Google; Peking University; CMU; UCLA
Adversarial Robustness;Provable Adversarial Defense;Randomized Smoothing;Robustness Certification
MACER: Attack-free and Scalable Robust Training via Maximizing Certified Radius