| Synthesizing robust adversarial examples A Athalye, L Engstrom, A Ilyas, K Kwok arXiv preprint arXiv:1707.07397, 2017 | 627 | 2017 |
| How Does Batch Normalization Help Optimization? S Santurkar, D Tsipras, A Ilyas, A Madry | 454* | |
| Black-box Adversarial Attacks with Limited Queries and Information A Ilyas, L Engstrom, A Athalye, J Lin arXiv preprint arXiv:1804.08598, 2018 | 343* | 2018 |
| Adversarial examples are not bugs, they are features A Ilyas, S Santurkar, D Tsipras, L Engstrom, B Tran, A Madry Advances in Neural Information Processing Systems, 125-136, 2019 | 308 | 2019 |
| Training GANs with Optimism C Daskalakis, A Ilyas, V Syrgkanis, H Zeng arXiv preprint arXiv:1711.00141, 2017 | 170 | 2017 |
| Prior Convictions: Black-Box Adversarial Attacks with Bandits and Priors A Ilyas, L Engstrom, A Madry arXiv preprint arXiv:1807.07978, 2018 | 103 | 2018 |
| The robust manifold defense: Adversarial training using generative models A Ilyas, A Jalal, E Asteri, C Daskalakis, AG Dimakis arXiv preprint arXiv:1712.09196, 2017 | 89 | 2017 |
| Evaluating and Understanding the Robustness of Adversarial Logit Pairing L Engstrom, A Ilyas, A Athalye arXiv preprint arXiv:1807.10272, 2018 | 74 | 2018 |
| Learning perceptually-aligned representations via adversarial robustness L Engstrom, A Ilyas, S Santurkar, D Tsipras, B Tran, A Madry arXiv preprint arXiv:1906.00945 2 (3), 5, 2019 | 42* | 2019 |
| Computer Vision with a Single (Robust) Classifier. S Santurkar, D Tsipras, B Tran, A Ilyas, L Engstrom, A Madry | 39* | 2019 |
| A Closer Look at Deep Policy Gradients A Ilyas, L Engstrom, S Santurkar, D Tsipras, F Janoos, L Rudolph, ... arXiv preprint arXiv:1811.02553, 2018 | 38* | 2018 |
| Implementation Matters in Deep Policy Gradients: A Case Study on PPO and TRPO L Engstrom, A Ilyas, S Santurkar, D Tsipras, F Janoos, L Rudolph, ... arXiv preprint arXiv:2005.12729, 2020 | 24* | 2020 |
| Robustness (python library), 2019 L Engstrom, A Ilyas, S Santurkar, D Tsipras URL https://github. com/MadryLab/robustness, 0 | 18 | |
| Identifying Statistical Bias in Dataset Replication L Engstrom, A Ilyas, S Santurkar, D Tsipras, J Steinhardt, A Madry arXiv preprint arXiv:2005.09619, 2020 | 10 | 2020 |
| MicroFilters: Harnessing twitter for disaster management A Ilyas IEEE Global Humanitarian Technology Conference (GHTC 2014), 417-424, 2014 | 10 | 2014 |
| Extracting Syntactical Patterns from Databases A Ilyas, JMF da Trindade, RC Fernandez, S Madden 2018 IEEE 34th International Conference on Data Engineering (ICDE), 41-52, 2018 | 9 | 2018 |
| Do Adversarially Robust ImageNet Models Transfer Better? H Salman, A Ilyas, L Engstrom, A Kapoor, A Madry arXiv preprint arXiv:2007.08489, 2020 | 7 | 2020 |
| A Discussion of'Adversarial Examples Are Not Bugs, They Are Features': Discussion and Author Responses L Engstrom, A Ilyas, A Madry, S Santurkar, B Tran, D Tsipras Distill 4 (8), e00019. 7, 2019 | 7 | 2019 |
| From ImageNet to Image Classification: Contextualizing Progress on Benchmarks D Tsipras, S Santurkar, L Engstrom, A Ilyas, A Madry arXiv preprint arXiv:2005.11295, 2020 | 5 | 2020 |
| Estimating Household Transmission of SARS-CoV-2 M Curmei, A Ilyas, O Evans, J Steinhardt medRxiv, 2020 | 3 | 2020 |
Logan EngstromMITVerified email at mit.edu
