Revisiting Certified Defense with Differential Privacy on Vision Transformers
Laplace PixelDP noise after Vision Transformer patch embeddings collapses accuracy; spectral-norm repair voids the usual certificate.
1 stories, newest first · one card per story
Laplace PixelDP noise after Vision Transformer patch embeddings collapses accuracy; spectral-norm repair voids the usual certificate.
Today 1.6K readers · 2.5K views · 779 reads · all time 189K views