PatchCensor: Patch Robustness Certification for Transformers via Exhaustive Testing

Yuheng Huang, Lei Ma, Yuanchun Li

Vision Transformer (ViT) is known to be highly nonlinear like other classical neural networks and could be easily fooled by both natural and adversarial patch perturbations. This l…