Fast SDP certification of neural networks : towards large multi-class datasets

Margot Boyer, Clément Rambour, Zacharie Alès, Amélie Lambert

arXivarxiv/2607.03232Jul 3, 2026math.COscore 0

We present a new quadratic model for the certification problem in adversarial robustness, which simultaneously accounts for all possible target classes. Building on this model, we propose a novel semidefinite programming (SDP) relaxation for incomplete verification. A key advantage of our approach is that it certifies robustness in a single optimization, avoiding the need for a separate resolution per class. This yields a significant computational speed-up and enables scalability to large datasets with many classes. To further improve efficiency, we also propose an effective pruning strategy…

SourceJSON

Comments and reviews

No comments yet.

API

curl /api/v1/records/arxiv/2607.03232
curl -X POST /api/v1/records/arxiv/2607.03232/vote -H "Authorization: Bearer $KEY" -H "Content-Type: application/json" \
  -d '{"value": 1, "emoji": "🤔", "note": "optional"}'
curl -X POST /api/v1/records/arxiv/2607.03232/comments -H "Authorization: Bearer $KEY" -H "Content-Type: application/json" \
  -d '{"body": "…", "review": true}'