I’m a first-year PhD student at MIT, fortunate to be coadvised by Costis Daskalakis and Aleksander Madry. I recently graduated from MIT with a concurrent B.S./M.Eng, double majoring (for B.S.) in Computer Science and Math.

My master’s thesis was supervised by Costis Daskalakis at MIT CSAIL. I’m also a founding member of labsix.

In past years, I’ve worked in the MIT CBMM, the Database Lab at MIT, and as an intern at Two Sigma Labs, where I worked on Convex Optimization and Online Learning.


Publications and Preprints (*=equal contribution)


How Does Batch Normalization Help Optimization? (NeurIPS 2018)
Shibani Santurkar*, Dimitris Tsipras*, Andrew Ilyas*, Aleksander Madry (2018)
arXiv, Blog Post, Video (3 minutes)
Oral presentation.

Black-box Adversarial Attacks with Limited Queries and Information (ICML 2018)
Andrew Ilyas*, Logan Engstrom*, Anish Athalye*, Jessy Lin* (2017)
arXiv, Partial-Information/GCV Blog Post, Label-Only Attack Blog Post

Synthesizing Robust Adversarial Examples (ICML 2018)
Anish Athalye*, Logan Engstrom*, Andrew Ilyas*, Kevin Kwok (2017)
arXiv, Blog Post

Training GANs with Optimism (ICLR 2018)
Constantinos Daskalakis*, Andrew Ilyas*, Vasilis Syrgkanis*, Haoyang Zeng* (2017)
arXiv, Github

Extracting Syntactic Patterns From Databases (ICDE 2018)
Andrew Ilyas, Joana M.F. da Trindade, Raul C. Fernandez, Samuel Madden (2017)
arXiv, Github

MicroFilters: Harnessing Twitter for Disaster Managment (IEEE GHTC 2014)
Andrew Ilyas (2014)
IEEE Xplore
Chairman’s award winner.

Short Papers

Evaluating and Understanding the Robustness of Adversarial Logit Pairing (NeurIPS Security in Machine Learning workshop 2018)
Logan Engstrom*, Andrew Ilyas*, Anish Athalye* (2018)


Are Deep Policy Gradient Algorithms Truly Policy Gradient Algorithms?
Andrew Ilyas*, Logan Engstrom*, Shibani Santurkar, Dimitris Tsipras, Firdaus Janoos, Larry Rudolph (2018)
arXiv, Blog Post (1/3), Blog Post (2/3)

Prior Convictions: Black-box Adversarial Attacks with Bandits and Priors
Andrew Ilyas*, Logan Engstrom*, Aleksander Madry (2017)

The Robust Manifold Defense: Adversarial Training using Generative Models
Andrew Ilyas, Ajil Jalal, Eirini Asteri, Constantinos Daskalakis, Alex G. Dimakis (2017)
arXiv, Blog Post

Personal Projects

In this section I have included a list of previous hardware/software projects, including hackathon products, and weekend projects.

Research Archives (Pre-MIT)

In this section I have included a near-complete list of previous research topics, and links to the papers, reports, or products created as a result of that research. The projects are sorted chronologically, with every project from 2009 (Grade 5!) to present (Grade 12).