Robustifying Diffusion-Denoised Smoothing Against Covariate Shift

Ali Hedayatnia, Mostafa Tavassolipour, Babak Nadjar Araabi +1

Randomized smoothing is a well-established method for achieving certified robustness against l2-adversarial perturbations. By incorporating a denoiser before the base classifier, p…