Fast Geometric Projections for Local Robustness Certification

Aymeric Fromherz, Klas Leino, Matt Fredrikson +2

Local robustness ensures that a model classifies all inputs within an ${\ell }_2$-ball consistently, which precludes various forms of adversarial inputs. In this paper, we present a f…