Abstract
Given the widespread use of deep learning models in safety-criticalapplications, ensuring that the decisions of such models are robust againstadversarial exploitation is of fundamental importance. In this thesis, wediscuss recent progress toward designing algorithms that exhibit desirablerobustness properties. First, we discuss the problem of adversarial examples incomputer vision, for which we introduce new technical results, trainingparadigms, and certification algorithms. Next, we consider the problem ofdomain generalization, wherein the task is to train neural networks togeneralize from a family of training distributions to unseen testdistributions. We present new algorithms that achieve state-of-the-artgeneralization in medical imaging, molecular identification, and imageclassification. Finally, we study the setting of jailbreaking large languagemodels (LLMs), wherein an adversarial user attempts to design prompts thatelicit objectionable content from an LLM. We propose new attacks and defenses,which represent the frontier of progress toward designing robust language-basedagents.