Search papers, labs, and topics across Lattice.
This paper introduces a novel framework for certified robust regression that leverages randomized smoothing to enhance adversarial robustness in regression tasks. By deriving a prediction-centered certificate that incorporates local function geometry through means, variances, and gradients, the authors address the limitations of existing probabilistic acceptance regions. The results show that utilizing gradient information leads to significantly tighter robustness certificates on the MNIST rotation task compared to the state-of-the-art method, alpha-smoothing.
Gradient-informed certificates can yield significantly tighter bounds on adversarial robustness in regression, outperforming existing methods.
Randomized smoothing has emerged as a scalable technique for certifying the adversarial robustness of classifiers. However, its application to regression remains under-explored and faces unique challenges. Existing regression certificates rely on probabilistic acceptance regions and fail to exploit the local geometry of the function. In this work, we present a novel framework for certified robust regression that addresses these limitations. We derive a prediction-centered certificate that guarantees the stability of the smoothed model's prediction and ensures practical computability at test time. We investigate several alternatives for constructing these certificates by explicitly incorporating means, variances, and gradients. In particular, we demonstrate on the MNIST rotation task that utilizing gradient information yields significantly tighter robustness certificates compared to the current state-of-the-art, alpha-smoothing.
