Scalable Certified Segmentation via Randomized Smoothing
Marc Fischer, Maximilian Baader, Martin T. Vechev
Abstract
We present a new certification method for image and point cloud segmentation based on randomized smoothing. The method leverages a novel scalable algorithm for prediction and certification that correctly accounts for multiple testing, necessary for ensuring statistical guarantees. The key to our approach is reliance on established multiple-testing correction mechanisms as well as the ability to abstain from classifying single pixels or points while still robustly segmenting the overall input. Our experimental evaluation on synthetic data and challenging datasets, such as Pascal Context, Cityscapes, and ShapeNet, shows that our algorithm can achieve, for the first time, competitive accuracy and certification guarantees on real-world segmentation tasks. We provide an implementation at https://github.com/ eth-sri/segmentation-smoothing .
Ask about this paper
Your agent reads all of it.
Lune indexed this paper to the last equation, along with the top-tier papers that cite it. Ask a question and the answer quotes them.
Your agent calls
Luneget_paper_fulltext
Free to start. No credit card required.
Terminal
Install the CLIlune papers fulltext 2d448ec1-e27a-4c59-a4ac-4ca8b9616af1Cited by top-tier papers24
- Boosting Randomized Smoothing with Variance Reduced ClassifiersMiklós Z. Horváth, Mark Niklas Müller, Marc Fischer, Martin T. VechevICLR 2022 · 56 citations
- Robustness Certification for Point Cloud ModelsTobias Lorenz, Anian Ruoss, Mislav Balunovic, Gagandeep Singh et al.ICCV 2021 · 29 citations
- Center Smoothing: Certified Robustness for Networks with Structured OutputsAounon Kumar, Tom GoldsteinNeurIPS 2021 · 23 citations
- Unlocking Deterministic Robustness Certification on ImageNetKai Hu, Andy Zou, Zifan Wang, Klas Leino et al.NeurIPS 2023 · 18 citations
- Private and Reliable Neural Network InferenceNikola Jovanovic, Marc Fischer, Samuel Steffen, Martin T. VechevCCS 2022 · 16 citations
Builds on20
- Certified Robustness to Adversarial Examples with Differential PrivacyMathias Lécuyer, Vaggelis Atlidakis, Roxana Geambasu, Daniel Hsu et al.S&P 2019 · 1,022 citations
- AI2: Safety and Robustness Certification of Neural Networks with Abstract InterpretationTimon Gehr, Matthew Mirman, Dana Drachsler-Cohen, Petar Tsankov et al.S&P 2018 · 987 citations
- Randomized Smoothing of All Shapes and SizesGreg Yang, Tony Duan, J. Edward Hu, Hadi Salman et al.ICML 2020 · 237 citations
- MACER: Attack-free and Scalable Robust Training via Maximizing Certified RadiusRuntian Zhai, Chen Dan, Di He, Huan Zhang et al.ICLR 2020 · 195 citations
- Denoised Smoothing: A Provable Defense for Pretrained ClassifiersHadi Salman, Mingjie Sun, Greg Yang, Ashish Kapoor et al.NeurIPS 2020 · 191 citations
Related papers
- PointGuard: Provably Robust 3D Point Cloud ClassificationHongbin Liu, Jinyuan Jia, Neil Zhenqiang GongCVPR 2021
- Localized Randomized Smoothing for Collective Robustness CertificationJan Schuchardt, Tom Wollschläger, Aleksandar Bojchevski, Stephan GünnemannICLR 2023
- Certified Defences Against Adversarial Patch Attacks on Semantic SegmentationMaksym Yatsura, Kaspar Sakmann, N. Grace Hua, Matthias Hein et al.ICLR 2023 · 3 citations
- Improving l1-Certified Robustness via Randomized Smoothing by Leveraging Box ConstraintsVáclav Vorácek, Matthias HeinICML 2023 · 11 citations
- Adaptive Hierarchical Certification for Segmentation using Randomized SmoothingAlaa Anani, Tobias Lorenz, Bernt Schiele, Mario FritzICML 2024 · 3 citations
