← Search

Sarah Erfani

14 accepted papers

2026

AudioMosaic: Contrastive Masked Audio Representation Learning

ICML 2026poster

Audio self-supervised learning (SSL) aims to learn general-purpose representations from large-scale unlabeled audio data and has achieved remarkable progress in recent years. While most prior work relies on generative reconstruction objectives, contrastive approaches remain relatively underexplored,…

Cited by 0SourceScholar
2026

Density-Aware Translation of Spurious Correlations in Zero-Shot VLMs

ICML 2026poster

Vision-Language models (VLMs), such as CLIP, achieve powerful zero-shot classification. However, their predictions remain sensitive to spurious correlations, where contextual cues dominate over semantic content. Earlier solutions typically rely on fine-tuning or prompt engineering, which either unde…

Cited by 0SourceScholar
2026

Fox in the Henhouse: Supply-Chain Backdoor Attacks Against Reinforcement Learning

ICML 2026poster

Existing backdoor attacks on Reinforcement Learning (RL) typically rely on unrealistic white-box access to victim parameters, rewards, or observations. Inspired by real world behaviors, we introduce the Supply-Chain Backdoor (SCAB) attack to demonstrate that such assumptions are unnecessary. SCAB ta…

Cited by 0SourceScholar
2026

Semantic Robustness Certification for Vision-Language Models

ICML 2026poster

Vision-language models (VLMs) are now widely used in downstream tasks. However, real-world applications often expose VLMs to distribution shifts induced by semantic variation (e.g., shape, size, and style). Robustness certification determines if a model’s prediction changes when transformations are …

Cited by 0SourceScholar
2026

TRACER: Persistent Regularization for Robust Multimodal Finetuning

ICML 2026poster

Finetuning pretrained multimodal models improves in-distribution performance but often degrades out-of-distribution (OOD) robustness, a phenomenon known as catastrophic forgetting. We develop a theoretical framework for multimodal contrastive finetuning by introducing a *contrastive target matrix* t…

Cited by 0SourceScholar
2022

An Interpretable Neuro-Symbolic Reasoning Framework for Task-Oriented Dialogue Generation

ACL 2022long

We study the interpretability issue of task-oriented dialogue systems in this paper. Previously, most neural-based task-oriented dialogue systems employ an implicit reasoning strategy that makes the model predictions uninterpretable to humans. To obtain a transparent reasoning process, we introduce…

2022

Robust Task-Oriented Dialogue Generation with Contrastive Pre-training and Adversarial Filtering

EMNLP 2022finding

Data artifacts incentivize machine learning models to learn non-transferable generalizations by taking advantage of shortcuts in the data, andthere is growing evidence that data artifacts play a role for the strong results that deep learning models achieve in recent natural language processing bench…

2022

l∞-Robustness and Beyond: Unleashing Efficient Adversarial Training

ECCV 2022poster

"Neural networks are vulnerable to adversarial attacks: adding well-crafted, imperceptible perturbations to their input can modify their output. Adversarial training is one of the most effective approaches in training robust models against such attacks. However, it is much slower than vanilla traini…

Cited by 24SourcePDFScholar
2021

Detecting Beneficial Feature Interactions for Recommender Systems

AAAI 2021technical

Feature interactions are essential for achieving high accuracy in recommender systems. Many studies take into account the interaction between every pair of features. However, this is suboptimal because some feature interactions may not be that relevant to the recommendation result and taking them in…

2020

AdvFlow: Inconspicuous Black-box Adversarial Attacks using Normalizing Flows

NeurIPS 2020poster

Deep learning classifiers are susceptible to well-crafted, imperceptible variations of their inputs, known as adversarial attacks. In this regard, the study of powerful attack models sheds light on the sources of vulnerability in these classifiers, hopefully leading to more robust ones. In this pape…

2020

Invertible Generative Modeling using Linear Rational Splines

AISTATS 2020poster

Normalizing flows attempt to model an arbitrary probability distribution through a set of invertible mappings. These transformations are required to achieve a tractable Jacobian determinant that can be used in high-dimensional scenarios. The first normalizing flow designs used coupling layer mapping…

2020

Normalized Loss Functions for Deep Learning with Noisy Labels

ICML 2020poster

Robust loss functions are essential for training accurate deep neural networks (DNNs) in the presence of noisy (incorrect) labels. It has been shown that the commonly used Cross Entropy (CE) loss is not robust to noisy labels. Whilst new loss functions have been designed, they are only partially rob…

2018

Dimensionality-Driven Learning with Noisy Labels

ICML 2018oral

Datasets with significant proportions of noisy (incorrect) class labels present challenges for training accurate Deep Neural Networks (DNNs). We propose a new perspective for understanding DNN generalization for such datasets, by investigating the dimensionality of the deep representation subspace o…