Random Smoothing Might be Unable to Certify ${\ell }_{\infty }$ Robustness for High-Dimensional Images

Avrim Blum, Travis Dick, Naren Manoj +1

We show a hardness result for random smoothing to achieve certified adversarial robustness against attacks in the ${\ell }_p$ ball of radius $\epsilon$ when $p>2$. Although random smoothing…