Provable Certificates for Adversarial Examples: Fitting a Ball in the Union of Polytopes

Matt Jordan, Justin Lewis, Alexandros G. Dimakis

We propose a novel method for computing exact pointwise robustness of deep neural networks for all convex ${\ell }_p$ norms. Our algorithm, GeoCert, finds the largest ${\ell }_p$ ball ce…