Revisiting Certified Defense with Differential Privacy on Vision Transformers

arXiv:2609.31310 · cs.CR, stat.AP · Submitted 2026-09-25 · Read on arXiv

cs.CR, stat.AP

Submitted: 2026-09-25

Updated: 2026-09-25

Terminology

Accuracy — 44× in this paper · explained in 1 episode
Robustness — 30× in this paper · explained in 5 episodes
Differential Privacy — 18× in this paper · explained in 4 episodes
Transformer — 16× in this paper · explained in 2 episodes
Adversarial Training — 14× in this paper · explained in 1 episode
Calibration — 12× in this paper · explained in 7 episodes
Adversarial Robustness — 6× in this paper · explained in 3 episodes
Fine-Tuning — 5× in this paper · explained in 5 episodes
Ablation — 4× in this paper · explained in 1 episode
Adversarial Examples — 4× in this paper · explained in 2 episodes
Decoupling — 3× in this paper · explained in 2 episodes
Embeddings — 2× in this paper · explained in 2 episodes
Transformer Architecture — 2× in this paper · explained in 2 episodes
Adam — 1× in this paper · explained in 2 episodes
Adversarial Attacks — 1× in this paper · explained in 1 episode
Adversarial Vulnerabilities — 1× in this paper · explained in 1 episode
Convolutional Neural Networks (CNNs) — 1× in this paper · explained in 2 episodes
Differentially Private — 1× in this paper · explained in 3 episodes
Reinforcement Learning — 1× in this paper · explained in 4 episodes
Scaling Laws — 1× in this paper · explained in 4 episodes
alpha — 1× in this paper · explained in 1 episode