Optimized Symbolic Interval Propagation for Neural Network Verification

12/15/2022
by   Philipp Kern, et al.
0

Neural networks are increasingly applied in safety critical domains, their verification thus is gaining importance. A large class of recent algorithms for proving input-output relations of feed-forward neural networks are based on linear relaxations and symbolic interval propagation. However, due to variable dependencies, the approximations deteriorate with increasing depth of the network. In this paper we present DPNeurifyFV, a novel branch-and-bound solver for ReLU networks with low dimensional input-space that is based on symbolic interval propagation with fresh variables and input-splitting. A new heuristic for choosing the fresh variables allows to ameliorate the dependency problem, while our novel splitting heuristic, in combination with several other improvements, speeds up the branch-and-bound procedure. We evaluate our approach on the airborne collision avoidance networks ACAS Xu and demonstrate runtime improvements compared to state-of-the-art tools.

READ FULL TEXT

page 1

page 2

page 3

page 4

research
06/05/2019

Enhancing Gradient-based Attacks with Symbolic Intervals

Recent breakthroughs in defenses against adversarial examples, like adve...
research
08/16/2022

On Optimizing Back-Substitution Methods for Neural Network Verification

With the increasing application of deep learning in mission-critical sys...
research
04/26/2021

Fast Falsification of Neural Networks using Property Directed Testing

Neural networks are now extensively used in perception, prediction and c...
research
02/19/2019

Fast Neural Network Verification via Shadow Prices

To use neural networks in safety-critical settings it is paramount to pr...
research
06/26/2023

Verification of Neural Network Control Systems using Symbolic Zonotopes and Polynotopes

Verification and safety assessment of neural network controlled systems ...
research
06/09/2021

ZoPE: A Fast Optimizer for ReLU Networks with Low-Dimensional Inputs

Deep neural networks often lack the safety and robustness guarantees nee...
research
06/29/2022

IBP Regularization for Verified Adversarial Robustness via Branch-and-Bound

Recent works have tried to increase the verifiability of adversarially t...

Please sign up or login with your details

Forgot password? Click here to reset