← Search

Asja Fischer

22 accepted papers

2026

ClusterMark: Towards Robust Watermarking for Autoregressive Image Generators with Visual Token Clustering

CVPR 2026

In-generation watermarking for latent diffusion models has recently shown high robustness in marking generated images for easier detection and attribution. However, its application to autoregressive (AR) image models is underexplored. Autoregressive models generate images by autoregressively predict

Cited by 0SourcecodeScholar
2025

Black-Box Forgery Attacks on Semantic Watermarks for Diffusion Models

CVPR 2025poster

Integrating watermarking into the generation process of latent diffusion models (LDMs) simplifies detection and attribution of generated content. Semantic watermarks, such as Tree-Rings and Gaussian Shading, represent a novel class of watermarking techniques that are easy to implement and highly rob…

2025

ELBO, regularized maximum likelihood, and their common one-sample approximation for training stochastic neural networks

UAI 2025

Monte Carlo approximations are central to the training of stochastic neural networks in general, and Bayesian neural networks (BNNs) in particular. We observe that the common one-sample approximation of the standard training objective can be viewed both as maximizing the Evidence Lower Bound (ELBO)

2024

AEROBLADE: Training-Free Detection of Latent Diffusion Images Using Autoencoder Reconstruction Error

CVPR 2024poster

With recent text-to-image models anyone can generate deceptively realistic images with arbitrary contents fueling the growing threat of visual disinformation. A key enabler for generating high-resolution images with low computational cost has been the development of latent diffusion models (LDMs). I…

2024

Layer-wise linear mode connectivity

ICLR 2024poster

Averaging neural network parameters is an intuitive method for fusing the knowledge of two independent models. It is most prominently used in federated learning. If models are averaged at the end of training, this can only lead to a good performing model if the loss surface of interest is very parti…

2024

Single-Model Attribution of Generative Models Through Final-Layer Inversion

ICML 2024poster

Recent breakthroughs in generative modeling have sparked interest in practical single-model attribution. Such methods predict whether a sample was generated by a specific generator or not, for instance, to prove intellectual property theft. However, previous works are either limited to the closed-wo…

2023

The ELBO of Variational Autoencoders Converges to a Sum of Entropies

AISTATS 2023poster

The central objective function of a variational autoencoder (VAE) is its variational lower bound (the ELBO). Here we show that for standard (i.e., Gaussian) VAEs the ELBO converges to a value given by the sum of three entropies: the (negative) entropy of the prior distribution, the expected (negativ…

2021

Detecting Compositionally Out-of-Distribution Examples in Semantic Parsing

EMNLP 2021finding

While neural networks are ubiquitous in state-of-the-art semantic parsers, it has been shown that most standard models suffer from dramatic performance losses when faced with compositionally out-of-distribution (OOD) data. Recently several methods have been proposed to improve compositional generali…

Cited by 11SourcePDFScholar
2021

Improving Breadth-Wise Backpropagation in Graph Neural Networks Helps Learning Long-Range Dependencies.

ICML 2021spotlight

In this work, we focus on the ability of graph neural networks (GNNs) to learn long-range patterns in graphs with edge features. Learning patterns that involve longer paths in the graph, requires using deeper GNNs. However, GNNs suffer from a drop in performance with increasing network depth. To imp…

2021

On the convergence of the Metropolis algorithm with fixed-order updates for multivariate binary probability distributions

AISTATS 2021poster

The Metropolis algorithm is arguably the most fundamental Markov chain Monte Carlo (MCMC) method. But the algorithm is not guaranteed to converge to the desired distribution in the case of multivariate binary distributions (e.g., Ising models or stochastic neural networks such as Boltzmann machines)…

Cited by 0SourcePDFScholar
2021

Thresholded Adaptive Validation: Tuning the Graphical Lasso for Graph Recovery

AISTATS 2021poster

Many Machine Learning algorithms are formulated as regularized optimization problems, but their performance hinges on a regularization parameter that needs to be calibrated to each application at hand. In this paper, we propose a general calibration scheme for regularized optimization problems and a…

2020

Algorithms for Estimating the Partition Function of Restricted Boltzmann Machines (Extended Abstract)

IJCAI 2020poster

Estimating the normalization constants (partition functions) of energy-based probabilistic models (Markov random fields) with a high accuracy is required for measuring performance, monitoring the training progress of adaptive models, and conducting likelihood ratio tests. We devised a unifying th…

Cited by 0SourcePDFScholar
2020

Leveraging Frequency Analysis for Deep Fake Image Recognition

ICML 2020poster

Deep neural networks can generate images that are astonishingly realistic, so much so that it is often hard for humans to distinguish them from actual photos. These achievements have been largely made possible by Generative Adversarial Networks (GANs). While deep fake images have been thoroughly inv…

2019

On the Relation Between the Sharpest Directions of DNN Loss and the SGD Step Length

ICLR 2019poster

The training of deep neural networks with Stochastic Gradient Descent (SGD) with a large learning rate or a small batch-size typically ends in flat regions of the weight space, as indicated by small eigenvalues of the Hessian of the training loss. This was found to correlate with a good final genera…

2017

A Closer Look at Memorization in Deep Networks

ICML 2017poster

We examine the role of memorization in deep learning, drawing connections to capacity, generalization, and adversarial robustness. While deep networks are capable of memorizing noise data, our results suggest that they tend to prioritize learning simple patterns first. In our experiments, we expose…

Cited by 2324SourcePDFScholar