Boosting Certified ${\ell }_{\infty }$ Robustness with EMA Method and Ensemble Model

Binghui Li, Shiji Xin, Qizhe Zhang

The neural network with $1$-Lipschitz property based on ${\ell }_{\infty }$-dist neuron has a theoretical guarantee in certified ${\ell }_{\infty }$ robustness. However, due to the inherent di…