RRISE: Robust Radius Inference via a Surrogate Estimator

Jong-Ik Park, Shreyas Chaudhari, Carlee Joe-Wong +1

Randomized smoothing (RS) uses a smoothed classifier to provide architecture-agnostic certificates of ${\ell }_2$ classification robustness, but its dependence on per-input Monte Carl…