Augment then Smooth: Reconciling Differential Privacy with Certified Robustness

Jiapeng Wu, Atiyeh Ashari Ghomi, David Glukhov +3

Machine learning models are susceptible to a variety of attacks that can erode trust, including attacks against the privacy of training data, and adversarial examples that jeopardi…