Sat 1:35 p.m. - 2:35 p.m.
|
Poster Session #2
(
Poster
)
>
|
🔗
|
-
|
Adversarial Interaction Attacks: Fooling AI to Misinterpret Human Intentions
(
Poster
)
>
|
Nodens Koren · Xingjun Ma · Qiuhong Ke · Yisen Wang · James Bailey
🔗
|
-
|
Towards Achieving Adversarial Robustness Beyond Perceptual Limits
(
Poster
)
>
SlidesLive Video
|
Sravanti Addepalli · Samyak Jain · Gaurang Sriramanan · Shivangi Khare · Venkatesh Babu Radhakrishnan
🔗
|
-
|
Using Anomaly Feature Vectors for Detecting, Classifying and Warning of Outlier Adversarial Examples
(
Poster
)
>
|
Nelson Manohar-Alers · Ryan Feng · Sahib Singh · Jiguo Song · Atul Prakash
🔗
|
-
|
Maximizing the robust margin provably overfits on noiseless data
(
Poster
)
>
SlidesLive Video
|
Fanny Yang · Reinhard Heckel · Michael Aerni · Alexandru Tifrea · Konstantin Donhauser
🔗
|
-
|
Adversarially Trained Neural Policies in the Fourier Domain
(
Poster
)
>
|
Ezgi Korkmaz
🔗
|
-
|
Non-Robust Feature Mapping in Deep Reinforcement Learning
(
Poster
)
>
|
Ezgi Korkmaz
🔗
|
-
|
Adversarial for Good? How the Adversarial ML Community's Values Impede Socially Beneficial Uses of Attacks
(
Poster
)
>
SlidesLive Video
|
Kendra Albert · Maggie Delano · Bogdan Kulynych · Ram Shankar Siva Kumar
🔗
|
-
|
Attacking Few-Shot Classifiers with Adversarial Support Poisoning
(
Poster
)
>
SlidesLive Video
|
Elre Oldewage · John Bronskill · Richard E Turner
🔗
|
-
|
Attention-Guided Black-box Adversarial Attacks with Large-Scale Multiobjective Evolutionary Optimization
(
Poster
)
>
|
Jie Wang · Zhaoxia Yin · Jing Jiang · Yang Du
🔗
|
-
|
Long-term Cross Adversarial Training: A Robust Meta-learning Method for Few-shot Classification Tasks
(
Poster
)
>
|
FAN LIU · Shuyu Zhao · Xuelong Dai · Bin Xiao
🔗
|
-
|
Data Poisoning Won’t Save You From Facial Recognition
(
Poster
)
>
|
Evani Radiya-Dixit · Florian Tramer
🔗
|
-
|
Detecting Adversarial Examples Is (Nearly) As Hard As Classifying Them
(
Poster
)
>
|
Florian Tramer
🔗
|
-
|
Demystifying Adversarial Training via A Unified Probabilistic Framework
(
Poster
)
>
|
Zhouchen Lin · Yisen Wang · Jiansheng Yang · Yifei Wang
🔗
|
-
|
Red Alarm for Pre-trained Models: Universal Vulnerability to Neuron-Level Backdoor Attacks
(
Poster
)
>
|
Zhengyan Zhang · Guangxuan Xiao · Yongwei Li · Tian Lv · Fanchao Qi · Zhiyuan Liu · Yasheng Wang · Xin Jiang · Maosong Sun
🔗
|
-
|
Self-Supervised Iterative Contextual Smoothing for Efficient Adversarial Defense against Gray- and Black-Box Attack
(
Poster
)
>
SlidesLive Video
|
Sungmin Cha · Naeun Ko · YoungJoon Yoo · Taesup Moon
🔗
|
-
|
Towards Safe Reinforcement Learning via Constraining Conditional Value at Risk
(
Poster
)
>
|
Chengyang Ying · Xinning Zhou · Dong Yan · Jun Zhu
🔗
|
-
|
Universal Adversarial Head: Practical Protection against Video Data Leakage
(
Poster
)
>
SlidesLive Video
|
Jiawang Bai · Bin Chen · Dongxian Wu · Chaoning Zhang · Shutao Xia
🔗
|
-
|
Membership Inference Attacks on Lottery Ticket Networks
(
Poster
)
>
|
Aadesh Bagmar · Shishira Maiya · Shruti Bidwalkar · Amol Deshpande
🔗
|
-
|
The Interplay between Distribution Parameters and the Accuracy-Robustness Tradeoff in Classification
(
Poster
)
>
SlidesLive Video
|
Seyed Alireza Mousavi Hosseini · Amir Mohammad Abouei · Mohammad H Rohban
🔗
|
-
|
Limited Budget Adversarial Attack Against Online Image Stream
(
Poster
)
>
SlidesLive Video
|
Hossein Mohasel Arjomandi · Mohammad Khalooei · Maryam Amirmazlaghani
🔗
|
-
|
Disrupting Model Training with Adversarial Shortcuts
(
Poster
)
>
|
Aditya Kusupati · Tadayoshi Kohno · Ivan Evtimov · Ian Covert
🔗
|
-
|
Empirical robustification of pre-trained classifiers
(
Poster
)
>
|
Mohammad Sadegh Norouzzadeh · Wan-Yi Lin · Leonid Boytsov · Leslie Rice · Huan Zhang · Filipe Condessa · Zico Kolter
🔗
|
-
|
Less is More: Feature Selection for Adversarial Robustness with Compressive Counter-Adversarial Attacks
(
Poster
)
>
|
Emre Ozfatura · Muhammad Zaid Hameed · Kerem Ozfatura · Deniz Gunduz
🔗
|
-
|
Helper-based Adversarial Training: Reducing Excessive Margin to Achieve a Better Accuracy vs. Robustness Trade-off
(
Poster
)
>
|
Rahul Rade · Seyed Moosavi
🔗
|
-
|
AID-Purifier: A Light Auxiliary Network for Boosting Adversarial Defense
(
Poster
)
>
SlidesLive Video
|
Duhun Hwang · Eunjung Lee · Wonjong Rhee
🔗
|
-
|
Is It Time to Redefine the Classification Task for Deep Learning Systems?
(
Poster
)
>
SlidesLive Video
|
Keji Han · Yun Li · Songcan Chen
🔗
|
-
|
Boosting Transferability of Targeted Adversarial Examples via Hierarchical Generative Networks
(
Poster
)
>
|
Xiao Yang · Yinpeng Dong · Tianyu Pang
🔗
|
-
|
Strategically-timed State-Observation Attacks on Deep Reinforcement Learning Agents
(
Poster
)
>
|
You Qiaoben · Xinning Zhou · Chengyang Ying · Jun Zhu
🔗
|
-
|
Whispering to DNN: A Speech Steganographic Scheme Based on Hidden Adversarial Examples for Speech Recognition Models
(
Poster
)
>
|
Haozhe Chen · Weiming Zhang · Kejiang Chen · Nenghai Yu
🔗
|
-
|
Improving Visual Quality of Unrestricted Adversarial Examples with Wavelet-VAE
(
Poster
)
>
SlidesLive Video
|
Wenzhao Xiang · Chang Liu · Shibao Zheng
🔗
|
-
|
Generate More Imperceptible Adversarial Examples for Object Detection
(
Poster
)
>
SlidesLive Video
|
Siyuan Liang · Xingxing Wei · Xiaochun Cao
🔗
|
-
|
Out of Distribution Detection and Adversarial Attacks on Deep Neural Networks for Robust Medical Image Analysis
(
Poster
)
>
|
Anisie Uwimana · Ransalu Senanayake
🔗
|
-
|
Indicators of Attack Failure: Debugging and Improving Optimization of Adversarial Examples
(
Poster
)
>
SlidesLive Video
|
Maura Pintor · Luca Demetrio · Angelo Sotgiu · Giovanni Manca · Ambra Demontis · Nicholas Carlini · Battista Biggio · Fabio Roli
🔗
|
-
|
Certified robustness against adversarial patch attacks via randomized cropping
(
Poster
)
>
|
Wan-Yi Lin · Fatemeh Sheikholeslami · jinghao shi · Leslie Rice · Zico Kolter
🔗
|
-
|
Generalizing Adversarial Training to Composite Semantic Perturbations
(
Poster
)
>
SlidesLive Video
|
Yun-Yun Tsai · Lei Hsiung · Pin-Yu Chen · Tsung-Yi Ho
🔗
|
-
|
Adversarial Robustness of Streaming Algorithms through Importance Sampling
(
Poster
)
>
|
Vladimir Braverman · Avinatan Hasidim · Yossi Matias · Mariano Schain · Sandeep Silwal · Samson Zhou
🔗
|
-
|
Enhancing Certified Robustness via Smoothed Weighted Ensembling
(
Poster
)
>
|
Chizhou Liu · Yunzhen Feng · Ranran Wang · Bin Dong
🔗
|
-
|
Attacking Graph Classification via Bayesian Optimisation
(
Poster
)
>
|
Xingchen Wan · Henry Kenlay · Binxin Ru · Arno Blaas · Michael A Osborne · Xiaowen Dong
🔗
|
-
|
Fast Minimum-norm Adversarial Attacks through Adaptive Norm Constraints
(
Poster
)
>
|
Maura Pintor · Fabio Roli · Wieland Brendel · Battista Biggio
🔗
|
-
|
Adversarial EXEmples: Functionality-preserving Optimization of Adversarial Windows Malware
(
Poster
)
>
SlidesLive Video
|
Luca Demetrio · Battista Biggio · Giovanni Lagorio · Alessandro Armando · Fabio Roli · Luca Demetrio
🔗
|
-
|
On Frank-Wolfe Adversarial Training
(
Poster
)
>
SlidesLive Video
|
Theodoros Tsiligkaridis · Jay Roberts
🔗
|
-
|
ROPUST: Improving Robustness through Fine-tuning with Photonic Processors and Synthetic Gradients
(
Poster
)
>
|
Alessandro Cappelli · Ruben Ohana · Julien Launay · Laurent Meunier · Iacopo Poli
🔗
|
-
|
SmoothMix: Training Confidence-calibrated Smoothed Classifiers for Certified Adversarial Robustness
(
Poster
)
>
|
Jongheon Jeong · Sejun Park · Minkyu Kim · Heung-Chang Lee · Doguk Kim · Jinwoo Shin
🔗
|
-
|
Combating Adversaries with Anti-Adversaries
(
Poster
)
>
|
Motasem Alfarra · Juan C Perez · Ali Thabet · Adel Bibi · Phil Torr · Bernard Ghanem
🔗
|
-
|
Adversarial Semantic Contour for Object Detection
(
Poster
)
>
SlidesLive Video
|
Yichi Zhang · Zijian Zhu · Xiao Yang · Jun Zhu
🔗
|
-
|
Hidden Patch Attacks for Optical Flow
(
Poster
)
>
|
Benjamin Wortman
🔗
|
-
|
Poisoning the Search Space in Neural Architecture Search
(
Poster
)
>
|
Robert Wu · Nayan Saxena · Rohan Jain
🔗
|
-
|
Adversarially Robust Learning via Entropic Regularization
(
Poster
)
>
|
Gauri Jagatap · Ameya Joshi · Animesh Chowdhury · Siddharth Garg · Chinmay Hegde
🔗
|
-
|
Fast Certified Robust Training with Short Warmup
(
Poster
)
>
SlidesLive Video
|
Zhouxing Shi · Yihan Wang · Huan Zhang · Jinfeng Yi · Cho-Jui Hsieh
🔗
|
-
|
Entropy Weighted Adversarial Training
(
Poster
)
>
|
Minseon Kim · Jihoon Tack · Jinwoo Shin · Sung Ju Hwang
🔗
|
-
|
Consistency Regularization for Adversarial Robustness
(
Poster
)
>
|
Jihoon Tack · Sihyun Yu · Jongheon Jeong · Minseon Kim · Sung Ju Hwang · Jinwoo Shin
🔗
|
-
|
Examining the Human Perceptibility of Black-Box Adversarial Attacks on Face Recognition
(
Poster
)
>
SlidesLive Video
|
Benjamin Spetter-Goldstein · Nataniel Ruiz · Sarah Bargal
🔗
|
-
|
On Success and Simplicity: A Second Look at Transferable Targeted Attacks
(
Poster
)
>
SlidesLive Video
|
Zhengyu Zhao · Zhuoran Liu · Martha Larson
🔗
|
-
|
On the Effectiveness of Poisoning against Unsupervised Domain Adaptation
(
Poster
)
>
SlidesLive Video
|
Akshay Mehra · Bhavya Kailkhura · Pin-Yu Chen · Jihun Hamm
🔗
|
-
|
Detecting AutoAttack Perturbations in the Frequency Domain
(
Poster
)
>
SlidesLive Video
|
Peter Lorenz · Paula Harder · Dominik Straßel · Margret Keuper · Janis Keuper
🔗
|
-
|
Defending Adversaries Using Unsupervised Feature Clustering VAE
(
Poster
)
>
|
Cheng Zhang · Pan Gao
🔗
|
-
|
Audio Injection Adversarial Example Attack
(
Poster
)
>
|
Xiaolei Liu · Xingshu Chen · Mingyong Yin · Yulong Wang · Teng Hu · Kangyi Ding
🔗
|
-
|
A Closer Look at the Adversarial Robustness of Information Bottleneck Models
(
Poster
)
>
|
Iryna Korshunova · David Stutz · Alexander Alemi · Olivia Wiles · Sven Gowal
🔗
|
-
|
Defending against Model Stealing via Verifying Embedded External Features
(
Poster
)
>
|
Linghui Zhu · Yiming Li · Xiaojun Jia · Yong Jiang · Shutao Xia · Xiaochun Cao
🔗
|
-
|
Improve Generalization and Robustness of Neural Networks via Weight Scale Shifting Invariant Regularizations
(
Poster
)
>
|
Ziquan Liu · Yufei Cui · Antoni Chan
🔗
|
-
|
Towards Transferable Adversarial Perturbations with Minimum Norm
(
Poster
)
>
SlidesLive Video
|
Fangcheng Liu · Chao Zhang · Hongyang Zhang
🔗
|
-
|
Uncovering Universal Features: How Adversarial Training Improves Adversarial Transferability
(
Poster
)
>
SlidesLive Video
|
Jacob M Springer · Melanie Mitchell · Garrett T Kenyon
🔗
|
-
|
Adversarial Sample Detection via Channel Pruning
(
Poster
)
>
|
Zuohui Chen · RenXuan Wang · Yao Lu · jingyang Xiang · Qi Xuan
🔗
|
-
|
Meta Adversarial Training against Universal Patches
(
Poster
)
>
SlidesLive Video
|
Jan Hendrik Metzen · Nicole Finnie · Robin Hutmacher
🔗
|
-
|
A Primer on Multi-Neuron Relaxation-based Adversarial Robustness Certification
(
Poster
)
>
|
Kevin Roth
🔗
|
-
|
Beta-CROWN: Efficient Bound Propagation with Per-neuron Split Constraints for Neural Network Robustness Verification
(
Poster
)
>
SlidesLive Video
|
Shiqi Wang · Huan Zhang · Kaidi Xu · Xue Lin · Suman Jana · Cho-Jui Hsieh · Zico Kolter
🔗
|
-
|
Robust Recovery of Adversarial Samples
(
Poster
)
>
|
Tejas Bana · Siddhant Kulkarni · Jatan Loya
🔗
|
-
|
Query-based Adversarial Attacks on Graph with Fake Nodes
(
Poster
)
>
|
Zhengyi Wang · Zhongkai Hao · Jun Zhu
🔗
|
-
|
BadNL: Backdoor Attacks Against NLP Models
(
Poster
)
>
|
Xiaoyi Chen · Ahmed Salem · Michael Backes · Shiqing Ma · Yang Zhang
🔗
|