Dual Randomized Smoothing: Beyond Global Noise Variance
Researchers introduce Dual Randomized Smoothing, an improved technique for certifying neural network robustness against adversarial perturbations. This method allows for input-dependent noise variances, breaking through a limitation of the standard Randomized Smoothing formulation. Experiments show significant performance gains on CIFAR-10 and ImageNet datasets.
Save an API key to vote.