{"id":"W4283728566","doi":"10.1007/s11432-021-3457-7","title":"Certified defense against patch attacks via mask-guided randomized smoothing","year":2022,"lang":"en","type":"article","venue":"Science China Information Sciences","topic":"Adversarial Robustness in Machine Learning","field":"Computer Science","cited_by":4,"is_retracted":false,"has_abstract":false,"ca_institutions":"Simon Fraser University","funders":"","keywords":"Certification; Computer science; Certificate; Smoothing; Artificial intelligence; Gaussian; Computer security; Machine learning; Computer vision; Algorithm","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["sts","scholarly_communication","open_science"],"consensus_categories":["scholarly_communication"],"category_scores_codex":[0.01743996,0.0002856387,0.0004353048,0.001156942,0.006297022,0.001862432,0.005565343,0.00004622571,0.0001055311],"category_scores_gemma":[0.002089812,0.0002391181,0.0001742616,0.006291971,0.002066572,0.013831,0.002521418,0.0005839112,0.0001014898],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.000340045,"about_ca_system_score_gemma":0.0009414168,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0003218763,"about_ca_topic_score_gemma":0.00000358302,"domain_scores_codex":[0.9936075,0.0004934598,0.001014377,0.0006871792,0.003304227,0.0008933228],"domain_scores_gemma":[0.9975157,0.0003947204,0.0008532279,0.0007672983,0.0002362313,0.0002328544],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0002861829,0.00003759262,0.0006950113,0.00002039529,0.00001110654,0.000007742043,0.03018854,0.8064056,0.0005699406,0.08476662,0.0006479268,0.07636332],"study_design_scores_gemma":[0.006346308,0.00006034522,0.0004465984,0.0000111412,0.000005175992,0.00004893109,0.0009664047,0.9798595,0.0003333397,0.009339552,0.002198895,0.0003838348],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.09587547,0.00003404306,0.8599709,0.003287486,0.00260118,0.0006905876,0.000003401227,0.0004855008,0.03705149],"genre_scores_gemma":[0.9525233,0.000007727964,0.04534747,0.001883952,0.00004580263,0.00009573279,0.000005852922,0.000006019056,0.00008414697],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.8566478,"threshold_uncertainty_score":0.999962,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01983673073073933,"score_gpt":0.2840578002274118,"score_spread":0.2642210694966725,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}