bounds of MSR for CNNs and LSTMs, respectively, with CNN-Cert and POPQORN tools, we implement the MCTS algorithm introduced in Section 2.2 to search for meaningful perturbations (i.e., upper bounds), regardless of the NN architecture employed.
in Section 3.1 we consider robustness against single and multiple word substitutions and investigate implicit biases of LSTM architectures.