Improving Certified Robustness via Adversarial Distillation

Matteo Melis, Jesus Martinez Del Rincon, Vishal Sharma

Certified training aims to produce models whose predictions can be formally verified against adversarial perturbations, typically by optimising upper bounds on the worst-case loss…