Supplementary Material: Consistency Regularization for Certified Robustness of Smoothed Classifiers A Details on experimental setups A.1 Training details

Oct-3-2025, 07:13:11 GMT–Neural Information Processing Systems 

We use the notations defined in Section 2 of the main text throughout this section. E.1 SmoothAdv Recall that a smoothed classifier ˆ f is defined from a hard classifier f: R