Sabine Süsstrunk

Training Provably Robust Models by Polyhedral Envelope Regularization

2019 · arXiv (Cornell University)

Training certifiable neural networks enables one to obtain models with robustness guarantees against adversarial attacks. In this work, we introduce a framework to bound the adversary-free region in the neighborhood of the input data by …