@misc{indiciae4c1011e07981, title = {Certified Defense to Image Transformations via Randomized Smoothing}, author = {Marc Fischer and Maximilian Baader and Martin Vechev}, year = {2021}, url = {https://arxiv.org/abs/2002.12463}, note = {Source identifier: 2002.12463} }