Demo Data from EDBT 2026 / reviewers in the wild / expert
Philip Doldo
dblp:291/3950
· DBLP profile ↗
1ranked-venue papers
1as first author
1since 2021 · last 2025
—ORCID · unresolved
Domains — the database's venue-derived domains; a paper can count in several
Artificial intelligence and machine learning · 1 · 1 first-author · 1 since 2021Graphics, computer vision, multimedia, augmented reality and games · 1 · 1 first-author · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Artificial intelligence
1 paper |
Trustworthy machine learning · 67% Optimization for machine learning · 33% |
Topics — the 3 heaviest of 3, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Machine learning › Trustworthy machine learning › robustness evaluation
adversarial attack evaluation |
0.9 | 1 | 2025 | Stop Walking in Circles! Bailing Out Early in Projected Gradient Descent · CVPR 2025 |
Machine learning › Trustworthy machine learning › robustness
adversarial robustness |
0.9 | 1 | 2025 | Stop Walking in Circles! Bailing Out Early in Projected Gradient Descent · CVPR 2025 |
Machine learning › Optimization for machine learning › gradient-based optimization › gradient descent
projected gradient descent |
0.9 | 1 | 2025 | Stop Walking in Circles! Bailing Out Early in Projected Gradient Descent · CVPR 2025 |
Methods — techniques the papers use, named apart from their topics
early termination · 0.9cycle detection · 0.9
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2025 | Stop Walking in Circles! Bailing Out Early in Projected Gradient DescentabstractProjected Gradient Descent (PGD) under the L∞ ball has become one of the defacto methods used in adversarial robustness evaluation for computer vision (CV) due to its reliability and efficacy, making a strong and easy-to-implement iterative baseline. However, PGD is computationally demanding to apply, especially when using thousands of iterations is the current best-practice recommendation to generate an adversarial example for a single image. In this work, we introduce a simple novel method for early termination of PGD based on cycle detection by exploiting the geometry of how PGD is implemented in practice and show that it can produce large speedup factors while providing the exact same estimate of model robustness as standard PGD. This method substantially speeds up PGD without sacrificing any attack strength, enabling evaluations of robustness that were previously computationally intractable. Philip Doldo, Derek Everett, Amol Khanna, André T. Nguyen, Edward Raff |
CVPR | 1 |