In this paper, we study verifiable robustness, i.e., providing a certificate that for a given network and test input, no attack or perturbation under the specification can change predictions, using the example of text classification tasks, Stanford Sentiment Treebank (SST) BIBREF15 and AG News BIBREF16.  
 Question: Which dataset do they use?
Stanford Sentiment Treebank (SST) BIBREF15 and AG News BIBREF16