Towards Generalized Certified Robustness with Multi-Norm Training

Enyi Jiang, David S. Cheung, Gagandeep Singh

Existing certified training methods can only train models to be robust against a certain perturbation type (e.g. $l_{\infty }$ or $l_2$). However, an $l_{\infty }$ certifiably robust mod…