← Search

Ilya Razenshteyn

8 accepted papers

2020

Randomized Smoothing of All Shapes and Sizes

ICML 2020poster

Randomized smoothing is the current state-of-the-art defense with provable robustness against $\ell_2$ adversarial attacks. Many works have devised new randomized smoothing schemes for other metrics, such as $\ell_1$ or $\ell_\infty$; however, substantial effort was needed to derive such new guarant…

2020

Scalable Nearest Neighbor Search for Optimal Transport

ICML 2020poster

The Optimal Transport (a.k.a. Wasserstein) distance is an increasingly popular similarity measure for rich data domains, such as images or text documents. This raises the necessity for fast nearest neighbor search algorithms according to this distance, which poses a substantial computational bottlen…

2020

Scaling up Kernel Ridge Regression via Locality Sensitive Hashing

AISTATS 2020poster

Random binning features, introduced in the seminal paper of Rahimi and Recht ’07, are an efficient method for approximating a kernel matrix using locality sensitive hashing. Random binning features provide a very simple and efficient way to approximate the Laplace kernel but unfortunately do not app…

Cited by 16SourcePDFScholar
2019

Adversarial examples from computational constraints

ICML 2019oral

Why are classifiers in high dimension vulnerable to “adversarial” perturbations? We show that it is likely not due to information theoretic limitations, but rather it could be due to computational constraints. First we prove that, for a broad set of classification tasks, the mere existence of a robu…

Cited by 262SourcePDFScholar
2019

Provably Robust Deep Learning via Adversarially Trained Smoothed Classifiers

NeurIPS 2019spotlight

Recent works have shown the effectiveness of randomized smoothing as a scalable technique for building neural network-based classifiers that are provably robust to $\ell_2$-norm adversarial perturbations. In this paper, we employ adversarial training to improve the performance of randomized smoothin…

2015

Practical and Optimal LSH for Angular Distance

NeurIPS 2015poster

We show the existence of a Locality-Sensitive Hashing (LSH) family for the angular distance that yields an approximate Near Neighbor Search algorithm with the asymptotically optimal running time exponent. Unlike earlier algorithms with this property (e.g., Spherical LSH (Andoni-Indyk-Nguyen-Razensh…

Cited by 642SourcePDFScholar