Denoised Smoothing: A Provable Defense for Pretrained Classifiers

Open in new window