{"id":"W3034672496","doi":"","title":"Fundamental Tradeoffs between Invariance and Sensitivity to Adversarial Perturbations","year":2020,"lang":"en","type":"article","venue":"International Conference on Machine Learning","topic":"Adversarial Robustness in Machine Learning","field":"Computer Science","cited_by":34,"is_retracted":false,"has_abstract":true,"ca_institutions":"Vector Institute; University of Toronto","funders":"","keywords":"Adversarial system; Computer science; Invariant (physics); Sensitivity (control systems); Artificial intelligence; Robustness (evolution); Class (philosophy); Machine learning; Theoretical computer science; Mathematics","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow"],"consensus_categories":[],"category_scores_codex":[0.000369359,0.0002462764,0.0002533445,0.0001467221,0.0002953622,0.0003896888,0.0005404652,0.00007897433,0.0001633121],"category_scores_gemma":[0.001026688,0.0002572868,0.00006209015,0.0002770537,0.000055154,0.0005797307,0.0005957093,0.0008644545,0.0001414938],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00008535699,"about_ca_system_score_gemma":0.00007696747,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0001476559,"about_ca_topic_score_gemma":0.0000141867,"domain_scores_codex":[0.9979067,0.0003081234,0.0002815272,0.0006854077,0.0005441864,0.0002740014],"domain_scores_gemma":[0.9988918,0.0003648798,0.0001508949,0.0001852975,0.00011404,0.0002931114],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"theoretical_or_conceptual","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0003283298,0.0001149278,0.1363993,0.0000344857,0.0002945494,0.0002638646,0.01317158,0.1141917,0.01104144,0.5877426,0.0004657022,0.1359516],"study_design_scores_gemma":[0.0007496294,0.0002880204,0.02210298,0.0000428126,0.00001118859,0.00001862645,0.0001279954,0.9655361,0.0001399179,0.0008804946,0.009742175,0.0003600199],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.04701747,0.0000100002,0.8792044,0.06474977,0.0004838726,0.0002238789,0.0000249469,0.0003328826,0.007952775],"genre_scores_gemma":[0.9727452,0.0000063073,0.02370075,0.002711721,0.0005212945,0.000008716353,0.00003980746,0.00001889825,0.0002473211],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.9257277,"threshold_uncertainty_score":0.999988,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.06015761417466957,"score_gpt":0.297905287486453,"score_spread":0.2377476733117834,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}