← Search

Arthur Kosmala

5 accepted papers

2024

On the Scalability of Certified Adversarial Robustness with Generated Data

NeurIPS 2024poster

Certified defenses against adversarial attacks offer formal guarantees on the robustness of a model, making them more reliable than empirical methods such as adversarial training, whose effectiveness is often later reduced by unseen attacks. Still, the limited certified robustness that is currently…

Cited by 0SourcePDFScholar
2024

Spatio-Spectral Graph Neural Networks

NeurIPS 2024poster

Spatial Message Passing Graph Neural Networks (MPGNNs) are widely used for learning on graph-structured data. However, key limitations of *ℓ*-step MPGNNs are that their "receptive field" is typically limited to the *ℓ*-hop neighborhood of a node and that information exchange between distant nodes is…

2024

Unified Mechanism-Specific Amplification by Subsampling and Group Privacy Amplification

NeurIPS 2024poster

Amplification by subsampling is one of the main primitives in machine learning with differential privacy (DP): Training a model on random batches instead of complete datasets results in stronger privacy. This is traditionally formalized via mechanism-agnostic subsampling guarantees that express the…

Cited by 2SourcePDFScholar
2023

Ewald-based Long-Range Message Passing for Molecular Graphs

ICML 2023poster

Neural architectures that learn potential energy surfaces from molecular data have undergone fast improvement in recent years. A key driver of this success is the Message Passing Neural Network (MPNN) paradigm. Its favorable scaling with system size partly relies upon a spatial distance limit on mes…