| Towards deep learning models resistant to adversarial attacks A Madry, A Makelov, L Schmidt, D Tsipras, A Vladu Proceedings of the International Conference on Representation Learning (ICLR …, 2017 | 5642 | 2017 |
| How does batch normalization help optimization? S Santurkar, D Tsipras, A Ilyas, A Madry Advances in neural information processing systems 31, 2018 | 1089 | 2018 |
| Adversarial examples are not bugs, they are features A Ilyas, S Santurkar, D Tsipras, L Engstrom, B Tran, A Madry Advances in neural information processing systems 32, 2019 | 978 | 2019 |
| Robustness may be at odds with accuracy D Tsipras, S Santurkar, L Engstrom, A Turner, A Madry Proceedings of the International Conference on Representation Learning (ICLR …, 2018 | 975 | 2018 |
| On evaluating adversarial robustness N Carlini, A Athalye, N Papernot, W Brendel, J Rauber, D Tsipras, ... arXiv preprint arXiv:1902.06705, 2019 | 523 | 2019 |
| Exploring the landscape of spatial robustness L Engstrom, B Tran, D Tsipras, L Schmidt, A Madry International Conference on Machine Learning, 1802-1811, 2019 | 522* | 2019 |
| Adversarially robust generalization requires more data L Schmidt, S Santurkar, D Tsipras, K Talwar, A Madry Advances in neural information processing systems 31, 2018 | 499 | 2018 |
| On adaptive attacks to adversarial example defenses F Tramer, N Carlini, W Brendel, A Madry Advances in Neural Information Processing Systems 33, 1633-1645, 2020 | 376 | 2020 |
| Electrical flows, laplacian systems, and faster approximation of maximum flow in undirected graphs P Christiano, JA Kelner, A Madry, DA Spielman, SH Teng Proceedings of the forty-third annual ACM symposium on Theory of computing …, 2011 | 339 | 2011 |
| Spectral signatures in backdoor attacks B Tran, J Li, A Madry Advances in neural information processing systems 31, 2018 | 295 | 2018 |
| Navigating central path with electrical flows: From flows to matchings, and back A Madry 2013 IEEE 54th Annual Symposium on Foundations of Computer Science, 253-262, 2013 | 236 | 2013 |
| An O(log n/log log n)-Approximation Algorithm for the Asymmetric Traveling Salesman Problem A Asadpour, MX Goemans, A Mądry, SO Gharan, A Saberi Operations Research 65 (4), 1043-1061, 2017 | 224 | 2017 |
| Prior convictions: Black-box adversarial attacks with bandits and priors A Ilyas, L Engstrom, A Madry arXiv preprint arXiv:1807.07978, 2018 | 208 | 2018 |
| Training for faster adversarial robustness verification via inducing relu stability KY Xiao, V Tjeng, NM Shafiullah, A Madry arXiv preprint arXiv:1809.03008, 2018 | 128 | 2018 |
| Adversarial robustness as a prior for learned representations L Engstrom, A Ilyas, S Santurkar, D Tsipras, B Tran, A Madry arXiv preprint arXiv:1906.00945, 2019 | 126* | 2019 |
| Do adversarially robust imagenet models transfer better? H Salman, A Ilyas, L Engstrom, A Kapoor, A Madry Advances in Neural Information Processing Systems 33, 3533-3545, 2020 | 122 | 2020 |
| Image synthesis with a single (robust) classifier S Santurkar, A Ilyas, D Tsipras, L Engstrom, B Tran, A Madry Advances in Neural Information Processing Systems 32, 2019 | 121* | 2019 |
| Implementation matters in deep rl: A case study on ppo and trpo L Engstrom, A Ilyas, S Santurkar, D Tsipras, F Janoos, L Rudolph, ... International conference on learning representations, 2019 | 114 | 2019 |
| Faster generation of random spanning trees JA Kelner, A Madry 2009 50th Annual IEEE Symposium on Foundations of Computer Science, 13-21, 2009 | 105 | 2009 |
| Computing maximum flow with augmenting electrical flows A Madry 2016 IEEE 57th Annual Symposium on Foundations of Computer Science (FOCS …, 2016 | 104 | 2016 |
Dimitris TsiprasStanford UniversityVerified email at stanford.edu
