On Using Certified Training towards Empirical Robustness

Alessandro De Palma, Serge Durand, Zakaria Chihani +2

Adversarial training is arguably the most popular way to provide empirical robustness against specific adversarial examples. While variants based on multi-step attacks incur signif…