Raja Giryes

Simple Post-Training Robustness using Test Time Augmentations and Random Forest

2024

Although Deep Neural Networks (DNNs) achieve excellent performance on many real-world tasks, they are highly vulnerable to adversarial attacks. A leading defense against such attacks is adversarial training, a technique in which a DNN is …

Membership Inference Attack Using Self Influence Functions

2022 · arXiv (Cornell University)

Member inference (MI) attacks aim to determine if a specific data sample was used to train a machine learning model. Thus, MI is a major privacy threat to models trained on private sensitive data, such …