Certified Robustness via Randomized Smoothing over Multiplicative Parameters of Input Transformations
Abstract
Currently the most popular method of providing robustness certificates is randomized smoothing where an input is smoothed via some probability distribution. We propose a novel approach to randomized smoothing over multiplicative parameters. Using this method we construct certifiably robust classifiers with respect to a gamma correction perturbation and compare the result with classifiers obtained via other smoothing distributions (Gaussian, Laplace, uniform). The experiments show that asymmetrical Rayleigh distribution allows to obtain better certificates for some values of perturbation parameters. To the best of our knowledge it is the first work concerning certified robustness against the multiplicative gamma correction transformation and the first to study effects of asymmetrical distributions in randomized smoothing.
Cite
Text
Muravev and Petiushko. "Certified Robustness via Randomized Smoothing over Multiplicative Parameters of Input Transformations." International Joint Conference on Artificial Intelligence, 2022. doi:10.24963/IJCAI.2022/467Markdown
[Muravev and Petiushko. "Certified Robustness via Randomized Smoothing over Multiplicative Parameters of Input Transformations." International Joint Conference on Artificial Intelligence, 2022.](https://mlanthology.org/ijcai/2022/muravev2022ijcai-certified/) doi:10.24963/IJCAI.2022/467BibTeX
@inproceedings{muravev2022ijcai-certified,
title = {{Certified Robustness via Randomized Smoothing over Multiplicative Parameters of Input Transformations}},
author = {Muravev, Nikita and Petiushko, Aleksandr},
booktitle = {International Joint Conference on Artificial Intelligence},
year = {2022},
pages = {3366-3372},
doi = {10.24963/IJCAI.2022/467},
url = {https://mlanthology.org/ijcai/2022/muravev2022ijcai-certified/}
}