mlsanityData to 7 Oct 2026

Laplace-Bridged Randomized Smoothing for Fast Certified Robustness

arXiv 2604.24993 ↗First posted 27 Apr 2026cs.LGcited by 0

Not on the map. Why?

Abstract (arXiv)

Randomized Smoothing (RS) offers formal ℓ2 guarantees for arbitrary base classifiers but faces two key practical bottlenecks: (i) it often relies on noise-augmented training to achieve nontrivial certificates, which increases training cost, can reduce clean accuracy, and weakens RS as a genuinely post-hoc defense; and (ii) certification is computationally expensive, typically requiring tens of thousands of noisy forward passes per input, which hinders deployment, especially on resource-constrained edge devices. To address both limitations, we propose Laplace-Bridged Smoothing (LBS), an analytic reformulation of RS that replaces high-dimensional input-space Monte Carlo (MC) sampling with efficient computations in a low-dimensional probability space. LBS preserves formal robustness guarantees without requiring noise-augmented training while substantially reducing certification burden. On CIFAR-10 and ImageNet, LBS attains stronger certified robustness than RS and reduces per-sample certification cost by nearly an order of magnitude. Notably, on NVIDIA Jetson Orin Nano and Raspberry Pi 4, LBS achieves speedups of up to 494×, enabling practical certified deployment on real-world edge devices. Finally, we provide theoretical justification for the analytic formulation and certificate validity of LBS.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 43 of its 63 references that are in the map. First posted on arXiv 27 Apr 2026.

Builds on

43 of 63 references.

References · 43

  1. 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
  2. 2014Explaining and Harnessing Adversarial Examplescited by 7,287
  3. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
  4. 2013Intriguing properties of neural networkscited by 5,114
  5. 2016Adversarial examples in the physical worldcited by 1,762
  6. 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,510
  7. 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,324
  8. 2018Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examplescited by 1,259
  9. 2019Adversarial Training for Free!cited by 638
  10. 2017Provable defenses against adversarial examples via the convex outer adversarial polytopecited by 564
  11. 2018Certified Robustness to Adversarial Examples with Differential Privacycited by 462
  12. 2021Laplace Redux -- Effortless Bayesian Deep Learningcited by 359
31 more
  1. 2019Provably Robust Deep Learning via Adversarially Trained Smoothed Classifierscited by 328
  2. 2015Scalable Bayesian Optimization Using Deep Neural Networkscited by 284
  3. 2020Being Bayesian, Even Just a Bit, Fixes Overconfidence in ReLU Networkscited by 227
  4. 2018Adversarial Risk and the Dangers of Evaluating Against Weak Attackscited by 221
  5. 2018Sorting out Lipschitz function approximationcited by 211
  6. 2018Lipschitz-Margin Training: Scalable Certification of Perturbation Invariance for Deep Neural Networkscited by 193
  7. 2017Formal Guarantees on the Robustness of a Classifier against Adversarial Manipulationcited by 182
  8. 2020Randomized Smoothing of All Shapes and Sizescited by 146
  9. 2021Advances in adversarial attacks and defenses in computer vision: A surveycited by 127
  10. 2017An approach to reachability analysis for feed-forward ReLU neural networkscited by 126
  11. 2020MACER: Attack-free and Scalable Robust Training via Maximizing Certified Radiuscited by 114
  12. 2023A Comprehensive Study on Robustness of Image Classification Models: Benchmarking and Rethinkingcited by 85
  13. 2020On Certifying Robustness against Backdoor Attacks via Randomized Smoothingcited by 74
  14. 2020Consistency Regularization for Certified Robustness of Smoothed Classifierscited by 73
  15. 2019Certified Robustness for Top-k Predictions against Adversarial Perturbations via Randomized Smoothingcited by 54
  16. 2021Boosting Randomized Smoothing with Variance Reduced Classifierscited by 47
  17. 2021How to Certify Machine Learning Based Safety-critical Systems? A Systematic Literature Reviewcited by 36
  18. 2020Random Smoothing Might be Unable to Certify ℓ_∞ Robustness for High-Dimensional Imagescited by 35
  19. 2024Revisiting Adversarial Training at Scalecited by 33
  20. 2020Fast Predictive Uncertainty for Classification with Bayesian Deep Networkscited by 31
  21. 2022Double Sampling Randomized Smoothingcited by 22
  22. 2023Incremental Randomized Smoothing Certificationcited by 12
  23. 2021Input-Specific Robustness Certification for Randomized Smoothingcited by 11
  24. 2022Confidence-aware Training of Smoothed Classifiers for Certified Robustnesscited by 9
  25. 2023Hierarchical Randomized Smoothingcited by 9
  26. 2024Treatment of Statistical Estimation Problems in Randomized Smoothing for Adversarial Robustnesscited by 8
  27. 2020Regularized Training and Tight Certification for Randomized Smoothed Classifier with Provable Robustnesscited by 6
  28. 2024Estimating the Robustness Radius for Randomized Smoothing with 100× Sample Efficiencycited by 4
  29. 2024TinyML Security: Exploring Vulnerabilities in Resource-Constrained Machine Learning Systemscited by 3
  30. 2025Approach Towards Semi-Automated Certification for Low Criticality ML-Enabled Airborne Applicationscited by 2
  31. 2025Towards Strong Certified Defense with Universal Asymmetric Randomizationcited by 1

Built on by

Not cited yet.