Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Ido Galil

dblp:304/9000 · DBLP profile ↗
← Back
7ranked-venue papers
3as first author
7since 2021 · last 2025
—ORCID · none

Domains — the database's venue-derived domains; a paper can count in several

Artificial intelligence and machine learning · 7 · 3 first-author · 7 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Artificial intelligence
6 papers
Trustworthy machine learning · 48% Efficient and distributed learning · 36% Deep learning architectures and training · 9%
Network and information security
1 paper
Security and privacy of machine learning · 100%

Topics — the 12 heaviest of 12, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Machine learning › Trustworthy machine learning
uncertainty estimation
1.932024
Hierarchical Selective Classification · NeurIPS 2024
What Can we Learn From The Selective Prediction And Uncertainty Estimation Performance Of 523 Imagenet Classifiers? · ICLR 2023
Disrupting Deep Uncertainty Estimation Without Harming Accuracy · NeurIPS 2021
Machine learning › Efficient and distributed learning
model compression
1.722025
FFN Fusion: Rethinking Sequential Computation in Large Language Models · NeurIPS 2025
Puzzle: Distillation-Based NAS for Inference-Optimized LLMs · ICML 2025
Machine learning › Trustworthy machine learning › uncertainty estimation
selective classification
1.422024
Hierarchical Selective Classification · NeurIPS 2024
What Can we Learn From The Selective Prediction And Uncertainty Estimation Performance Of 523 Imagenet Classifiers? · ICLR 2023
Machine learning › Efficient and distributed learning › model compression
knowledge distillation
0.912025
Puzzle: Distillation-Based NAS for Inference-Optimized LLMs · ICML 2025
Machine learning › Efficient and distributed learning › automated machine learning
neural architecture search
0.912025
Puzzle: Distillation-Based NAS for Inference-Optimized LLMs · ICML 2025
Machine learning › Deep learning architectures and training
transformer
0.912025
FFN Fusion: Rethinking Sequential Computation in Large Language Models · NeurIPS 2025
Machine learning › Trustworthy machine learning › robustness
out-of-distribution detection
0.712023
A framework for benchmarking Class-out-of-distribution detection and its application to ImageNet · ICLR 2023
Machine learning › Trustworthy machine learning
robustness
0.712023
A framework for benchmarking Class-out-of-distribution detection and its application to ImageNet · ICLR 2023
Security and privacy of machine learning
adversarial attack
0.512021
Disrupting Deep Uncertainty Estimation Without Harming Accuracy · NeurIPS 2021
Computer vision › Image recognition and object detection
image classification
0.422024
Hierarchical Selective Classification · NeurIPS 2024
What Can we Learn From The Selective Prediction And Uncertainty Estimation Performance Of 523 Imagenet Classifiers? · ICLR 2023
Natural language and speech › Language models and text generation
large language model
0.312025
Puzzle: Distillation-Based NAS for Inference-Optimized LLMs · ICML 2025
Performance modeling and evaluation
benchmarking
0.212023
A framework for benchmarking Class-out-of-distribution detection and its application to ImageNet · ICLR 2023

Methods — techniques the papers use, named apart from their topics

white-box attack · 1.0perturbation · 1.0black-box attack · 1.0parallelization · 0.9mixed integer programming · 0.9feed-forward network fusion · 0.9blockwise local knowledge distillation · 0.9risk-coverage analysis · 0.8knowledge distillation · 0.8
YearPublicationVenuePosition
2025 Puzzle: Distillation-Based NAS for Inference-Optimized LLMs
abstract
Large language models (LLMs) offer remarkable capabilities, yet their high inference costs restrict wider adoption. While increasing parameter counts improves accuracy, it also broadens the gap between state-of-the-art capabilities and practical deployability. We present **Puzzle**, a hardware-aware framework that accelerates the inference of LLMs while preserving their capabilities. Using neural architecture search (NAS) at a large-scale, Puzzle optimizes models with tens of billions of parameters. Our approach utilizes blockwise local knowledge distillation (BLD) for parallel architecture exploration and employs mixed-integer programming for precise constraint optimization. We showcase our framework’s impact via Llama-3.1-Nemotron-51B-Instruct (Nemotron-51B) and Llama-3.3-Nemotron-49B, two publicly available models derived from Llama-70B-Instruct. Both models achieve a 2.17x inference throughput speedup, fitting on a single NVIDIA H100 GPU while retaining 98.4% of the original model's benchmark accuracies. These are the most accurate models supporting single H100 GPU inference with large batch sizes, despite training on 45B tokens at most, far fewer than the 15T used to train Llama-70B. Lastly, we show that lightweight alignment on these derived models allows them to surpass the parent model in specific capabilities. Our work establishes that powerful LLM models can be optimized for efficient deployment with only negligible loss in quality, underscoring that inference performance, not parameter count alone, should guide model selection.
Akhiad Bercovich, Tomer Ronen, Talor Abramovich, Nir Ailon, Nave Assaf, Mohammad Dabbah, Ido Galil, Amnon Geifman, Yonatan Geifman, Izhak Golan, Netanel Haber, Ehud Karpas, Roi Koren, Itay Levy, Pavlo Molchanov 0001, Shahar Mor, Zach Moshe, Najeeb Nabwani, Omri Puny, Ran Rubin, Itamar Schen, Ido Shahaf, Oren Tropp, Omer Ullman Argov, Ran Zilberstein, Ran El-Yaniv
ICML7
2025 Padding Tone: A Mechanistic Analysis of Padding Tokens in T2I Models
abstract
Michael Toker, Ido Galil, Hadas Orgad, Rinon Gal, Yoad Tewel, Gal Chechik, Yonatan Belinkov. Proceedings of the 2025 Conference of the Nations of the Americas Chapter of the Association for Computational Linguistics: Human Language Technologies (Volume 1: Long Papers). 2025.
Michael Toker, Ido Galil, Hadas Orgad, Rinon Gal, Yoad Tewel, Gal Chechik, Yonatan Belinkov
NAACL (Long Papers)2
2025 FFN Fusion: Rethinking Sequential Computation in Large Language Models
abstract
We introduce \textit{FFN Fusion}, an architectural optimization technique that reduces sequential computation in large language models by identifying and exploiting natural opportunities for parallelization. Our key insight is that sequences of Feed-Forward Network (FFN) layers, particularly those remaining after the removal of specific attention layers, can often be parallelized with minimal accuracy impact. We develop a principled methodology for identifying and fusing such sequences, transforming them into parallel operations that significantly reduce inference latency while preserving model behavior. Applying these techniques to Llama-3.1-405B-Instruct, we create a 253B model (253B-Base), an efficient and soon-to-be publicly available model that achieves a 1.71$\times$ speedup in inference latency and 35$\times$ lower per-token cost while maintaining strong performance across benchmarks. Most intriguingly, we find that even full transformer blocks containing both attention and FFN layers can sometimes be parallelized, suggesting new directions for neural architecture design.
Akhiad Bercovich, Mohammad Dabbah, Omri Puny, Ido Galil, Amnon Geifman, Yonatan Geifman, Izik Golan, Ehud Karpas, Itay Levy, Zach Moshe, Najeeb Nabwani, Tomer Ronen, Itamar Schen, Ido Shahaf, Oren Tropp, Ran Zilberstein, Ran El-Yaniv
NeurIPS4
2024 Hierarchical Selective Classification
abstract
Deploying deep neural networks for risk-sensitive tasks necessitates an uncertainty estimation mechanism. This paper introduces *hierarchical selective classification*, extending selective classification to a hierarchical setting. Our approach leverages the inherent structure of class relationships, enabling models to reduce the specificity of their predictions when faced with uncertainty. In this paper, we first formalize hierarchical risk and coverage, and introduce hierarchical risk-coverage curves. Next, we develop algorithms for hierarchical selective classification (which we refer to as "inference rules"), and propose an efficient algorithm that guarantees a target accuracy constraint with high probability. Lastly, we conduct extensive empirical studies on over a thousand ImageNet classifiers, revealing that training regimes such as CLIP, pretraining on ImageNet21k and knowledge distillation boost hierarchical selective performance.
Shani Goren, Ido Galil, Ran El-Yaniv
NeurIPS2
2023 A framework for benchmarking Class-out-of-distribution detection and its application to ImageNet
Ido Galil, Mohammed Dabbah, Ran El-Yaniv
ICLR1
2023 What Can we Learn From The Selective Prediction And Uncertainty Estimation Performance Of 523 Imagenet Classifiers?
Ido Galil, Mohammed Dabbah, Ran El-Yaniv
ICLR1
2021 Disrupting Deep Uncertainty Estimation Without Harming Accuracy
abstract
Deep neural networks (DNNs) have proven to be powerful predictors and are widely used for various tasks. Credible uncertainty estimation of their predictions, however, is crucial for their deployment in many risk-sensitive applications. In this paper we present a novel and simple attack, which unlike adversarial attacks, does not cause incorrect predictions but instead cripples the network's capacity for uncertainty estimation. The result is that after the attack, the DNN is more confident of its incorrect predictions than about its correct ones without having its accuracy reduced. We present two versions of the attack. The first scenario focuses on a black-box regime (where the attacker has no knowledge of the target network) and the second scenario attacks a white-box setting. The proposed attack is only required to be of minuscule magnitude for its perturbations to cause severe uncertainty estimation damage, with larger magnitudes resulting in completely unusable uncertainty estimations.We demonstrate successful attacks on three of the most popular uncertainty estimation methods: the vanilla softmax score, Deep Ensembles and MC-Dropout. Additionally, we show an attack on SelectiveNet, the selective classification architecture. We test the proposed attack on several contemporary architectures such as MobileNetV2 and EfficientNetB0, all trained to classify ImageNet.
Ido Galil, Ran El-Yaniv
NeurIPS1