FullCert: Deterministic End-to-End Certification for Training and Inference of Neural Networks

FullCert, the first deterministic end-to-end certifier, provides sound guarantees against both training-time poisoning and inference-time evasion attacks on neural networks.