{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,11]],"date-time":"2025-09-11T18:54:48Z","timestamp":1757616888998,"version":"3.44.0"},"publisher-location":"Cham","reference-count":39,"publisher":"Springer Nature Switzerland","isbn-type":[{"type":"print","value":"9783031703706"},{"type":"electronic","value":"9783031703713"}],"license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2024]]},"DOI":"10.1007\/978-3-031-70371-3_8","type":"book-chapter","created":{"date-parts":[[2024,8,31]],"date-time":"2024-08-31T23:31:13Z","timestamp":1725147073000},"page":"126-143","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Adaptive Certified Training: Towards Better Accuracy-Robustness Tradeoffs"],"prefix":"10.1007","author":[{"given":"Zhakshylyk","family":"Nurlanov","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Frank R.","family":"Schmidt","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Florian","family":"Bernard","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2024,8,22]]},"reference":[{"key":"8_CR1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-11479-4","volume-title":"Handbook of Deep Learning Applications","author":"VE Balas","year":"2019","unstructured":"Balas, V.E., Roy, S.S., Sharma, D., Samui, P.: Handbook of Deep Learning Applications, vol. 136. Springer, Heidelberg (2019). https:\/\/doi.org\/10.1007\/978-3-030-11479-4"},{"key":"8_CR2","unstructured":"Balunovi\u0107, M., Vechev, M.: Adversarial training and provable defenses: bridging the gap. In: International Conference on Learning Representations (2020)"},{"key":"8_CR3","volume-title":"Algorithms for Minimization Without Derivatives","author":"RP Brent","year":"1973","unstructured":"Brent, R.P.: Algorithms for Minimization Without Derivatives. Prentice Hall, Englewood Cliffs (1973)"},{"key":"8_CR4","unstructured":"Carlini, N., et al.: On evaluating adversarial robustness. arXiv preprint arXiv:1902.06705 (2019)"},{"key":"8_CR5","unstructured":"Carlini, N., Tramer, F., Dvijotham, K.D., Rice, L., Sun, M., Kolter, J.Z.: (Certified!!) adversarial robustness for free! In: International Conference on Learning Representations (2023)"},{"key":"8_CR6","doi-asserted-by":"crossref","unstructured":"Cheng, M., Lei, Q., Chen, P.Y., Dhillon, I., Hsieh, C.J.: CAT: customized adversarial training for improved robustness. In: International Joint Conferences on Artificial Intelligence, pp. 673\u2013679 (2022)","DOI":"10.24963\/ijcai.2022\/95"},{"key":"8_CR7","unstructured":"Cohen, J., Rosenfeld, E., Kolter, Z.: Certified adversarial robustness via randomized smoothing. In: International Conference on Machine Learning, pp. 1310\u20131320 (2019)"},{"key":"8_CR8","unstructured":"De\u00a0Palma, A., Bunel, R., Dvijotham, K., Kumar, M.P., Stanforth, R.: IBP regularization for verified adversarial robustness via branch-and-bound. In: ICML 2022 Workshop on Formal Verification of Machine Learning (2022)"},{"key":"8_CR9","unstructured":"Ding, G.W., Sharma, Y., Lui, K.Y.C., Huang, R.: MMA training: direct input space margin maximization through adversarial training. In: International Conference on Learning Representations (2020)"},{"key":"8_CR10","unstructured":"Dvijotham, K., Stanforth, R., Gowal, S., Mann, T., Kohli, P.: A dual approach to scalable verification of deep networks. In: Conference on Uncertainty in Artificial Intelligence, pp. 162\u2013171 (2018)"},{"key":"8_CR11","doi-asserted-by":"crossref","unstructured":"Gowal, S., et al.: Scalable verified training for provably robust image classification. In: Proceedings of the IEEE\/CVF International Conference on Computer Vision, pp. 4842\u20134851 (2019)","DOI":"10.1109\/ICCV.2019.00494"},{"key":"8_CR12","unstructured":"Hu, Y., Wu, F., Zhang, H., Zhao, H.: Understanding the impact of adversarial robustness on accuracy disparity. In: International Conference on Machine Learning (2023)"},{"key":"8_CR13","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"97","DOI":"10.1007\/978-3-319-63387-9_5","volume-title":"Computer Aided Verification","author":"G Katz","year":"2017","unstructured":"Katz, G., Barrett, C., Dill, D.L., Julian, K., Kochenderfer, M.J.: Reluplex: an efficient SMT solver for verifying deep neural networks. In: Majumdar, R., Kun\u010dak, V. (eds.) CAV 2017. LNCS, vol. 10426, pp. 97\u2013117. Springer, Cham (2017). https:\/\/doi.org\/10.1007\/978-3-319-63387-9_5"},{"key":"8_CR14","unstructured":"Krizhevsky, A., Hinton, G., et\u00a0al.: Learning multiple layers of features from tiny images (2009)"},{"key":"8_CR15","unstructured":"Le, Y., Yang, X.: Tiny ImageNet visual recognition challenge. CS 231N 7(7), 3 (2015)"},{"issue":"11","key":"8_CR16","doi-asserted-by":"publisher","first-page":"2278","DOI":"10.1109\/5.726791","volume":"86","author":"Y LeCun","year":"1998","unstructured":"LeCun, Y., Bottou, L., Bengio, Y., Haffner, P.: Gradient-based learning applied to document recognition. Proc. IEEE 86(11), 2278\u20132324 (1998)","journal-title":"Proc. IEEE"},{"key":"8_CR17","unstructured":"Madry, A., Makelov, A., Schmidt, L., Tsipras, D., Vladu, A.: Towards deep learning models resistant to adversarial attacks. In: International Conference on Learning Representations (2018)"},{"key":"8_CR18","unstructured":"Mirman, M., Gehr, T., Vechev, M.: Differentiable abstract interpretation for provably robust neural networks. In: International Conference on Machine Learning, pp. 3578\u20133586 (2018)"},{"key":"8_CR19","unstructured":"Mueller, M.N., Balunovic, M., Vechev, M.: Certify or predict: boosting certified robustness with compositional architectures. In: International Conference on Learning Representations (2021)"},{"key":"8_CR20","unstructured":"M\u00fcller, M.N., Brix, C., Bak, S., Liu, C., Johnson, T.T.: The third international verification of neural networks competition (VNN-COMP 2022): summary and results. arXiv preprint arXiv:2212.10376 (2022)"},{"key":"8_CR21","unstructured":"M\u00fcller, M.N., Eckert, F., Fischer, M., Vechev, M.: Certified training: small boxes are all you need. In: International Conference on Learning Representations (2023)"},{"key":"8_CR22","unstructured":"Press, W.H., Teukolsky, S.A., Vetterling, W.T., Flannery, B.P.: Numerical Recipes 3rd Edition: The Art of Scientific Computing. Cambridge University Press, Cambridge (2007)"},{"key":"8_CR23","unstructured":"Raghunathan, A., Steinhardt, J., Liang, P.: Certified defenses against adversarial examples. In: International Conference on Learning Representations (2018)"},{"key":"8_CR24","unstructured":"Salman, H., Li, J., Razenshteyn, I., Zhang, P., Zhang, H., Bubeck, S., Yang, G.: Provably robust deep learning via adversarially trained smoothed classifiers. In: Advances in Neural Information Processing Systems, vol. 32 (2019)"},{"key":"8_CR25","unstructured":"Shi, Z., Wang, Y., Zhang, H., Yi, J., Hsieh, C.J.: Fast certified robust training with short warmup. In: Advances in Neural Information Processing Systems, vol.\u00a034, pp. 18335\u201318349 (2021)"},{"key":"8_CR26","unstructured":"Szegedy, C., et al.: Intriguing properties of neural networks. In: International Conference on Learning Representations (2014)"},{"key":"8_CR27","unstructured":"Tsipras, D., Santurkar, S., Engstrom, L., Turner, A., Madry, A.: Robustness may be at odds with accuracy. In: International Conference on Learning Representations (2019)"},{"key":"8_CR28","unstructured":"Wong, E., Kolter, Z.: Provable defenses against adversarial examples via the convex outer adversarial polytope. In: International Conference on Machine Learning, pp. 5286\u20135295 (2018)"},{"key":"8_CR29","unstructured":"Wong, E., Schmidt, F., Metzen, J.H., Kolter, J.Z.: Scaling provable adversarial defenses. In: Advances in Neural Information Processing Systems (2018)"},{"key":"8_CR30","unstructured":"Xu, K., et al.: Automatic perturbation analysis on general computational graphs. In: International Conference on Machine Learning (2020)"},{"key":"8_CR31","unstructured":"Xu, Y., Sun, Y., Goldblum, M., Goldstein, T., Huang, F.: Exploring and exploiting decision boundary dynamics for adversarial robustness. In: International Conference on Learning Representations (2023)"},{"key":"8_CR32","unstructured":"Zhang, B., Cai, T., Lu, Z., He, D., Wang, L.: Towards certifying l-infinity robustness using neural networks with l-inf-dist neurons. In: International Conference on Machine Learning, pp. 12368\u201312379 (2021)"},{"key":"8_CR33","unstructured":"Zhang, B., Jiang, D., He, D., Wang, L.: Boosting the certified robustness of l-infinity distance nets. In: International Conference on Learning Representations (2022)"},{"key":"8_CR34","unstructured":"Zhang, B., Jiang, D., He, D., Wang, L.: Rethinking Lipschitz neural networks and certified robustness: a Boolean function perspective. In: Advances in Neural Information Processing Systems (2022)"},{"key":"8_CR35","unstructured":"Zhang, H., et al.: Towards stable and efficient training of verifiably robust neural networks. In: International Conference on Learning Representations (2020)"},{"key":"8_CR36","unstructured":"Zhang, H., Weng, T.W., Chen, P.Y., Hsieh, C.J., Daniel, L.: Efficient neural network robustness certification with general activation functions. In: Advances in Neural Information Processing Systems, vol. 31 (2018)"},{"issue":"5","key":"8_CR37","doi-asserted-by":"publisher","first-page":"3443","DOI":"10.1109\/JIOT.2021.3099164","volume":"9","author":"J Zhang","year":"2021","unstructured":"Zhang, J., Lou, Y., Wang, J., Wu, K., Lu, K., Jia, X.: Evaluating adversarial attacks on driving safety in vision-based autonomous vehicles. IEEE Internet Things J. 9(5), 3443\u20133456 (2021)","journal-title":"IEEE Internet Things J."},{"key":"8_CR38","unstructured":"Zhang, J., et al.: Attacks which do not kill training make adversarial learning stronger. In: International Conference on Machine Learning (2020)"},{"key":"8_CR39","unstructured":"Zhang, J., Zhu, J., Niu, G., Han, B., Sugiyama, M., Kankanhalli, M.: Geometry-aware instance-reweighted adversarial training. In: International Conference on Learning Representations (2021)"}],"container-title":["Lecture Notes in Computer Science","Machine Learning and Knowledge Discovery in Databases. Research Track and Demo Track"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-70371-3_8","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,9,5]],"date-time":"2025-09-05T21:09:48Z","timestamp":1757106588000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-70371-3_8"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024]]},"ISBN":["9783031703706","9783031703713"],"references-count":39,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-70371-3_8","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2024]]},"assertion":[{"value":"22 August 2024","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ECML PKDD","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Joint European Conference on Machine Learning and Knowledge Discovery in Databases","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Vilnius","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Lithuania","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2024","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"8 September 2024","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"12 September 2024","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"24","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"ecml2024","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/2024.ecmlpkdd.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}