Improving the Tightness of Convex Relaxation Bounds for Training Certifiably Robust Classifiers

Chen Zhu, Renkun Ni, Ping-yeh Chiang +3

Convex relaxations are effective for training and certifying neural networks against norm-bounded adversarial attacks, but they leave a large gap between certifiable and empirical…