Tight Certificates of Adversarial Robustness for Randomly Smoothed Classifiers

Guang-He Lee, Yang Yuan, Shiyu Chang +1

Strong theoretical guarantees of robustness can be given for ensembles of classifiers generated by input randomization. Specifically, an ${\ell }_2$ bounded adversary cannot alter the…