Confidence-aware Training of Smoothed Classifiers for Certified Robustness

Jongheon Jeong, Seojin Kim, Jinwoo Shin

Any classifier can be "smoothed out" under Gaussian noise to build a new classifier that is provably robust to ${\ell }_2$-adversarial perturbations, viz., by averaging its prediction…