Bayesian inference and Gaussian processes are widely used in applications ranging from robotics and control to biological systems. Many of these applications are safety-critical and require a characterization of the uncertainty associated with the learning model and formal guarantees on its predictions. In this paper we define a robustness measure for Bayesian inference against input perturbations, given by the probability that, for a test point and a compact set in the input space containing the test point, the prediction of the learning model will remain $\delta-$close for all the points in the set, for $\delta>0.$ Such measures can be used to provide formal guarantees for the absence of adversarial examples. By employing the theory of Gaussian processes, we derive tight upper bounds on the resulting robustness by utilising the Borell-TIS inequality, and propose algorithms for their computation. We evaluate our techniques on two examples, a GP regression problem and a fully-connected deep neural network, where we rely on weak convergence to GPs to study adversarial examples on the MNIST dataset.

本文探讨了对于Bayesian推断模型的输入扰动的鲁棒性估计问题，通过使用高斯过程理论并提出算法计算当前模型在输入空间中的紧密强度，并应用于两个例子中：一个GP回归问题和一个全连接深度神经网络来研究MNIST数据集上的对抗性例子。

高斯过程贝叶斯推断的鲁棒性保证