Randomized Smoothing Threshold Certificate
Derive an exact smoothing certificate from Gaussian mass around a one-dimensional threshold.
Free theory articleDerive an exact smoothing certificate from Gaussian mass around a one-dimensional threshold.
Concept & interpretation
Randomized smoothing turns an arbitrary base classifier into one with a mathematically guaranteed certified radius against adversarial perturbations. By injecting Gaussian noise to the input and voting on the resulting predictions, the smoothed model behaves predictably under bounded shifts.
Experiment: Interactive Validation
Use the interactive module to verify the mathematical properties of the smoothing certificate. You can adjust the following controls:
- Set Input x to different values and observe the certified radius matches |x|.
- Adjust Noise sigma and notice how the probabilities change, but the theoretical absolute certified radius for this specific exact-probability linear threshold remains |x|.
- Change Attack delta to values beyond the certified radius (e.g., x=1, δ=-1) and see how it falls outside the strictly certified set.