Certified Adversarial Robustness via Randomized Smoothing — mentioned by orange3xchicken

Fri, 06 Aug 2021 15:28:42 GMT

It turns out that a similar technique, where you basically apply noise multiple times to a single image, and average predictions over all noisy images- equivalent to convolving your nn with Gaussian noise yields near state of the art bounds on provable robustness (under a specific class of attacks). The issue is the magnitude of noise you need in order to get practically robust networks is quite large relative to the data you are dealing with. https://arxiv.org/abs/1902.02918 https://arxiv.org/abs/1906.04584

Paper and discussion history. A mention is not an endorsement.

Certified Adversarial Robustness via Randomized Smoothing · HackerPapers discussions

Certified Adversarial Robustness via Randomized Smoothing — mentioned by orange3xchicken