Source author record

Alexandre Araujo

Explore this author’s publications, collaborators and research topics. This catalog record has not been claimed by its author.

ResearcherUnclaimed source record

Machine Learning astro-ph.SR

Catalog footprint

Research overview

4works

2topics

4close collaborators

Actions

Is this your work?

Open graph Browse papers

preprint2026arXiv

The Energy-Duration Relationship in Astrophysical Self-Organized Criticality Systems

Scaling laws in astrophysical systems that involve the energy, the geometry, and the spatio-temporal evolution, provide the theoretical framework for physical models of energy dissipation processes. A leading model is the standard fractal-diffusive self-organized criticality (FD-SOC) model, which is built on four fundamental assumptions: (i) the dimensionality $d=3$ , (ii) the fractal dimension $D_V=d-1/2=2.5$ , (iii) classical diffusion $L \propto T^{(1/2)}$ , and (iv) the proportionality of the dissipated energy to the fractal volume $E \propto V$ . Based on these assumptions, the FD-SOC model predicts a scaling law of $T \propto E^k \propto E^{(4/5)} = E^{0.8}$ . On the observational side, we find empirical scaling laws of $T \propto E^{0.81\pm0.03}$ by Peng et al.~(2023) and $T \propto E^{0.86\pm0.03}$ by Araujo \& Valio (2021) that are self-consistent with the theoretical prediction of the FD-SOC model. However, cases with a small time range $q_T = \log{(T_{max}/T_{min})} \lapprox 2$ have large statistical uncertainties and systematic errors, which produces smaller scaling law exponents ( $k \approx 0.3, ..., 0.6$ ) as a consequence. The close correlation of the scaling exponent $k$ with the truncation bias $q_T$ implies that the dispersion of k-values is an observational effect, rather than a physical property.

preprint2022arXiv

A Dynamical System Perspective for Lipschitz Neural Networks

The Lipschitz constant of neural networks has been established as a key quantity to enforce the robustness to adversarial examples. In this paper, we tackle the problem of building $1$ -Lipschitz Neural Networks. By studying Residual Networks from a continuous time dynamical system perspective, we provide a generic method to build $1$ -Lipschitz Neural Networks and show that some previous approaches are special cases of this framework. Then, we extend this reasoning and show that ResNet flows derived from convex potentials define $1$ -Lipschitz transformations, that lead us to define the {\em Convex Potential Layer} (CPL). A comprehensive set of experiments on several datasets demonstrates the scalability of our architecture and the benefits as an $\ell_2$ -provable defense against adversarial examples.

preprint2022arXiv

Towards Evading the Limits of Randomized Smoothing: A Theoretical Analysis

Randomized smoothing is the dominant standard for provable defenses against adversarial examples. Nevertheless, this method has recently been proven to suffer from important information theoretic limitations. In this paper, we argue that these limitations are not intrinsic, but merely a byproduct of current certification methods. We first show that these certificates use too little information about the classifier, and are in particular blind to the local curvature of the decision boundary. This leads to severely sub-optimal robustness guarantees as the dimension of the problem increases. We then show that it is theoretically possible to bypass this issue by collecting more information about the classifier. More precisely, we show that it is possible to approximate the optimal certificate with arbitrary precision, by probing the decision boundary with several noise distributions. Since this process is executed at certification time rather than at test time, it entails no loss in natural accuracy while enhancing the quality of the certificates. This result fosters further research on classifier-specific certification and demonstrates that randomized smoothing is still worth investigating. Although classifier-specific certification may induce more computational cost, we also provide some theoretical insight on how to mitigate it.

preprint2020arXiv

Robust Neural Networks using Randomized Adversarial Training

This paper tackles the problem of defending a neural network against adversarial attacks crafted with different norms (in particular $\ell_\infty$ and $\ell_2$ bounded adversarial examples). It has been observed that defense mechanisms designed to protect against one type of attacks often offer poor performance against the other. We show that $\ell_\infty$ defense mechanisms cannot offer good protection against $\ell_2$ attacks and vice-versa, and we provide both theoretical and empirical insights on this phenomenon. Then, we discuss various ways of combining existing defense mechanisms in order to train neural networks robust against both types of attacks. Our experiments show that these new defense mechanisms offer better protection when attacked with both norms.

Inspect adjacent papers, topics, institutions and collaborators without losing the researcher page.

Building this map preview

BZPEER is loading the nearby papers, people, topics and institutions for this page.