Jinbo Bi

Certifying Adapters: Enabling and Enhancing the Certification of Classifier Adversarial Robustness

2024 · arXiv (Cornell University)

Randomized smoothing has become a leading method for achieving certified robustness in deep classifiers against l_{p}-norm adversarial perturbations. Current approaches for achieving certified robustness, such as data augmentation with Gaussian noise and adversarial training, require …