We propose a new randomized ensemble technique with a provable security
guarantee against black-box transfer attacks. Our proof constructs a new
security problem for random binary classifiers which is easier to empirically
verify and a reduction from the security of this new model to the security of
the ensemble classifier. We provide experimental evidence of the security of
our random binary classifiers, as well as empirical results of the adversarial
accuracy of the overall ensemble to black-box attacks. Our construction
crucially leverages hidden randomness in the multiclass-to-binary reduction.