Complete Verification via Multi-Neuron Relaxation Guided Branch-and-Bound
Claudio Ferrari, Mark Niklas Müller, Nikola Jovanovic, Martin T. Vechev
Abstract
State-of-the-art neural network verifiers are fundamentally based on one of two paradigms: either encoding the whole verification problem via tight multi-neuron convex relaxations or applying a Branch-and-Bound (BaB) procedure leveraging imprecise but fast bounding methods on a large number of easier subproblems. The former can capture complex multi-neuron dependencies but sacrifices completeness due to the inherent limitations of convex relaxations. The latter enables complete verification but becomes increasingly ineffective on larger and more challenging networks. In this work, we present a novel complete verifier which combines the strengths of both paradigms: it leverages multi-neuron relaxations to drastically reduce the number of subproblems generated during the BaB process and an efficient GPU-based dual optimizer to solve the remaining ones. An extensive evaluation demonstrates that our verifier achieves a new state-of-the-art on both established benchmarks as well as networks with significantly higher accuracy than previously considered. The latter result (up to 28% certification gains) indicates meaningful progress towards creating verifiers that can handle practically relevant networks.
Ask about this paper
Your agent reads all of it.
Lune indexed this paper to the last equation, along with the top-tier papers that cite it. Ask a question and the answer quotes them.
Your agent calls
Luneget_paper_fulltext
Free to start. No credit card required.
Terminal
Install the CLIlune papers fulltext 5dba6d6d-984a-4de9-a75f-450adf440182Cited by top-tier papers53
- General Cutting Planes for Bound-Propagation-Based Neural Network VerificationHuan Zhang, Shiqi Wang, Kaidi Xu, Linyi Li et al.NeurIPS 2022 · 154 citations
- Scalable Neural Network Verification with Branch-and-bound Inferred Cutting PlanesDuo Zhou, Christopher Brix, Grani A. Hanasusanto, Huan ZhangNeurIPS 2024 · 49 citations
- VeriX: Towards Verified Explainability of Deep Neural NetworksMin Wu, Haoze Wu, Clark W. BarrettNeurIPS 2023 · 39 citations
- Exact Verification of ReLU Neural Control Barrier FunctionsHongchao Zhang, Junlin Wu, Yevgeniy Vorobeychik, Andrew ClarkNeurIPS 2023 · 32 citations
- Expressive Losses for Verified Robustness via Convex CombinationsAlessandro De Palma, Rudy Bunel, Krishnamurthy (Dj) Dvijotham, M. Pawan Kumar et al.ICLR 2024 · 27 citations
Builds on10
- Automatic Perturbation Analysis for Scalable Certified Robustness and BeyondKaidi Xu, Zhouxing Shi, Huan Zhang, Yihan Wang et al.NeurIPS 2020 · 415 citations
- Beta-CROWN: Efficient Bound Propagation with Per-neuron Split Constraints for Neural Network Robustness VerificationShiqi Wang, Huan Zhang, Kaidi Xu, Xue Lin et al.NeurIPS 2021 · 359 citations
- How Does Mixup Help With Robustness and Generalization?Linjun Zhang, Zhun Deng, Kenji Kawaguchi, Amirata Ghorbani et al.ICLR 2021 · 294 citations
- Fast and Complete: Enabling Complete Neural Network Verification with Rapid and Massively Parallel Incomplete VerifiersKaidi Xu, Huan Zhang, Shiqi Wang, Yihan Wang et al.ICLR 2021 · 250 citations
- Guided Adversarial Attack for Evaluating and Enhancing Adversarial DefensesGaurang Sriramanan, Sravanti Addepalli, Arya Baburaj, Venkatesh Babu R.NeurIPS 2020 · 123 citations
Related papers
- Mining Verdict Boundaries for Neural Network VerificationJiawei Ren, Guanqin Zhang, Zhenya Zhang, Yulei SuiFM 2026
- Scaling the Convex Barrier with Active SetsAlessandro De Palma, Harkirat S. Behl, Rudy Bunel, Philip H. S. Torr et al.ICLR 2021 · 66 citations
- Clip-and-Verify: Linear Constraint-Driven Domain Clipping for Accelerating Neural Network VerificationDuo Zhou, Jorge Chavez, Hesun Chen, Grani A. Hanasusanto et al.NeurIPS 2025 · 10 citations
- Sound and Complete Verification of Polynomial NetworksElías Abad-Rocamora, Mehmet Fatih Sahin, Fanghui Liu, Grigorios Chrysos et al.NeurIPS 2022 · 6 citations
- Expressiveness of Multi-Neuron Convex Relaxations in Neural Network CertificationYuhao Mao, Yani Zhang, Martin T. VechevICLR 2026 · 4 citations
