Certified Robustness via Dynamic Margin Maximization and Improved Lipschitz Regularization

To improve the robustness of deep classifiers against adversarial perturbations, many approaches have been proposed, such as designing new architectures with better robustness properties (e.g., Lipschitz-capped networks), or modifying the