← Search

Chengyuan Yao

2 accepted papers

2023

Improving Robust Fariness via Balance Adversarial Training

AAAI 2023technical

Adversarial training (AT) methods are effective against adversarial attacks, yet they introduce severe disparity of accuracy and robustness between different classes, known as the robust fairness problem. Previously proposed Fair Robust Learning (FRL) adaptively reweights different classes to improv…

2021

Automated Discovery of Adaptive Attacks on Adversarial Defenses

NeurIPS 2021poster

Reliable evaluation of adversarial defenses is a challenging task, currently limited to an expert who manually crafts attacks that exploit the defense’s inner workings, or to approaches based on ensemble of fixed attacks, none of which may be effective for the specific defense at hand. Our key obser…