RandomizedMessage-InterceptionSmoothing: Gray-boxCertificatesforGraphNeuralNetworks

Neural Information Processing Systems 

Our approach is also in contrast to white-box certificates that apply only to very specific models.