Mixed-integer semidefinite program (MISDP)

New method verifies neural network robustness against patch attacks

Researchers have developed a new method for verifying the robustness of neural networks against patch attacks, a type of threat that mimics real-world physical perturbations. Existing methods primarily focus on norm-bal…