Alexander Levine

Wasserstein Smoothing: Certified Robustness against Wasserstein Adversarial Attacks

2019 · arXiv (Cornell University)

In the last couple of years, several adversarial attack methods based on different threat models have been proposed for the image classification problem. Most existing defenses consider additive threat models in which sample perturbations have …

Provable Adversarial Robustness for Fractional Lp Threat Models

2022 · arXiv (Cornell University)

In recent years, researchers have extensively studied adversarial robustness in a variety of threat models, including L_0, L_1, L_2, and L_infinity-norm bounded adversarial attacks. However, attacks bounded by fractional L_p "norms" (quasi-norms defined by the …