{"id":"https://openalex.org/W4318718916","doi":"https://doi.org/10.48550/arxiv.2301.12549","title":"Unlocking Deterministic Robustness Certification on ImageNet","display_name":"Unlocking Deterministic Robustness Certification on ImageNet","publication_year":2023,"publication_date":"2023-01-29","ids":{"openalex":"https://openalex.org/W4318718916","doi":"https://doi.org/10.48550/arxiv.2301.12549"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2301.12549","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2301.12549","pdf_url":"https://arxiv.org/pdf/2301.12549","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"type":"preprint","indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2301.12549","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5048675276","display_name":"Kai Hu","orcid":"https://orcid.org/0000-0001-7181-9935"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hu, Kai","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5004880532","display_name":"Andy Zou","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zou, Andy","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5032942801","display_name":"Zifan Wang","orcid":"https://orcid.org/0000-0003-3394-8060"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Zifan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5077941255","display_name":"K. Rustan M. Leino","orcid":"https://orcid.org/0000-0003-2872-8039"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Leino, Klas","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5057424614","display_name":"Matt Fredrikson","orcid":"https://orcid.org/0000-0003-1820-1698"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Fredrikson, Matt","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.9553999900817871,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/lipschitz-continuity","display_name":"Lipschitz continuity","score":0.7577159404754639},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7270365953445435},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6967008113861084},{"id":"https://openalex.org/keywords/residual","display_name":"Residual","score":0.6193982362747192},{"id":"https://openalex.org/keywords/bounding-overwatch","display_name":"Bounding overwatch","score":0.5407867431640625},{"id":"https://openalex.org/keywords/margin","display_name":"Margin (machine learning)","score":0.44191455841064453},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.43702206015586853},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.36009228229522705},{"id":"https://openalex.org/keywords/mathematical-optimization","display_name":"Mathematical optimization","score":0.34723466634750366},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.28671640157699585},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.18723759055137634}],"concepts":[{"id":"https://openalex.org/C22324862","wikidata":"https://www.wikidata.org/wiki/Q652707","display_name":"Lipschitz continuity","level":2,"score":0.7577159404754639},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7270365953445435},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6967008113861084},{"id":"https://openalex.org/C155512373","wikidata":"https://www.wikidata.org/wiki/Q287450","display_name":"Residual","level":2,"score":0.6193982362747192},{"id":"https://openalex.org/C63584917","wikidata":"https://www.wikidata.org/wiki/Q333286","display_name":"Bounding overwatch","level":2,"score":0.5407867431640625},{"id":"https://openalex.org/C774472","wikidata":"https://www.wikidata.org/wiki/Q6760393","display_name":"Margin (machine learning)","level":2,"score":0.44191455841064453},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.43702206015586853},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.36009228229522705},{"id":"https://openalex.org/C126255220","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Mathematical optimization","level":1,"score":0.34723466634750366},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.28671640157699585},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.18723759055137634},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2301.12549","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2301.12549","pdf_url":"https://arxiv.org/pdf/2301.12549","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2301.12549","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2301.12549","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2301.12549","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2301.12549","pdf_url":"https://arxiv.org/pdf/2301.12549","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2144278397","display_name":null,"funder_award_id":"FA8702-15-D-0002","funder_id":"https://openalex.org/F4320306078","funder_display_name":"U.S. Department of Defense"},{"id":"https://openalex.org/G4713059963","display_name":null,"funder_award_id":"FA8750","funder_id":"https://openalex.org/F4320332180","funder_display_name":"Defense Advanced Research Projects Agency"},{"id":"https://openalex.org/G6399177790","display_name":null,"funder_award_id":"FA8750-15-2-0277","funder_id":"https://openalex.org/F4320332180","funder_display_name":"Defense Advanced Research Projects Agency"}],"funders":[{"id":"https://openalex.org/F4320306078","display_name":"U.S. Department of Defense","ror":"https://ror.org/0447fe631"},{"id":"https://openalex.org/F4320332180","display_name":"Defense Advanced Research Projects Agency","ror":"https://ror.org/02caytj08"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4318718916.pdf","grobid_xml":"https://content.openalex.org/works/W4318718916.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W3185235544","https://openalex.org/W4297791327","https://openalex.org/W2897842840","https://openalex.org/W2911623553","https://openalex.org/W2397777611","https://openalex.org/W1502031429","https://openalex.org/W2318923278","https://openalex.org/W2417585376","https://openalex.org/W2980380637","https://openalex.org/W2945311944"],"abstract_inverted_index":{"Despite":[0],"the":[1,53,72,94,139],"promise":[2],"of":[3,52,70],"Lipschitz-based":[4],"methods":[5],"for":[6,33,56,75,138],"provably-robust":[7],"deep":[8,47],"learning":[9,160],"with":[10],"deterministic":[11,149],"guarantees,":[12],"current":[13],"state-of-the-art":[14],"results":[15],"are":[16,78,143],"limited":[17],"to":[18,38,83,93,145,152,158,164],"feed-forward":[19],"Convolutional":[20],"Networks":[21],"(ConvNets)":[22],"on":[23,130,171],"low-dimensional":[24],"data,":[25],"such":[26],"as":[27],"CIFAR-10.":[28],"This":[29],"paper":[30],"investigates":[31],"strategies":[32],"expanding":[34],"certifiably":[35],"robust":[36,111,128,159],"training":[37,112],"larger,":[39],"deeper":[40],"models.":[41],"A":[42],"key":[43],"challenge":[44],"in":[45,60],"certifying":[46],"networks":[48],"is":[49],"efficient":[50],"calculation":[51],"Lipschitz":[54,73],"bound":[55],"residual":[57,90],"blocks":[58],"found":[59],"ResNet":[61],"and":[62,80,132],"ViT":[63],"architectures.":[64],"We":[65,99,167],"show":[66,81],"that":[67,109,155],"fast":[68,148],"ways":[69],"bounding":[71],"constant":[74],"conventional":[76],"ResNets":[77],"loose,":[79],"how":[82],"address":[84],"this":[85,156],"by":[86,113],"designing":[87],"a":[88,106],"new":[89,126],"block,":[91],"leading":[92],"\\emph{Linear":[95],"ResNet}":[96],"(LiResNet)":[97],"architecture.":[98],"then":[100],"introduce":[101],"\\emph{Efficient":[102],"Margin":[103],"MAximization}":[104],"(EMMA),":[105],"loss":[107],"function":[108],"stabilizes":[110],"simultaneously":[114],"penalizing":[115],"worst-case":[116],"adversarial":[117],"examples":[118],"from":[119],"\\emph{all}":[120],"classes.":[121],"Together,":[122],"these":[123],"contributions":[124],"yield":[125],"\\emph{state-of-the-art}":[127],"accuracy":[129],"CIFAR-10/100":[131],"Tiny-ImageNet":[133],"under":[134],"$\\ell_2$":[135],"perturbations.":[136],"Moreover,":[137],"first":[140],"time,":[141],"we":[142],"able":[144],"scale":[146],"up":[147],"robustness":[150],"guarantees":[151],"ImageNet,":[153],"demonstrating":[154],"approach":[157],"can":[161],"be":[162],"applied":[163],"real-world":[165],"applications.":[166],"release":[168],"our":[169],"code":[170],"Github:":[172],"\\url{https://github.com/klasleino/gloro}.":[173]},"counts_by_year":[],"updated_date":"2026-08-26T07:47:46.906454","created_date":"2025-10-10T00:00:00"}