Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Thomas Massena

dblp:348/6946 · DBLP profile ↗
← Back
3ranked-venue papers
1as first author
3since 2021 · last 2025
—ORCID · none

Domains — the database's venue-derived domains; a paper can count in several

Artificial intelligence and machine learning · 3 · 1 first-author · 3 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Artificial intelligence
3 papers
Trustworthy machine learning · 75% Deep learning architectures and training · 25%
Network and information security
1 paper
Privacy and data protection · 100%

Topics — the 9 heaviest of 9, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Machine learning › Trustworthy machine learning › robustness › certified robustness
lipschitz-constrained networks
1.622025
An Adaptive Orthogonal Convolution Scheme for Efficient and Flexible CNN Architectures · ICML 2025
DP-SGD Without Clipping: The Lipschitz Neural Network Way · ICLR 2024
Machine learning › Deep learning architectures and training
convolutional neural network
0.912025
An Adaptive Orthogonal Convolution Scheme for Efficient and Flexible CNN Architectures · ICML 2025
Machine learning › Deep learning architectures and training › convolutional neural network › convolution design
orthogonal convolution
0.912025
An Adaptive Orthogonal Convolution Scheme for Efficient and Flexible CNN Architectures · ICML 2025
Machine learning › Trustworthy machine learning › uncertainty estimation › conformal prediction
robust conformal prediction
0.912025
Efficient Robust Conformal Prediction via Lipschitz-Bounded Networks · ICML 2025
Machine learning › Trustworthy machine learning
robustness
0.912025
An Adaptive Orthogonal Convolution Scheme for Efficient and Flexible CNN Architectures · ICML 2025
Machine learning › Trustworthy machine learning › privacy
differentially private training
0.812024
DP-SGD Without Clipping: The Lipschitz Neural Network Way · ICLR 2024
Machine learning › Trustworthy machine learning › privacy
privacy-preserving machine learning
0.812024
DP-SGD Without Clipping: The Lipschitz Neural Network Way · ICLR 2024
Privacy and data protection
differential privacy
0.812024
DP-SGD Without Clipping: The Lipschitz Neural Network Way · ICLR 2024
Machine learning › Trustworthy machine learning › robustness
adversarial robustness
0.312025
Efficient Robust Conformal Prediction via Lipschitz-Bounded Networks · ICML 2025

Methods — techniques the papers use, named apart from their topics

lipschitz constraint · 1.5DP-SGD · 1.5orthogonal convolution · 0.9lipschitz-bounded networks · 0.9conformal prediction · 0.9BCOP extension · 0.9
YearPublicationVenuePosition
2025 An Adaptive Orthogonal Convolution Scheme for Efficient and Flexible CNN Architectures
abstract
Orthogonal convolutional layers are valuable components in multiple areas of machine learning, such as adversarial robustness, normalizing flows, GANs, and Lipschitz-constrained models. Their ability to preserve norms and ensure stable gradient propagation makes them valuable for a large range of problems. Despite their promise, the deployment of orthogonal convolution in large-scale applications is a significant challenge due to computational overhead and limited support for modern features like strides, dilations, group convolutions, and transposed convolutions. In this paper, we introduce **AOC** (Adaptive Orthogonal Convolution), a scalable method that extends a previous method (BCOP), effectively overcoming existing limitations in the construction of orthogonal convolutions. This advancement unlocks the construction of architectures that were previously considered impractical. We demonstrate through our experiments that our method produces expressive models that become increasingly efficient as they scale. To foster further advancement, we provide an open-source python package implementing this method, called **Orthogonium**.
Thibaut Boissin, Franck Mamalet, Thomas Fel, Agustin M. Picard, Thomas Massena, Mathieu Serrurier
ICML5
2025 Efficient Robust Conformal Prediction via Lipschitz-Bounded Networks
abstract
Conformal Prediction (CP) has proven to be an effective post-hoc method for improving the trustworthiness of neural networks by providing prediction sets with finite-sample guarantees. However, under adversarial attacks, classical conformal guarantees do not hold anymore: this problem is addressed in the field of Robust Conformal Prediction. Several methods have been proposed to provide robust CP sets with guarantees under adversarial perturbations, but, for large scale problems, these sets are either too large or the methods are too computationally demanding to be deployed in real life scenarios. In this work, we propose a new method that leverages Lipschitz-bounded networks to precisely and efficiently estimate robust CP sets. When combined with a 1-Lipschitz robust network, we demonstrate that our *lip-rcp* method outperforms state-of-the-art results in both the size of the robust CP sets and computational efficiency in medium and large-scale scenarios such as ImageNet. Taking a different angle, we also study vanilla CP under attack, and derive new worst-case coverage bounds of vanilla CP sets, which are valid simultaneously for all adversarial attack levels. Our *lip-rcp* method makes this second approach as efficient as vanilla CP while also allowing robustness guarantees.
Thomas Massena, Léo Andéol, Thibaut Boissin, Franck Mamalet, Corentin Friedrich, Mathieu Serrurier, Sébastien Gerchinovitz
ICML1
2024 DP-SGD Without Clipping: The Lipschitz Neural Network Way
abstract
State-of-the-art approaches for training Differentially Private (DP) Deep Neural Networks (DNN) face difficulties to estimate tight bounds on the sensitivity of the network's layers, and instead rely on a process of per-sample gradient clipping. This clipping process not only biases the direction of gradients but also proves costly both in memory consumption and in computation. To provide sensitivity bounds and bypass the drawbacks of the clipping process, we propose to rely on Lipschitz constrained networks. Our theoretical analysis reveals an unexplored link between the Lipschitz constant with respect to their input and the one with respect to their parameters. By bounding the Lipschitz constant of each layer with respect to its parameters, we prove that we can train these networks with privacy guarantees. Our analysis not only allows the computation of the aforementioned sensitivities at scale, but also provides guidance on how to maximize the gradient-to-noise ratio for fixed privacy guarantees. To facilitate the application of Lipschitz networks and foster robust and certifiable learning under privacy guarantees, we provide a Python package that implements building blocks allowing the construction and private training of such networks.
Louis Béthune, Thomas Massena, Thibaut Boissin, Aurélien Bellet, Franck Mamalet, Yannick Prudent, Corentin Friedrich, Mathieu Serrurier, David Vigouroux
ICLR2