Happy to open-source my TensorFlow implementation of Denoised Smoothing. It provides provable robustness for pre-trained image classification models (including cloud APIs) against L2 attacks.

  
      
      github.com
  
  
    

sayakpaul/Denoised-Smoothing-TF 12


  Minimal implementation of Denoised Smoothing (https://arxiv.org/abs/2003.01908) in TensorFlow.