| Deep partition aggregation: Provable defense against general poisoning attacks A Levine, S Feizi arXiv preprint arXiv:2006.14768, 2020 | 124 | 2020 |
| Robustness certificates for sparse adversarial attacks by randomized ablation A Levine, S Feizi Proceedings of the AAAI Conference on Artificial Intelligence 34 (04), 4585-4593, 2020 | 97 | 2020 |
| Curse of dimensionality on randomized smoothing for certifiable robustness A Kumar, A Levine, T Goldstein, S Feizi International Conference on Machine Learning, 5458-5467, 2020 | 84 | 2020 |
| Dual manifold adversarial robustness: Defense against lp and non-lp adversarial attacks WA Lin, CP Lau, A Levine, R Chellappa, S Feizi Advances in Neural Information Processing Systems 33, 3487-3498, 2020 | 58 | 2020 |
| Segment and Complete: Defending Object Detectors against Adversarial Patch Attacks with Robust Patch Detection J Liu, A Levine, CP Lau, R Chellappa, S Feizi Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern …, 2022 | 52 | 2022 |
| Wasserstein smoothing: Certified robustness against wasserstein adversarial attacks A Levine, S Feizi International Conference on Artificial Intelligence and Statistics, 3938-3947, 2020 | 52 | 2020 |
| Certifiably robust interpretation in deep learning A Levine, S Singla, S Feizi arXiv preprint arXiv:1905.12105, 2019 | 48 | 2019 |
| Improved Certified Defenses against Data Poisoning with (Deterministic) Finite Aggregation W Wang, AJ Levine, S Feizi International Conference on Machine Learning, 22769-22783, 2022 | 46 | 2022 |
| (De) Randomized smoothing for certifiable defense against patch attacks A Levine, S Feizi Advances in Neural Information Processing Systems 33, 6465-6475, 2020 | 45 | 2020 |
| Policy Smoothing for Provably Robust Reinforcement Learning A Kumar, A Levine, S Feizi arXiv preprint arXiv:2106.11420, 2021 | 42 | 2021 |
| Improved, Deterministic Smoothing for L_1 Certified Robustness AJ Levine, S Feizi International Conference on Machine Learning, 6254-6264, 2021 | 35 | 2021 |
| Certifying confidence via randomized smoothing A Kumar, A Levine, S Feizi, T Goldstein Advances in Neural Information Processing Systems 33, 5165-5177, 2020 | 33 | 2020 |
| Lethal dose conjecture on data poisoning W Wang, A Levine, S Feizi Advances in Neural Information Processing Systems 35, 1776-1789, 2022 | 12 | 2022 |
| Tight Second-Order Certificates for Randomized Smoothing A Levine, A Kumar, T Goldstein, S Feizi arXiv preprint arXiv:2010.10549, 2020 | 12 | 2020 |
| Invariant Learning via Diffusion Dreamed Distribution Shifts P Kattakinda, A Levine, S Feizi arXiv preprint arXiv:2211.10370, 2022 | 10 | 2022 |
| Provable Robustness against Wasserstein Distribution Shifts via Input Randomization A Kumar, A Levine, T Goldstein, S Feizi The Eleventh International Conference on Learning Representations, 2022 | 8* | 2022 |
| Provable Adversarial Robustness for Fractional Lp Threat Models AJ Levine, S Feizi International Conference on Artificial Intelligence and Statistics, 9908-9942, 2022 | 4 | 2022 |
| Goal-Conditioned Q-learning as Knowledge Distillation A Levine, S Feizi Proceedings of the AAAI Conference on Artificial Intelligence 37 (7), 8500-8509, 2023 | 2 | 2023 |
| Multistep Inverse Is Not All You Need A Levine, P Stone, A Zhang arXiv preprint arXiv:2403.11940, 2024 | | 2024 |
| Scalable Methods for Robust Machine Learning AJ Levine University of Maryland, College Park, 2023 | | 2023 |
