Zhouxing Shi

Automatic Perturbation Analysis for Scalable Certified Robustness and Beyond

2020 · arXiv (Cornell University)

Linear relaxation based perturbation analysis (LiRPA) for neural networks, which computes provable linear bounds of output neurons given a certain amount of input perturbation, has become a core component in robustness verification and certified defense. …