← Search

Amir Najafi

10 accepted papers

2026

Efficient Adversarial Attacks on High-dimensional Offline Bandits

ICLR 2026poster

Bandit algorithms have recently emerged as a powerful tool for evaluating machine learning models, including generative image models and large language models, by efficiently identifying top-performing candidates without exhaustive comparisons. These methods typically rely on a reward model---often…

Cited by 0SourceScholar
2026

ON THE ROLE OF IMPLICIT REGULARIZATION OF STOCHASTIC GRADIENT DESCENT IN GROUP ROBUSTNESS

ICLR 2026poster

Training with stochastic gradient descent (SGD) at moderately large learning rates has been observed to improve robustness against spurious correlations, strong correlation between non-predictive features and target labels. Yet, the mechanism underlying this effect remains unclear. In this work, we…

Cited by 0SourcecodeScholar
2026

Provable Bounds for the Learnability of Sample-Compressible Families from Noisy Samples

ICML 2026spotlight

Learning distribution families over $\mathbb{R}^d$ is a fundamental problem in unsupervised learning and statistics. A central question in this setting is whether a given family of distributions possesses sufficient structure to be (at least) information-theoretically learnable and, if so, to charac…

Cited by 0SourceScholar
2025

Certifiably Robust Model Evaluation in Federated Learning under Meta-Distributional Shifts

ICML 2025poster

We address the challenge of certifying the performance of a federated learning model on an unseen target network using only measurements from the source network that trained the model. Specifically, consider a source network "A" with $K$ clients, each holding private, non-IID datasets drawn from het…

2025

‌Navigating the MIL Trade-Off: Flexible Pooling for Whole Slide Image Classification

NeurIPS 2025poster

Multiple Instance Learning (MIL) is a standard weakly supervised approach for Whole Slide Image (WSI) classification, where performance hinges on both feature representation and MIL pooling strategies. Recent research has predominantly focused on Transformer-based architectures adapted for WSIs. How…

Cited by 0SourcecodeScholar
2024

Gradual Domain Adaptation via Manifold-Constrained Distributionally Robust Optimization

NeurIPS 2024poster

The aim of this paper is to address the challenge of gradual domain adaptation within a class of manifold-constrained data distributions. In particular, we consider a sequence of $T\ge2$ data distributions $P_1,\ldots,P_T$ undergoing a gradual shift, where each pair of consecutive measures $P_i,P_{i…

Cited by 0SourcePDFScholar
2024

Out-Of-Domain Unlabeled Data Improves Generalization

ICLR 2024spotlight

We propose a novel framework for incorporating unlabeled data into semi-supervised classification problems, where scenarios involving the minimization of either i) adversarially robust or ii) non-robust loss functions have been considered. Notably, we allow the unlabeled samples to deviate slightly…

Cited by 1SourcePDFScholar
2023

Sample Complexity Bounds for Learning High-dimensional Simplices in Noisy Regimes

ICML 2023poster

In this paper, we propose sample complexity bounds for learning a simplex from noisy samples. A dataset of size $n$ is given which includes i.i.d. samples drawn from a uniform distribution over an unknown arbitrary simplex in $\mathbb{R}^K$, where samples are assumed to be corrupted by a multi-varia…

Cited by 2SourcePDFScholar
2019

Manifold Mixup: Better Representations by Interpolating Hidden States

ICML 2019oral

Deep neural networks excel at learning the training data, but often provide incorrect and confident predictions when evaluated on slightly different test examples. This includes distribution shifts, outliers, and adversarial examples. To address these issues, we propose \manifoldmixup{}, a simple re…

2019

Robustness to Adversarial Perturbations in Learning from Incomplete Data

NeurIPS 2019poster

What is the role of unlabeled data in an inference problem, when the presumed underlying distribution is adversarially perturbed? To provide a concrete answer to this question, this paper unifies two major learning frameworks: Semi-Supervised Learning (SSL) and Distributionally Robust Learning (DRL)…

Cited by 145SourcePDFScholar