Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Certified Defenses for Adversarial Patches   Adversarial patch attacks are among one of the most practical threat models
against real-world computer vision systems. This paper studies certified and
empirical defenses against patch attacks. We begin with a set of experiments
showing that most existing defenses, which work by pre-processing input images
to mitigate adversarial patches, are easily broken by simple white-box
adversaries. Motivated by this finding, we propose the first certified defense
against patch attacks, and propose faster methods for its training.
Furthermore, we experiment with different patch shapes for testing, obtaining
surprisingly good robustness transfer across shapes, and present preliminary
results on certified defense against sparse attacks. Our complete
implementation can be found on:
https://github.com/Ping-C/certifiedpatchdefense.

13
The categories of this paper are: quant-ph
3
The categories of this paper are: physics
26
The categories of this paper are: bayes-an
12
The categories of this paper are: nucl-th
2
The categories of this paper are: math
24
The categories of this paper are: dg-ga
30
The categories of this paper are: q-alg
29
The categories of this paper are: funct-an
20
The categories of this paper are: acc-phys
4
The categories of this paper are: cond-mat
14
The categories of this paper are: math-ph
28
The categories of this paper are: alg-geom
32
The categories of this paper are: atom-ph
9
The categories of this paper are: nlin
25
The categories of this paper are: patt-sol
6
The categories of this paper are: astro-ph