Learning Better Certified Models from Empirically-Robust Teachers

Alessandro De Palma

Adversarial training attains strong empirical robustness to specific adversarial attacks by training on concrete adversarial perturbations, but it produces neural networks that are…