← Search

Gaurang Sriramanan

9 accepted papers

2025

Tool Preferences in Agentic LLMs are Unreliable

EMNLP 2025

Large language models (LLMs) can now access a wide range of external tools, thanks to the Model Context Protocol (MCP). This greatly expands their abilities as various agents. However, LLMs rely entirely on the text descriptions of tools to decide which ones to use—a process that is surprisingly fra

2024

Fast Adversarial Attacks on Language Models In One GPU Minute

ICML 2024poster

In this paper, we introduce a novel class of fast, beam search-based adversarial attack (BEAST) for Language Models (LMs). BEAST employs interpretable parameters, enabling attackers to balance between attack speed, success rate, and the readability of adversarial prompts. The computational efficienc…

2024

LLM-Check: Investigating Detection of Hallucinations in Large Language Models

NeurIPS 2024poster

While Large Language Models (LLMs) have become immensely popular due to their outstanding performance on a broad range of tasks, these models are prone to producing hallucinations— outputs that are fallacious or fabricated yet often appear plausible or tenable at a glance. In this paper, we conduct…

Cited by 143SourcePDFScholar
2023

Exploring Geometry of Blind Spots in Vision models

NeurIPS 2023spotlight

Despite the remarkable success of deep neural networks in a myriad of settings, several works have demonstrated their overwhelming sensitivity to near-imperceptible perturbations, known as adversarial attacks. On the other hand, prior works have also observed that deep networks can be under-sensitiv…

2022

Scaling Adversarial Training to Large Perturbation Bounds

ECCV 2022poster

"The vulnerability of Deep Neural Networks to Adversarial Attacks has fuelled research towards building robust models. While most Adversarial Training algorithms aim at defending attacks constrained within low magnitude Lp norm bounds, real-world adversaries are not limited by such constraints. In t…

2022

Toward Efficient Robust Training against Union of $\ell_p$ Threat Models

NeurIPS 2022accept

The overwhelming vulnerability of deep neural networks to carefully crafted perturbations known as adversarial attacks has led to the development of various training techniques to produce robust models. While the primary focus of existing approaches has been directed toward addressing the worst-case…

Cited by 4SourcePDFScholar
2021

Towards Efficient and Effective Adversarial Training

NeurIPS 2021poster

The vulnerability of Deep Neural Networks to adversarial attacks has spurred immense interest towards improving their robustness. However, present state-of-the-art adversarial defenses involve the use of 10-step adversaries during training, which renders them computationally infeasible for applicati…

2020

Guided Adversarial Attack for Evaluating and Enhancing Adversarial Defenses

NeurIPS 2020spotlight

Advances in the development of adversarial attacks have been fundamental to the progress of adversarial defense research. Efficient and effective attacks are crucial for reliable evaluation of defenses, and also for developing robust models. Adversarial attacks are often generated by maximizing stan…

2020

Towards Achieving Adversarial Robustness by Enforcing Feature Consistency Across Bit Planes

CVPR 2020poster

As humans, we inherently perceive images based on their predominant features, and ignore noise embedded within lower bit planes. On the contrary, Deep Neural Networks are known to confidently misclassify images corrupted with meticulously crafted perturbations that are nearly imperceptible to the hu…

Cited by 51PDFcodeScholar