Sony AI, Tokyo, 108-0075, Japan; University of California, Los Angeles, CA 90095, USA; Virginia Tech, Blacksburg, VA 24061, USA
Yi Zeng, Zhouxing Shi, Ming Jin, Feiyang Kang, Lingjuan Lyu, Cho-Jui Hsieh, Ruoxi Jia
Universal Perturbation;Adversarial Attack;Backdoor Attack;Certified Robustness;Poisoning Attack
Towards Robustness Certification Against Universal Perturbations