A. Paszke, S. Gross, F. Massa, A. Lerer, J. Bradbury, G. Chanan, T. Killeen, Z. Lin, N. Gimelshein, L. Antiga, A. Desmaison, A. Köpf, E. Yang, Z. DeVito, M. Raison, A. Tejani, S. Chilamkurthy, B. Steiner, L. Fang, J. Bai, and S. Chintala, "Pytorch: An imperative style, high-performance deep learning library," in Proc. of NeurIPS, 2019.
Y. LeCun, C. Cortes, and C. Burges, "Mnist handwritten digit database," ATT Labs [Online]. Available: http://yann.lecun.com/exdb/mnist, 2010.
A. Krizhevsky, G. Hinton et al., "Learning multiple layers of features from tiny images," 2009.
Y. Le and X. S. Yang, "Tiny imagenet visual recognition challenge," CS 231N, no. 7, 2015.
B. Zhang, D. Jiang, D. He, and L. Wang, "Rethinking lipschitz neural networks and certified robustness: A boolean function perspective," CoRR, vol. abs/2210.01787, 2022.
B. Zhang, T. Cai, Z. Lu, D. He, and L. Wang, "Towards certifying l-infinity robustness using neural networks with l-inf-dist neurons," in Proc. of ICML, 2021.
B. Zhang, D. Jiang, D. He, and L. Wang, "Boosting the certified robustness of l-infinity distance nets," in Proc. of ICLR, 2022.
C. Anil, J. Lucas, and R. B. Grosse, "Sorting out lipschitz function approximation," in Proc. of ICML, 2019.
S. Wang, H. Zhang, K. Xu, X. Lin, S. Jana, C. Hsieh, and J. Z. Kolter, "Beta-crown: Efficient bound propagation with per-neuron split constraints for neural network robustness verification," in Proc. of NeurIPS, 2021.
G. Singh, T. Gehr, M. Mirman, M. Puschel, and M. T. Vechev, "Fast and effective robustness certification," in Proc. of NeurIPS, 2018.
A. Raghunathan, J. Steinhardt, and P. Liang, "Certified defenses against adversarial examples," in Proc. of ICLR, 2018.
S. Dathathri, K. Dvijotham, A. Kurakin, A. Raghunathan, J. Uesato, R. Bunel, S. Shankar, J. Steinhardt, I. J. Goodfellow, P. Liang, and P. Kohli, "Enabling certification of verification-agnostic networks via memory-efficient semidefinite programming," in Proc. of NeurIPS, 2020.
M. N. Müller, G. Makarchuk, G. Singh, M. Puschel, and M. T. Vechev, “PRIMA: general and precise neural network certification via scalable convex hull approximations,” Proc. ACM Program. Lang., no. POPL, 2022.
E. Wong, F. R. Schmidt, J. H. Metzen, and J. Z. Kolter, "Scaling provable adversarial defenses," in Proc. of NeurIPS, 2018.
H. Zhang, H. Chen, C. Xiao, S. Gowal, R. Stanforth, B. Li, D. S. Boning, and C. Hsieh, "Towards stable and efficient training of verifiably robust neural networks," in Proc. of ICLR, 2020.
M. N. Müller, M. Balunovic, and M. T. Vechev, "Certify or predict: Boosting certified robustness with compositional architectures," in Proc. of ICLR, 2021.
M. Z. Horváth, M. N. Müller, M. Fischer, and M. T. Vechev, "Robust and accurate - compositional architectures for randomized smoothing," CoRR, vol. abs/2204.00487, 2022.
B. Li, C. Chen, W. Wang, and L. Carin, "Certified adversarial robustness with additive noise," in Proc. of NeurIPS, 2019.
M. Lécuyer, V. Atlidakis, R. Geambasu, D. Hsu, and S. Jana, "Certified robustness to adversarial examples with differential privacy," in Proc. of S&P, 2019.
J. M. Cohen, E. Rosenfeld, and J. Z. Kolter, "Certified adversarial robustness via randomized smoothing," in Proc. of ICML, 2019.
H. Salman, J. Li, I. P. Razenshteyn, P. Zhang, H. Zhang, S. Bubeck, and G. Yang, "Provably robust deep learning via adversarially trained smoothed classifiers," in Proc. of NeurIPS, 2019.