← Search

Amin Karbasi

84 accepted papers

2026

Language Generation with Feedback: Queries and Mistakes

ICML 2026poster

We investigate language generation in the limit (Kleinberg & Mullainathan, 2024; Li et al., 2025) in variants where the generator receives some feedback based on its “actions.” We study two such variants. In the first, which is inspired by Littlestone’s model of online learning, the generator observ…

Cited by 0SourceScholar
2025

Adversarial Reasoning at Jailbreaking Time

ICML 2025poster

As large language models (LLMs) are becoming more capable and widespread, the study of their failure cases is becoming increasingly important. Recent advances in standardizing, measuring, and scaling test-time compute suggest new methodologies for optimizing models to achieve high performance on ha…

2025

Intelligence at the Edge of Chaos

ICLR 2025poster

We explore the emergence of intelligent behavior in artificial systems by investigating how the complexity of rule-based systems influences the capabilities of models trained to predict these rules. Our study focuses on elementary cellular automata (ECA), simple yet powerful one-dimensional systems…

Cited by 2SourcePDFScholar
2025

Learning Task Representations from In-Context Learning

ACL 2025finding

Large language models (LLMs) have demonstrated remarkable proficiency in in-context learning (ICL), where models adapt to new tasks through example-based prompts without requiring parameter updates. However, understanding how tasks are internally encoded and generalized remains a challenge. To addre…

2025

Procurement Auctions via Approximately Optimal Submodular Optimization

ICML 2025spotlight

We study the problem of procurement auctions, in which an auctioneer seeks to acquire services from a group of strategic sellers with private costs. The quality of the services is measured through some submodular function that is known to the auctioneer. Our goal is to design computationally efficie…

Cited by 0SourcePDFScholar
2025

Risk-Averse Constrained Reinforcement Learning with Optimized Certainty Equivalents

NeurIPS 2025poster

Constrained optimization provides a common framework for dealing with conflicting objectives in reinforcement learning (RL). In most of these settings, the objectives (and constraints) are expressed though the expected accumulated reward. However, this formulation neglects risky or even possibly cat…

Cited by 0SourceScholar
2024

Cell2Sentence: Teaching Large Language Models the Language of Biology

ICML 2024poster

We introduce Cell2Sentence (C2S), a novel method to directly adapt large language models to a biological context, specifically single-cell transcriptomics. By transforming gene expression data into "cell sentences," C2S bridges the gap between natural language processing and biology. We demonstrate…

Cited by 19SourcePDFScholar
2024

HyperAttention: Long-context Attention in Near-Linear Time

ICLR 2024poster

We present an approximate attention mechanism named `HyperAttention` to address the computational challenges posed by the growing complexity of long contexts used in Large Language Models (LLMs). Recent work suggests that in the worst-case scenario, the quadratic time is necessary unless the entrie…

2024

Injecting Undetectable Backdoors in Obfuscated Neural Networks and Language Models

NeurIPS 2024poster

As ML models become increasingly complex and integral to high-stakes domains such as finance and healthcare, they also become more susceptible to sophisticated adversarial attacks. We investigate the threat posed by undetectable backdoors, as defined in Goldwasser et al. [2022], in models developed…

Cited by 1SourcePDFScholar
2024

On the Computational Landscape of Replicable Learning

NeurIPS 2024poster

We study computational aspects of algorithmic replicability, a notion of stability introduced by Impagliazzo, Lei, Pitassi, and Sorrell [STOC, 2022]. Motivated by a recent line of work that established strong statistical connections between replicability and other notions of learnability such as onl…

Cited by 3SourcePDFScholar
2024

Repeated Random Sampling for Minimizing the Time-to-Accuracy of Learning

ICLR 2024poster

Methods for carefully selecting or generating a small set of training data to learn from, i.e., data pruning, coreset selection, and dataset distillation, have been shown to be effective in reducing the ever-increasing cost of training neural networks. Behind this success are rigorously designed, ye…

2024

Replicable Learning of Large-Margin Halfspaces

ICML 2024spotlight

We provide an efficient replicable algorithm for the problem of learning large-margin halfspaces. Our results improve upon the algorithms provided by Impagliazzo, Lei, Pitassi, and Sorrell (STOC, 2022). We design the first dimension-independent replicable algorithm for this task which runs in polyno…

Cited by 10SourcePDFScholar
2024

Submodular Minimax Optimization: Finding Effective Sets

AISTATS 2024poster

Despite the rich existing literature about minimax optimization in continuous settings, only very partial results of this kind have been obtained for combinatorial settings. In this paper, we fill this gap by providing a characterization of submodular minimax optimization, the problem of finding a s…

2024

Tree of Attacks: Jailbreaking Black-Box LLMs Automatically

NeurIPS 2024poster

While Large Language Models (LLMs) display versatile functionality, they continue to generate harmful, biased, and toxic content, as demonstrated by the prevalence of human-designed *jailbreaks*. In this work, we present *Tree of Attacks with Pruning* (TAP), an automated method for generating jailb…

2023

Beyond Lipschitz: Sharp Generalization and Excess Risk Bounds for Full-Batch GD

ICLR 2023poster

We provide sharp path-dependent generalization and excess risk guarantees for the full-batch Gradient Descent (GD) algorithm on smooth losses (possibly non-Lipschitz, possibly nonconvex). At the heart of our analysis is an upper bound on the generalization error, which implies that average output st…

Cited by 19SourcePDFScholar
2023

Exact Gradient Computation for Spiking Neural Networks via Forward Propagation

AISTATS 2023poster

Spiking neural networks (SNN) have recently emerged as alternatives to traditional neural networks, owing to its energy efficiency benefits and capacity to capture biological neuronal mechanisms. However, the classic backpropagation algorithm for training traditional networks has been notoriously di…

Cited by 11SourcePDFScholar
2023

KDEformer: Accelerating Transformers via Kernel Density Estimation

ICML 2023poster

Dot-product attention mechanism plays a crucial role in modern deep architectures (e.g., Transformer) for sequence modeling, however, naïve exact computation of this model incurs quadratic time and memory complexities in sequence length, hindering the training of long-sequence models. Critical bottl…

2023

Langevin Thompson Sampling with Logarithmic Communication: Bandits and Reinforcement Learning

ICML 2023poster

Thompson sampling (TS) is widely used in sequential decision making due to its ease of use and appealing empirical performance. However, many existing analytical and empirical results for TS rely on restrictive assumptions on reward distributions, such as belonging to conjugate families, which limit…

Cited by 7SourcePDFScholar
2023

Optimal Guarantees for Algorithmic Reproducibility and Gradient Complexity in Convex Optimization

NeurIPS 2023spotlight

Algorithmic reproducibility measures the deviation in outputs of machine learning algorithms upon minor changes in the training process. Previous work suggests that first-order methods would need to trade-off convergence rate (gradient complexity) for better reproducibility. In this work, we challen…

Cited by 5SourcePDFScholar
2023

Optimal Learners for Realizable Regression: PAC Learning and Online Learning

NeurIPS 2023oral

In this work, we aim to characterize the statistical complexity of realizable regression both in the PAC learning setting and the online learning setting. Previous work had established the sufficiency of finiteness of the fat shattering dimension for PAC learnability and the necessity of finiteness…

Cited by 27SourcePDFScholar
2023

Replicable Bandits

ICLR 2023poster

In this paper, we introduce the notion of replicable policies in the context of stochastic bandits, one of the canonical problems in interactive learning. A policy in the bandit environment is called replicable if it pulls, with high probability, the exact same sequence of arms in two different and…

Cited by 26SourcePDFScholar
2023

Statistical Indistinguishability of Learning Algorithms

ICML 2023poster

When two different parties use the same learning rule on their own data, how can we test whether the distributions of the two outcomes are similar? In this paper, we study the similarity of outcomes of learning rules through the lens of the Total Variation (TV) distance of distributions. We say that…

Cited by 29SourcePDFScholar
2022

Black-Box Generalization: Stability of Zeroth-Order Learning

NeurIPS 2022accept

We provide the first generalization error analysis for black-box learning through derivative-free optimization. Under the assumption of a Lipschitz and smooth unknown loss, we consider the Zeroth-order Stochastic Search (ZoSS) algorithm, that updates a $d$-dimensional model by replacing stochastic g…

Cited by 18SourcePDFScholar
2022

Fast Neural Kernel Embeddings for General Activations

NeurIPS 2022accept

Infinite width limit has shed light on generalization and optimization aspects of deep learning by establishing connections between neural networks and kernel methods. Despite their importance, the utility of these kernel methods was limited in large-scale learning settings due to their (super-)quad…

Cited by 19SourcePDFScholar
2022

Learning Distributionally Robust Models at Scale via Composite Optimization

ICLR 2022poster

To train machine learning models that are robust to distribution shifts in the data, distributionally robust optimization (DRO) has been proven very effective. However, the existing approaches to learning a distributionally robust model either require solving complex optimization problems such as se…

Cited by 6SourcePDFScholar
2022

Multiclass Learnability Beyond the PAC Framework: Universal Rates and Partial Concept Classes

NeurIPS 2022accept

In this paper we study the problem of multiclass classification with a bounded number of different labels $k$, in the realizable setting. We extend the traditional PAC model to a) distribution-dependent learning rates, and b) learning rates under data-dependent assumptions. First, we consider the un…

Cited by 15SourcePDFScholar
2022

On Optimal Learning Under Targeted Data Poisoning

NeurIPS 2022accept

Consider the task of learning a hypothesis class $\mathcal{H}$ in the presence of an adversary that can replace up to an $\eta$ fraction of the examples in the training set with arbitrary adversarial examples. The adversary aims to fail the learner on a particular target test point $x$ which is \emp…

Cited by 7SourcePDFScholar
2022

Reinforcement Learning with Logarithmic Regret and Policy Switches

NeurIPS 2022accept

In this paper, we study the problem of regret minimization for episodic Reinforcement Learning (RL) both in the model-free and the model-based setting. We focus on learning with general function classes and general model classes, and we derive results that scale with the eluder dimension of these cl…

Cited by 2SourcePDFScholar
2022

Scalable MCMC Sampling for Nonsymmetric Determinantal Point Processes

ICML 2022oral

A determinantal point process (DPP) is an elegant model that assigns a probability to every subset of a collection of $n$ items. While conventionally a DPP is parameterized by a symmetric kernel matrix, removing this symmetry constraint, resulting in nonsymmetric DPPs (NDPPs), leads to significant i…

2022

Scalable Sampling for Nonsymmetric Determinantal Point Processes

ICLR 2022spotlight

A determinantal point process (DPP) on a collection of $M$ items is a model, parameterized by a symmetric kernel matrix, that assigns a probability to every subset of those items. Recent work shows that removing the kernel symmetry constraint, yielding nonsymmetric DPPs (NDPPs), can lead to signifi…

2021

An Exponential Improvement on the Memorization Capacity of Deep Threshold Networks

NeurIPS 2021poster

It is well known that modern deep neural networks are powerful enough to memorize datasets even when the labels have been randomized. Recently, Vershynin(2020) settled a long standing question by Baum(1988), proving that deep threshold networks can memorize $n$ points in $d$ dimensions using $\widet…

Cited by 21SourcePDFScholar
2021

The curious case of adversarially robust models: More data can help, double descend, or hurt generalization

UAI 2021poster

Adversarial training has shown its ability in producing models that are robust to perturbations on the input data, but usually at the expense of a decrease in the standard accuracy. To mitigate this issue, it is commonly believed that more training data will eventually help such adversarially robust…

Cited by 92SourcePDFScholar
2020

Black Box Submodular Maximization: Discrete and Continuous Settings

AISTATS 2020poster

In this paper, we consider the problem of black box continuous submodular maximization where we only have access to the function values and no information about the derivatives is provided. For a monotone and continuous DR-submodular function, and subject to a bounded convex body constraint, we prop…

Cited by 23SourcePDFScholar
2020

Minimax Regret of Switching-Constrained Online Convex Optimization: No Phase Transition

NeurIPS 2020poster

We study the problem of switching-constrained online convex optimization (OCO), where the player has a limited number of opportunities to change her action. While the discrete analog of this online learning task has been studied extensively, previous work in the continuous setting has neither establ…

Cited by 30SourcePDFScholar
2020

More Data Can Expand The Generalization Gap Between Adversarially Robust and Standard Models

ICML 2020poster

Despite remarkable success in practice, modern machine learning models have been found to be susceptible to adversarial attacks that make human-imperceptible perturbations to the data, but result in serious and potentially dangerous prediction errors. To address this issue, practitioners often use a…

Cited by 75SourcePDFScholar
2020

Online MAP Inference of Determinantal Point Processes

NeurIPS 2020poster

In this paper, we provide an efficient approximation algorithm for finding the most likelihood configuration (MAP) of size $k$ for Determinantal Point Processes (DPP) in the online setting where the data points arrive in an arbitrary order and the algorithm cannot discard the selected elements from…

Cited by 10SourcePDFScholar
2020

Quantized Frank-Wolfe: Faster Optimization, Lower Communication, and Projection Free

AISTATS 2020poster

How can we efficiently mitigate the overhead of gradient communications in distributed optimization? This problem is at the heart of training scalable machine learning models and has been mainly studied in the unconstrained setting. In this paper, we propose Quantised Frank-Wolfe (QFW), the first pr…

Cited by 17SourcePDFScholar
2020

Streaming Submodular Maximization under a k-Set System Constraint

ICML 2020poster

In this paper, we propose a novel framework that converts streaming algorithms for monotone submodular maximization into streaming algorithms for non-monotone submodular maximization. This reduction readily leads to the currently tightest deterministic approximation ratio for submodular maximization…

Cited by 41SourcePDFScholar
2020

Submodular Maximization Through Barrier Functions

NeurIPS 2020spotlight

In this paper, we introduce a novel technique for constrained submodular maximization, inspired by barrier functions in continuous optimization. This connection not only improves the running time for constrained submodular maximization but also provides the state of the art guarantee. More precisel…

2019

Adaptive Sequence Submodularity

NeurIPS 2019poster

In many machine learning applications, one needs to interactively select a sequence of items (e.g., recommending movies based on a user's feedback) or make sequential decisions in a certain order (e.g., guiding an agent through a series of states). Not only do sequences already pose a dauntingly lar…

2019

Online Continuous Submodular Maximization: From Full-Information to Bandit Feedback

NeurIPS 2019poster

In this paper, we propose three online algorithms for submodular maximization. The first one, Mono-Frank-Wolfe, reduces the number of per-function gradient evaluations from $T^{1/2}$ [Chen2018Online] and $T^{3/2}$ [chen2018projection] to 1, and achieves a $(1-1/e)$-regret bound of $O(T^{4/5})$. The…

Cited by 65SourcePDFScholar
2019

Stochastic Continuous Greedy ++: When Upper and Lower Bounds Match

NeurIPS 2019poster

In this paper, we develop \scg~(\text{SCG}{$++$}), the first efficient variant of a conditional gradient method for maximizing a continuous submodular function subject to a convex constraint. Concretely, for a monotone and continuous DR-submodular function, \SCGPP achieves a tight $[(1-1/e)\OPT -\…

Cited by 14SourcePDFScholar
2019

Submodular Maximization beyond Non-negativity: Guarantees, Fast Algorithms, and Applications

ICML 2019oral

It is generally believed that submodular functions–and the more general class of $\gamma$-weakly submodular functions–may only be optimized under the non-negativity assumption $f(S) \geq 0$. In this paper, we show that once the function is expressed as the difference $f = g - c$, where $g$ is monoto…

2019

Submodular Streaming in All Its Glory: Tight Approximation, Minimum Memory and Low Adaptive Complexity

ICML 2019oral

Streaming algorithms are generally judged by the quality of their solution, memory footprint, and computational complexity. In this paper, we study the problem of maximizing a monotone submodular function in the streaming setting with a cardinality constraint $k$. We first propose SIEVE-STREAMING++,…

Cited by 120SourcePDFScholar
2018

Conditional Gradient Method for Stochastic Submodular Maximization: Closing the Gap

AISTATS 2018poster

In this paper, we study the problem of constrained and stochastic continuous submodular maximization. Even though the objective function is not concave (nor convex) and is defined in terms of an expectation, we develop a variant of the conditional gradient method, called Stochastic Continuous Greedy…

Cited by 0SourcePDFScholar
2018

Data Summarization at Scale: A Two-Stage Submodular Approach

ICML 2018oral

The sheer scale of modern datasets has resulted in a dire need for summarization techniques that can identify representative elements in a dataset. Fortunately, the vast majority of data summarization tasks satisfy an intuitive diminishing returns condition known as submodularity, which allows us to…

Cited by 58SourcePDFScholar
2018

Decentralized Submodular Maximization: Bridging Discrete and Continuous Settings

ICML 2018oral

In this paper, we showcase the interplay between discrete and continuous optimization in network-structured settings. We propose the first fully decentralized optimization method for a wide class of non-convex objective functions that possess a diminishing returns property. More specifically, given…

Cited by 43SourcePDFScholar
2018

Do Less, Get More: Streaming Submodular Maximization with Subsampling

NeurIPS 2018spotlight

In this paper, we develop the first one-pass streaming algorithm for submodular maximization that does not evaluate the entire stream even once. By carefully subsampling each element of the data stream, our algorithm enjoys the tightest approximation guarantees in various settings while having the s…

2018

Projection-Free Online Optimization with Stochastic Gradient: From Convexity to Submodularity

ICML 2018oral

Online optimization has been a successful framework for solving large-scale problems under computational constraints and partial information. Current methods for online convex optimization require either a projection or exact gradient computation at each step, both of which can be prohibitively expe…

Cited by 92SourcePDFScholar
2018

Scalable Deletion-Robust Submodular Maximization: Data Summarization with Privacy and Fairness Constraints

ICML 2018oral

Can we efficiently extract useful information from a large user-generated dataset while protecting the privacy of the users and/or ensuring fairness in representation? We cast this problem as an instance of a deletion-robust submodular maximization where part of the data may be deleted or masked due…

Cited by 84SourcePDFScholar
2018

Submodularity on Hypergraphs: From Sets to Sequences

AISTATS 2018poster

In a nutshell, submodular functions encode an intuitive notion of diminishing returns. As a result, submodularity appears in many important machine learning tasks such as feature selection and data summarization. Although there has been a large volume of work devoted to the study of submodular funct…

Cited by 0SourcePDFScholar
2018

Weakly Submodular Maximization Beyond Cardinality Constraints: Does Randomization Help Greedy?

ICML 2018oral

Submodular functions are a broad class of set functions that naturally arise in many machine learning applications. Due to their combinatorial structures, there has been a myriad of algorithms for maximizing such functions under various constraints. Unfortunately, once a function deviates from submo…

Cited by 53SourcePDFScholar
2017

Deletion-Robust Submodular Maximization: Data Summarization with “the Right to be Forgotten”

ICML 2017poster

How can we summarize a dynamic data stream when elements selected for the summary can be deleted at any time? This is an important challenge in online services, where the users generating the data may decide to exercise their right to restrict the service provider from using (part of) their data due…

Cited by 97SourcePDFScholar
2017

Differentially Private Submodular Maximization: Data Summarization in Disguise

ICML 2017poster

Many data summarization applications are captured by the general framework of submodular maximization. As a consequence, a wide range of efficient approximation algorithms have been developed. However, when such applications involve sensitive data about individuals, their privacy concerns are not au…

Cited by 55SourcePDFScholar
2017

Probabilistic Submodular Maximization in Sub-Linear Time

ICML 2017poster

In this paper, we consider optimizing submodular functions that are drawn from some unknown distribution. This setting arises, e.g., in recommender systems, where the utility of a subset of items may depend on a user-specific submodular utility function. In modern applications, the ground set of ite…

Cited by 45SourcePDFScholar
2017

Streaming Weak Submodularity: Interpreting Neural Networks on the Fly

NeurIPS 2017oral

In many machine learning applications, it is important to explain the predictions of a black-box classifier. For example, why does a deep neural network assign an image to a particular class? We cast interpretability of black-box classifiers as a combinatorial maximization problem and propose an eff…

2016

Estimating the Size of a Large Network and its Communities from a Random Sample

NeurIPS 2016poster

Most real-world networks are too large to be measured or studied directly and there is substantial interest in estimating global network properties from smaller sub-samples. One of the most important global properties is the number of vertices/nodes in the network. Estimating the number of vertices…

Cited by 14SourcePDFScholar
2016

Fast Constrained Submodular Maximization: Personalized Data Summarization

ICML 2016poster

Can we summarize multi-category data based on user preferences in a scalable manner? Many utility functions used for data summarization satisfy submodularity, a natural diminishing returns property. We cast personalized data summarization as an instance of a general submodular maximization problem s…

Cited by 191SourcePDFScholar
2016

Fast Distributed Submodular Cover: Public-Private Data Summarization

NeurIPS 2016poster

In this paper, we introduce the public-private framework of data summarization motivated by privacy concerns in personalized recommender systems and online social services. Such systems have usually access to massive data generated by a large pool of users. A major fraction of the data is public and…

Cited by 75SourcePDFScholar
2015

Distributed Submodular Cover: Succinctly Summarizing Massive Data

NeurIPS 2015spotlight

How can one find a subset, ideally as small as possible, that well represents a massive dataset? I.e., its corresponding utility, measured according to a suitable utility function, should be comparable to that of the whole dataset. In this paper, we formalize this challenge as a submodular cover pro…

Cited by 72SourcePDFScholar
2015

Tradeoffs for Space, Time, Data and Risk in Unsupervised Learning

AISTATS 2015poster

Faced with massive data, is it possible to trade off (statistical) risk, and (computational) space and time? This challenge lies at the heart of large-scale machine learning. Using k-means clustering as a prototypical unsupervised learning problem, we show how we can strategically summarize the data…

Cited by 21SourcePDFScholar