Intriguing Properties of Input-Dependent Randomized Smoothing

Peter Súkeník, Aleksei Kuvshinov, Stephan Günnemann

Abstract: Randomized smoothing is currently considered the state-of-the-art method to obtain certifiably robust classifiers. Despite its remarkable performance, the method is associated with various serious ...