Certified Adversarial Robustness with Additive Noise

Although a significant body of work on developing defensive models has been considered, most such models are heuristic and are often vulnerable to adaptive attacks.