Manish Pandey

Does a Hybrid Space-Aware Randomized Defense Improve Empirical and Certified Adversarial Robustness?

We introduce Hybrid Space-aware Stochastic Convolution Attention Noise (HySCAN), a hybrid randomized defense that helps close the long-standing gap between provable robustness under ℓ2 certificates and empirical robustness against strong ℓ∞ attacks, while maintaining strong generalization across div…