Scaling provable adversarial defenses

Eric Wong, Frank R. Schmidt, Jan Hendrik Metzen +1

Recent work has developed methods for learning deep network classifiers that are provably robust to norm-bounded adversarial perturbation; however, these methods are currently only…