Double Sampling Randomized Smoothing

Linyi Li, Jiawei Zhang, Tao Xie +1

Neural networks (NNs) are known to be vulnerable against adversarial perturbations, and thus there is a line of work aiming to provide robustness certification for NNs, such as ran…