Demo Data from SIGIR 2026 / reviewers in the wild / expert
Settur Jithamanyu
dblp:404/7270
· DBLP profile ↗
1ranked-venue papers
0as first author
1since 2021 · last 2025
—ORCID · none
Domains — the database's venue-derived domains; a paper can count in several
Artificial intelligence and machine learning · 1 · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Artificial intelligence
1 paper |
Trustworthy machine learning · 91% Representation and self-supervised learning · 9% |
Topics — the 4 heaviest of 4, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Machine learning › Trustworthy machine learning › robustness › adversarial robustness
adversarial training |
0.9 | 1 | 2025 | ASTrA: Adversarial Self-supervised Training with Adaptive-Attacks · ICLR 2025 |
Machine learning › Trustworthy machine learning
robustness |
0.9 | 1 | 2025 | ASTrA: Adversarial Self-supervised Training with Adaptive-Attacks · ICLR 2025 |
Machine learning › Trustworthy machine learning › robustness › adversarial robustness › adversarial training
self-supervised adversarial training |
0.9 | 1 | 2025 | ASTrA: Adversarial Self-supervised Training with Adaptive-Attacks · ICLR 2025 |
Machine learning › Representation and self-supervised learning
contrastive learning |
0.3 | 1 | 2025 | ASTrA: Adversarial Self-supervised Training with Adaptive-Attacks · ICLR 2025 |
Methods — techniques the papers use, named apart from their topics
reinforcement learning · 0.9contrastive loss · 0.9REINFORCE · 0.9PGD attack · 0.9
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2025 | ASTrA: Adversarial Self-supervised Training with Adaptive-AttacksabstractExisting self-supervised adversarial training (self-AT) methods rely on hand-crafted adversarial attack strategies for PGD attacks, which fail to adapt to the evolving learning dynamics of the model and do not account for instance-specific characteristics of images. This results in sub-optimal adversarial robustness and limits the alignment between clean and adversarial data distributions. To address this, we propose $\textit{ASTrA}$ ($\textbf{A}$dversarial $\textbf{S}$elf-supervised $\textbf{Tr}$aining with $\textbf{A}$daptive-Attacks), a novel framework introducing a learnable, self-supervised attack strategy network that autonomously discovers optimal attack parameters through exploration-exploitation in a single training episode. ASTrA leverages a reward mechanism based on contrastive loss, optimized with REINFORCE, enabling adaptive attack strategies without labeled data or additional hyperparameters. We further introduce a mixed contrastive objective to align the distribution of clean and adversarial examples in representation space. ASTrA achieves state-of-the-art results on CIFAR10, CIFAR100, and STL10 while integrating seamlessly as a plug-and-play module for other self-AT methods. ASTrA shows scalability to larger datasets, demonstrates strong semi-supervised performance, and is resilient to robust overfitting, backed by explainability analysis on optimal attack strategies. Project page for source code and other details at https://prakashchhipa.github.io/projects/ASTrA. Prakash Chandra Chhipa, Gautam Vashishtha, Settur Jithamanyu, Rajkumar Saini, Mubarak Shah, Marcus Liwicki |
ICLR | 3 |