Certifying Joint Adversarial Robustness for Model Ensembles

1 code implementation • 21 Apr 2020 • Mainuddin Ahmad Jonas, David Evans

Deep Neural Networks (DNNs) are often vulnerable to adversarial examples. Several proposed defenses deploy an ensemble of models with the hope that, although the individual models may be vulnerable, an adversary will not be able to find an adversarial example that succeeds against the ensemble.

Adversarial Robustness