Certified vs. Empirical Adversarial Robust-ness via Hybrid Convolutions with Attention Stochasticity

Joy Dhar, Song Xia, Manish Kumar Pandey +5

We introduce Hybrid Convolutions with Attention Stochasticity (HyCAS), an adversarial defense that narrows the long-standing gap between provable robustness under L2 certificates a…