Insta-RS: Instance-wise Randomized Smoothing for Improved Robustness and Accuracy

Chen Chen, Kezhi Kong, Peihong Yu +3

Randomized smoothing (RS) is an effective and scalable technique for constructing neural network classifiers that are certifiably robust to adversarial perturbations. Most RS works…