Framework certifies backdoor-poisoning robustness with f-divergences
It mixes subsampling with feature, label, and test noise and recovers earlier certificates as special cases.
Stories per day · 30 days
2 stories, newest first · one card per story
Stories tagged #certified-robustness
Revisiting Certified Defense with Differential Privacy on Vision Transformers
Laplace PixelDP noise after Vision Transformer patch embeddings collapses accuracy; spectral-norm repair voids the usual certificate.