Deterministic Certification to Adversarial Attacks via Bernstein Polynomial Approximation

Ching-Chia Kao, Jhe-Bang Ko, Chun-Shien Lu

Randomized smoothing has established state-of-the-art provable robustness against ${\ell }_2$ norm adversarial attacks with high probability. However, the introduced Gaussian data aug…