How robust accuracy suffers from certified training with convex relaxations

Piersilvio De Bartolomeis, Jacob Clarysse, Amartya Sanyal +1

Adversarial attacks pose significant threats to deploying state-of-the-art classifiers in safety-critical applications. Two classes of methods have emerged to address this issue: e…