Jacob Clarysse

How robust accuracy suffers from certified training with convex relaxations

2023 · arXiv (Cornell University)

Adversarial attacks pose significant threats to deploying state-of-the-art classifiers in safety-critical applications. Two classes of methods have emerged to address this issue: empirical defences and certified defences. Although certified defences come with robustness guarantees, empirical …