Black

Neural Information Processing Systems 

Randomized classifiers have been shown to provide a promising approach for achieving certified robustness against adversarial attacks in deep learning.