Symbolic Gaussian Smoothing
This work introduces a deterministic variant of randomized smoothing for certifying neural network robustness. Instead of relying on multiple stochastic forward passes with Gaussian noise, the proposed method employs symbolic moment propagation to analytically compute the exact mean and covariance of the output distribution in a single pass. Evaluations on MNIST and Fashion MNIST show that the method yields comparable classification accuracy while achieving, on average, 10% larger certified robustness radii. This deterministic framework offers exact, non-probabilistic guarantees that are particularly attractive for safety-critical applications.
Authors
- Stanley Bak (ORCID: https://orcid.org/0000-0003-4947-9553)
- A. Mata
- Ali ArjomandBigdeli
Institutions
- Stony Brook University (US)
Publication Details
- Published
- 2025-05-06
- DOI
- https://doi.org/10.1145/3716550.3725169
- Primary Topic
- Advanced Vision and Imaging
- Type
- article
- Field-Weighted Citation Impact
- 0.00