FullCert, the first deterministic end-to-end certifier, provides sound guarantees against both training-time poisoning and inference-time evasion attacks on neural networks.
