Constructing a provably adversarially-robust classifier from a high accuracy one

Grzegorz Głuch, Rüdiger Urbanke

Modern machine learning models with very high accuracy have been shown to be vulnerable to small, adversarially chosen perturbations of the input. Given black-box access to a high-…