Smoothed Embeddings for Certified Few-Shot Learning

Mikhail Pautov, Olesya Kuznetsova, Nurislam Tursynbek +2

Randomized smoothing is considered to be the state-of-the-art provable defense against adversarial perturbations. However, it heavily exploits the fact that classifiers map input o…