Learning Security Classifiers with Verified Global Robustness Properties

Yizheng Chen, Shiqi Wang, Yue Qin +3

Many recent works have proposed methods to train classifiers with local robustness properties, which can provably eliminate classes of evasion attacks for most inputs, but not all…