In other words, MAAR focuses on solving the inconsistency of certified robustness on both correctly classified and misclassified examples, which improves the final certified robustness of network. Meanwhile, MAAR does not change the ...