Notice: This website is continuously updated as new conference proceedings and journal volumes are published. Consequently, the figures presented here may differ from those reported in our publications.


A brief overview of our methodology is provided on the Methods page, along with references to publications documenting our approach and links to the code and data used in each study.


The reproducibility variables underlying each score are classified using an automated LLM-based pipeline, validated against a manually labeled dataset. LLM-based classification introduces uncertainty and potential bias; scores should be interpreted as estimates.

Finding Actual Descent Directions for Adversarial Training

Authors: Fabian Latorre, Igor Krawczuk, Leello Tadesse Dadi, Thomas Pethick, Volkan Cevher

ICLR 2023 | Venue PDF | LLM Run Details | Input Tokens: 22,849 Total number of tokens sent to the LLM as input for this paper's analysis. | Output Tokens: 4,838 Total number of tokens produced by the LLM (including reasoning/thinking tokens) for this paper's analysis.

Reproducibility Variable Result LLM Response
Research Type Experimental In Section 5 we verify experimentally that: (i) it is unrealistic to assume a unique solution of the inner-maximization problem, hence making a case for our method DDi, (ii) our method can achieve more stable descent dynamics than the vanilla AT method in synthetic scenarions and (iii) on the CIFAR10 dataset DDi is more stable and achieves higher robustness levels in the early stages of traning, compared with a PGD adversary of equivalent complexity.
Researcher Affiliation Academia Fabian Latorre , Igor Krawczuk , Leello Dadi , Thomas Pethick and Volkan Cevher EPFL, Switzerland EMAIL
Pseudocode Yes Algorithm 1 Danskin s Descent Direction (DDi)
Open Source Code No The code to reproduce our results will be available at https://github.com/LIONS-EPFL/ddi_at.
Open Datasets Yes Using the CIFAR10 dataset we further provide a real world example showing that our method achieves a steeper increase in robustness levels in the early training stages of smooth-activation networks without Batch Norm, and is more stable than the PGD baseline.
Dataset Splits Yes Figure 4: (left) Evolution of the robust accuracy on the CIFAR10 validation set, using a standard PGD-20 adversary for evaluation and DDi/PGD-7 during training.
Hardware Specification No The paper does not specify any particular hardware (e.g., GPU, CPU models, memory specifications) used for conducting the experiments.
Software Dependencies No The paper mentions software components and algorithms such as PGD, SGD, CELU, Batch Norm, and Group Norm but does not provide specific version numbers for any software dependencies.
Experiment Setup Yes This means SGD with hyperparameters lr= 0.1, momentum=0.0 (not the default 0.9, we explain why below), batch size= 128 and weight decay= 5e 4. We run for 200 epochs, no warmup, decreasing lr by a factor of 0.1 at 50% and 75% of the epochs.