On the Tightness of Semidefinite Relaxations for Certifying Robustness to Adversarial Examples

If the relaxation is loose, however, then the resulting certificate can be too conservative to be practically useful. Recently, a less conservative robustness certificate was proposed, based on a semidefinite programming (SDP) relaxation of the ReLU activation function.