[50] Felix Mujkanovic, Simon Geisler, Aleksandar Bojchevski, and Stephan Gunnemann. Are defenses for graph neural networks robust? In Advances in Neural Information Processing Systems, 2022.
[51] Jan Schuchardt, Tom Wollschlager, Aleksandar Bojchevski, and Stephan Gunnemann. Localized randomized smoothing for collective robustness certification. In International Conference on Learning Representations, 2023.
[52] Lukas Gosch, Daniel Sturm, Simon Geisler, and Stephan Gunnemann. Revisiting robustness in graph machine learning. In International Conference on Learning Representations, 2023.
[53] Francesco Campi, Lukas Gosch, Tom Wollschlager, Yan Scholten, and Stephan Gunnemann. Expressivity of graph neural networks through the lens of adversarial robustness. In The Second Workshop on New Frontiers in Adversarial Machine Learning, 2023.
[54] Lukas Gosch, Simon Geisler, Daniel Sturm, Bertrand Charpentier, Daniel Zügner, and Stephan Gunnemann. Adversarial training for graph neural networks. In Advances in Neural Information Processing Systems, 2023.
[55] Yan Scholten, Jan Schuchardt, and Stephan Gunnemann. Hierarchical randomized smoothing. In Advances in Neural Information Processing Systems, 2023.
[56] Can Kanbak, Seyed-Mohsen Moosavi-Dezfooli, and Pascal Frossard. Geometric robustness of deep networks: analysis and improvement. In Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pages 4441-4449, 2018.
[57] Logan Engstrom, Brandon Tran, Dimitris Tsipras, Ludwig Schmidt, and Aleksander Madry. Exploring the landscape of spatial robustness. In International conference on machine learning, 2019.
[58] Mislav Balunovic, Maximilian Baader, Gagandeep Singh, Timon Gehr, and Martin Vechev. Certifying geometric robustness of neural networks. Advances in Neural Information Processing Systems, 2019.
[59] Yue Zhao, Yuwei Wu, Caihua Chen, and Andrew Lim. On isometry robustness of deep 3d point cloud models under adversarial attacks. In Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition, pages 1201-1210, 2020.
[60] Marc Fischer, Maximilian Baader, and Martin Vechev. Certified defense to image transformations via randomized smoothing. Advances in Neural information processing systems, 2020.
[61] Anian Ruoss, Maximilian Baader, Mislav Balunovic, and Martin Vechev. Efficient certification of spatial robustness. In Proceedings of the AAAI Conference on Artificial Intelligence, volume 35, pages 2504-2513, 2021.
[62] Jeet Mohapatra, Tsui-Wei Weng, Pin-Yu Chen, Sijia Liu, and Luca Daniel. Towards verifying robustness of neural networks against a family of semantic perturbations. In Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR), June 2020.
[63] Linyi Li, Maurice Weber, Xiaojun Xu, Luka Rimanic, Bhavya Kailkhura, Tao Xie, Ce Zhang, and Bo Li. TSS: Transformation-specific smoothing for robustness certification. In Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security, pages 535-557, 2021.
[64] Motasem Alfarra, Adel Bibi, Naeemullah Khan, Philip HS Torr, and Bernard Ghanem. DeformRS: Certifying input deformations with randomized smoothing. In Proceedings of the AAAI Conference on Artificial Intelligence, number 6, pages 6001-6009, 2022.
[65] Nikita Murarev and Aleksandr Petiushko. Certified robustness via randomized smoothing over multiplicative parameters of input transformations. In International Joint Conference on Artificial Intelligence, 2022.