{"id":"https://openalex.org/W7166826144","doi":"https://doi.org/10.48550/arxiv.2606.31653","title":"Improving Certified Robustness via Adversarial Distillation","display_name":"Improving Certified Robustness via Adversarial Distillation","publication_year":2026,"publication_date":"2026-06-30","ids":{"openalex":"https://openalex.org/W7166826144","doi":"https://doi.org/10.48550/arxiv.2606.31653"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.31653","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.31653","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.31653","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5117865130","display_name":"Matteo Melis","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Melis, Matteo","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5014600847","display_name":"Jes\u00fas Mart\u00ednez del Rinc\u00f3n","orcid":"https://orcid.org/0000-0002-9574-4138"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Del Rincon, Jesus Martinez","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5139790674","display_name":"Vishal Sharma","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sharma, Vishal","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9944999814033508,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9944999814033508,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.0013000000035390258,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.000699999975040555,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.758899986743927},{"id":"https://openalex.org/keywords/upper-and-lower-bounds","display_name":"Upper and lower bounds","score":0.6385999917984009},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5849999785423279},{"id":"https://openalex.org/keywords/certification","display_name":"Certification","score":0.5184000134468079},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.4616999924182892},{"id":"https://openalex.org/keywords/distillation","display_name":"Distillation","score":0.4481000006198883}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.758899986743927},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6509000062942505},{"id":"https://openalex.org/C77553402","wikidata":"https://www.wikidata.org/wiki/Q13222579","display_name":"Upper and lower bounds","level":2,"score":0.6385999917984009},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5849999785423279},{"id":"https://openalex.org/C46304622","wikidata":"https://www.wikidata.org/wiki/Q374814","display_name":"Certification","level":2,"score":0.5184000134468079},{"id":"https://openalex.org/C126255220","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Mathematical optimization","level":1,"score":0.4677000045776367},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.4616999924182892},{"id":"https://openalex.org/C204030448","wikidata":"https://www.wikidata.org/wiki/Q101017","display_name":"Distillation","level":2,"score":0.4481000006198883},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3887999951839447},{"id":"https://openalex.org/C171268870","wikidata":"https://www.wikidata.org/wiki/Q1486676","display_name":"GRASP","level":2,"score":0.3752000033855438},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3601999878883362},{"id":"https://openalex.org/C2779458634","wikidata":"https://www.wikidata.org/wiki/Q24963715","display_name":"Debiasing","level":2,"score":0.3257000148296356},{"id":"https://openalex.org/C173801870","wikidata":"https://www.wikidata.org/wiki/Q201413","display_name":"Heuristic","level":2,"score":0.3050000071525574},{"id":"https://openalex.org/C193254401","wikidata":"https://www.wikidata.org/wiki/Q2160088","display_name":"Robust optimization","level":2,"score":0.30309998989105225},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.2922999858856201},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.2515000104904175}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.31653","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.31653","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.31653","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.31653","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Certified":[0],"training":[1,33,54,92,122],"aims":[2],"to":[3,46,70,180,192],"produce":[4,41],"models":[5,66],"whose":[6],"predictions":[7],"can":[8,86],"be":[9,87],"formally":[10],"verified":[11],"against":[12],"adversarial":[13,53,91,126,137,173],"perturbations,":[14],"typically":[15],"by":[16,89,190],"optimising":[17],"upper":[18,108,131],"bounds":[19,40,109],"on":[20,37,98,115,163],"the":[21,64,77,111,140,176],"worst-case":[22,112],"loss":[23],"over":[24,139,184],"an":[25,129,144,149],"allowed":[26],"perturbation":[27],"set.":[28],"For":[29],"neural":[30,73],"networks,":[31],"certified":[32,121,155,161,182],"methods":[34],"based":[35,97],"purely":[36],"tight":[38],"relaxation":[39],"networks":[42],"that":[43,81,124,135],"are":[44,67],"amenable":[45],"certification,":[47],"but":[48,63],"sacrifice":[49],"standard":[50,61],"accuracy.":[51],"Conversely,":[52],"often":[55],"yields":[56],"stronger":[57],"empirical":[58],"robustness":[59,165],"and":[60,107],"accuracy,":[62],"resulting":[65],"generally":[68],"difficult":[69],"certify":[71],"with":[72,94,128,157],"network":[74],"verifiers.":[75],"Recently,":[76],"literature":[78],"has":[79],"shown":[80,179],"better":[82],"standard-certified":[83],"accuracy":[84,183],"trade-offs":[85],"achieved":[88],"combining":[90],"objectives":[93],"loose":[95],"over-approximations":[96],"Interval":[99],"Bound":[100],"Propagation":[101],"(IBP),":[102],"effectively":[103],"interpolating":[104],"between":[105],"lower":[106,151],"of":[110],"loss.":[113],"Building":[114],"this,":[116],"we":[117],"introduce":[118],"AD-CERT,":[119],"a":[120,169,185],"objective":[123,189],"combines":[125],"distillation":[127,188],"IBP":[130],"bound.":[132],"We":[133],"show":[134],"distilling":[136,172],"information":[138,174],"logit":[141],"space":[142],"from":[143],"empirically":[145],"robust":[146,186],"teacher":[147],"provides":[148],"effective":[150],"bound":[152],"surrogate":[153],"for":[154],"training,":[156],"AD-CERT":[158],"achieving":[159],"state-of-the-art":[160],"performance":[162],"several":[164],"benchmarks.":[166],"Furthermore,":[167],"in":[168],"unified":[170],"setup,":[171],"at":[175],"logit-level":[177],"is":[178],"improve":[181],"feature-space":[187],"up":[191],"5.40":[193],"percentage":[194],"points.":[195]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-07-02T00:00:00"}