mlsanityData to 14 Oct 2026

Halt Fast! Early Stopping for Certified Robustness

arXiv 2606.27694 ↗First posted 26 Jun 2026cs.LG cs.AI cs.CRcited by 0

Not on the map. Why?

Abstract (arXiv)

Randomized Smoothing (RS) provides rigorous robustness guarantees for neural networks without architectural constraints, yet its adoption is limited by extreme computational costs. Standard RS requires tens of thousands of model evaluations per input and forces practitioners to commit to fixed sample sizes a priori. In this work, we present a novel meta-learning framework for anytime-valid certified robustness that adaptively deploys computational resources. By using a lightweight meta-learner to predict image-specific priors for a sequential E-process, we achieve a 20-fold reduction in sample complexity compared to traditional methods while maintaining rigorous statistical guarantees. Beyond raw efficiency, we demonstrate how anytime-validity enables adaptively allocating compute based upon application-specific risk thresholds, a form of resource triage impossible under classic certification frameworks. That this is achievable while also providing similar certification performance demonstrates that our approach provides a pathway for real-time, safety-critical certification deployments.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 28 of its 49 references that are in the map. First posted on arXiv 26 Jun 2026.

Builds on

28 of 49 references.

References · 28

  1. 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,305
  2. 2014ImageNet Large Scale Visual Recognition Challengecited by 8,498
  3. 2014Explaining and Harnessing Adversarial Examplescited by 7,364
  4. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
  5. 2013Intriguing properties of neural networkscited by 5,155
  6. 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,340
  7. 2018Certified Robustness to Adversarial Examples with Differential Privacycited by 468
  8. 2019Provably Robust Deep Learning via Adversarially Trained Smoothed Classifierscited by 330
  9. 2018Towards Fast Computation of Certified Robustness for ReLU Networkscited by 255
  10. 2018Time-uniform, nonparametric, nonasymptotic confidence sequencescited by 229
  11. 2021Beta-CROWN: Efficient Bound Propagation with Per-neuron Split Constraints for Complete and Incomplete Neural Network Robustness Verificationcited by 228
  12. 2018Lipschitz-Margin Training: Scalable Certification of Perturbation Invariance for Deep Neural Networkscited by 195
16 more
  1. 2017Formal Guarantees on the Robustness of a Classifier against Adversarial Manipulationcited by 185
  2. 2018Certified Adversarial Robustness with Additive Noisecited by 180
  3. 2020Estimating means of bounded random variables by bettingcited by 169
  4. 2022Game-theoretic statistics and safe anytime-valid inferencecited by 155
  5. 2019A Convex Relaxation Barrier to Tight Robustness Verification of Neural Networkscited by 125
  6. 2020MACER: Attack-free and Scalable Robust Training via Maximizing Certified Radiuscited by 114
  7. 2021Globally-Robust Neural Networkscited by 108
  8. 2019Safe Testingcited by 101
  9. 2020Certified Defenses for Adversarial Patchescited by 101
  10. 2020(De)Randomized Smoothing for Certifiable Defense against Patch Attackscited by 98
  11. 2021Boosting Randomized Smoothing with Variance Reduced Classifierscited by 47
  12. 2021Towards Evaluating and Training Verifiably Robust Neural Networkscited by 15
  13. 2022Double Bubble, Toil and Trouble: Enhancing Certified Robustness through Transitivitycited by 15
  14. 2021Input-Specific Robustness Certification for Randomized Smoothingcited by 11
  15. 2024Treatment of Statistical Estimation Problems in Randomized Smoothing for Adversarial Robustnesscited by 8
  16. 2025Position: Certified Robustness Does Not (Yet) Imply Model Securitycited by 4

Built on by

Not cited yet.