no code implementations • 13 Oct 2021 • Tobias Wegel, Felix Assion, David Mickisch, Florens Greßner
Verifying the robustness of classifiers using the Wasserstein metric can be achieved by proving the absence of adversarial examples (certification) or proving their presence (attack).