mlsanityData to 14 Oct 2026

Clustered Randomized Smoothing for Stochastic Prediction Functions

arXiv 2608.12037 ↗First posted 12 Aug 2026cs.LG cs.SY eess.SYcited by 0

Not on the map. Why?

Abstract (arXiv)

Modern stochastic predictors can model rich, multi-modal outcome distributions. However, this expressive power comes with challenges in ensuring robust predictions - a critical requirement in safety-critical domains. Randomized smoothing is a leading technique for improving robustness, particularly against adversarial perturbations. Yet, in stochastic multi-modal regression settings, randomized smoothing often fails due to mode collapse, yielding averaged predictions that do not reflect the underlying distribution. To address this limitation, we propose clustered α-smoothing, a framework that (1) partitions noisy samples using an arbitrary clustering algorithm, (2) applies α-smoothing locally within each cluster, and (3) combines the resulting predictions into a mixture distribution. By interpreting the smoothing distribution as a mixture of α-smoothers, we derive a lower bound on the probability that the smoothed prediction lies within a union of compact regions corresponding to distinct modes. We empirically evaluate our framework on two benchmarks, demonstrating substantial improvements over state-of-the-art methods. In stochastic trajectory prediction on a driving simulator dataset, our approach achieves, on average, a 27% lower Wasserstein distance to the ground-truth distribution compared to α-smoothing. In quadrotor control, where modes correspond to distinct feasible paths to a target, our method reduces the collision rate by 81% relative to the state-of-the-art randomized smoothing.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 34 of its 49 references that are in the map. First posted on arXiv 12 Aug 2026.

Builds on

34 of 49 references.

References · 34

  1. 2014Explaining and Harnessing Adversarial Examplescited by 7,364
  2. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
  3. 2019nuScenes: A multimodal dataset for autonomous drivingcited by 4,523
  4. 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,340
  5. 2019Normalizing Flows for Probabilistic Modeling and Inferencecited by 1,323
  6. 2019An Introduction to Variational Autoencoderscited by 1,000
  7. 2017Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networkscited by 744
  8. 2018Certified Robustness to Adversarial Examples with Differential Privacycited by 468
  9. 2018Efficient Neural Network Robustness Certification with General Activation Functionscited by 445
  10. 2019Provably Robust Deep Learning via Adversarially Trained Smoothed Classifierscited by 330
  11. 2022Wayformer: Motion Forecasting via Simple & Efficient Attention Networkscited by 280
  12. 2018Certified Adversarial Robustness with Additive Noisecited by 180
22 more
  1. 2017Towards Robust Neural Networks via Random Self-ensemblecited by 159
  2. 2020Randomized Smoothing of All Shapes and Sizescited by 147
  3. 2020NNV: The Neural Network Verification Tool for Deep Neural Networks and Learning-Enabled Cyber-Physical Systemscited by 128
  4. 2024Marabou 2.0: A Versatile Formal Analyzer of Neural Networkscited by 81
  5. 2022Boosting the Transferability of Adversarial Attacks with Reverse Adversarial Perturbationcited by 68
  6. 2019Uncertainty Quantification with Statistical Guarantees in End-to-End Autonomous Driving Controlcited by 61
  7. 2020Detection as Regression: Certified Object Detection by Median Smoothingcited by 47
  8. 2020Data-Dependent Randomized Smoothingcited by 37
  9. 2024SingularTrajectory: Universal Trajectory Predictor Using Diffusion Modelcited by 35
  10. 2021Probabilistic Mixture-of-Experts for Efficient Deep Reinforcement Learningcited by 27
  11. 2019Wasserstein Smoothing: Certified Robustness against Wasserstein Adversarial Attackscited by 25
  12. 2021Intriguing Properties of Input-dependent Randomized Smoothingcited by 24
  13. 2024Diffusion Policy Attacker: Crafting Adversarial Attacks for Diffusion-based Policiescited by 18
  14. 2023Robust Control for Dynamical Systems With Non-Gaussian Noise via Formal Abstractionscited by 16
  15. 2023BNN-DP: Robustness Certification of Bayesian Neural Networks via Dynamic Programmingcited by 8
  16. 2025CluCERT: Certifying LLM Robustness via Clustering-Guided Denoising Smoothingcited by 6
  17. 2023TrajFlow: Learning Distributions over Trajectories for Human Behavior Predictioncited by 4
  18. 2024RS-Reg: Probabilistic and Robust Certified Regression Through Randomized Smoothingcited by 4
  19. 2025Realistic Adversarial Attacks for Robustness Evaluation of Trajectory Prediction Models via Future State Perturbationcited by 3
  20. 2025STEP: Structured Training and Evaluation Platform for benchmarking trajectory prediction modelscited by 2
  21. 2025SmoothGuard: Defending Multimodal Large Language Models with Noise Perturbation and Clustering Aggregationcited by 2
  22. 2026Evaluating randomized smoothing as a defense against adversarial attacks in trajectory predictioncited by 1

Built on by

Not cited yet.