Menu
Sign In Search Podcasts Charts People & Topics Add Podcast API Blog Pricing

Andrew Ilyas

๐Ÿ‘ค Speaker
638 total appearances

Appearances Over Time

Podcast Appearances

Machine Learning Street Talk (MLST)
Adversarial Examples and Data Modelling - Andrew Ilyas (MIT)

We basically just did completely oblivious random sampling.

Machine Learning Street Talk (MLST)
Adversarial Examples and Data Modelling - Andrew Ilyas (MIT)

So, uh, you know, we have like however many GPUs and we just sample a bunch of random data sets, um, of fixed size, uh, and train in parallel across all of the GPUs.

Machine Learning Street Talk (MLST)
Adversarial Examples and Data Modelling - Andrew Ilyas (MIT)

Absolutely.

Machine Learning Street Talk (MLST)
Adversarial Examples and Data Modelling - Andrew Ilyas (MIT)

There's a little bit of, I would say, manual science there in the sense that we sort of had this intuition that, OK, if we're doing a linear regression, then probably we want something that ranges from minus infinity to infinity.

Machine Learning Street Talk (MLST)
Adversarial Examples and Data Modelling - Andrew Ilyas (MIT)

We thought about doing a logistic regression, but then we thought that's kind of throwing away some amount of information because 0 or 1 is a much noisier signal than your exact loss or something like that.

Machine Learning Street Talk (MLST)
Adversarial Examples and Data Modelling - Andrew Ilyas (MIT)

And so we ended up settling on what we call this correct class margin, which is just the logit of the correct class minus the next highest logit.

Machine Learning Street Talk (MLST)
Adversarial Examples and Data Modelling - Andrew Ilyas (MIT)

And I think there's still, I wouldn't say that's super, it's not clear that that's the optimal thing to track.

Machine Learning Street Talk (MLST)
Adversarial Examples and Data Modelling - Andrew Ilyas (MIT)

But we generally have these sort of principles that, OK, it should be something that ranges the whole real number line.

Machine Learning Street Talk (MLST)
Adversarial Examples and Data Modelling - Andrew Ilyas (MIT)

It should be something pretty dense with information, so not throwing away bits from the actual logits as much as possible.

Machine Learning Street Talk (MLST)
Adversarial Examples and Data Modelling - Andrew Ilyas (MIT)

And so using all of that stuff, we kind of settled on this correct class margin.

Machine Learning Street Talk (MLST)
Adversarial Examples and Data Modelling - Andrew Ilyas (MIT)

Yeah, it's a great question.

Machine Learning Street Talk (MLST)
Adversarial Examples and Data Modelling - Andrew Ilyas (MIT)

I think the core thing to realize here is that when you do this data set level analysis, the thing you're actually studying is not a specific model, but it's actually a learning algorithm.

Machine Learning Street Talk (MLST)
Adversarial Examples and Data Modelling - Andrew Ilyas (MIT)

So you're not studying a specific ResNet.

Machine Learning Street Talk (MLST)
Adversarial Examples and Data Modelling - Andrew Ilyas (MIT)

You're really studying the process of training a model with a ResNet with SGD, which produces a whole class of models, basically.

Machine Learning Street Talk (MLST)
Adversarial Examples and Data Modelling - Andrew Ilyas (MIT)

And whatever features you extract or whatever analysis you do is really in aggregate over that whole class of models.

Machine Learning Street Talk (MLST)
Adversarial Examples and Data Modelling - Andrew Ilyas (MIT)

And I think the distinction becomes kind of important when you're sort of asking, it makes it harder to apply this to questions where you care about like this one specific model.

Machine Learning Street Talk (MLST)
Adversarial Examples and Data Modelling - Andrew Ilyas (MIT)

Yeah, so I think in our original paper, we had a couple of what I now think are slightly more toy applications.

Machine Learning Street Talk (MLST)
Adversarial Examples and Data Modelling - Andrew Ilyas (MIT)

ItWorks, for example, is a pretty good similarity metric between examples.

Machine Learning Street Talk (MLST)
Adversarial Examples and Data Modelling - Andrew Ilyas (MIT)

We used it to find train test leakage and things like that.

Machine Learning Street Talk (MLST)
Adversarial Examples and Data Modelling - Andrew Ilyas (MIT)

We used it actually to do a deep learning analog of, there's this really nice paper out of MIT a few years ago where they studied, it was a statistics paper, but they studied a bunch of