Exposing previously undetectable faults in deep neural networks
Isaac Dunn, Hadrien Pouget, Daniel Kroening, Tom Melham
Abstract
Existing methods for testing DNNs solve the oracle problem by constraining the raw features (e.g. image pixel values) to be within a small distance of a dataset example for which the desired DNN output is known. But this limits the kinds of faults these approaches are able to detect. In this paper, we introduce a novel DNN testing method that is able to find faults in DNNs that other methods cannot. The crux is that, by leveraging generative machine learning, we can generate fresh test inputs that vary in their high-level features (for images, these include object shape, location, texture, and colour). We demonstrate that our approach is capable of detecting deliberately injected faults as well as new faults in state-of-the-art DNNs, and that in both cases, existing methods are unable to find these faults. CCS CONCEPTS • Software and its engineering → Software testing and debugging; • Computing methodologies → Neural networks.
Ask about this paper
Your agent reads all of it.
Lune indexed this paper to the last equation, along with the top-tier papers that cite it. Ask a question and the answer quotes them.
Your agent calls
Luneget_paper_fulltext
Free to start. No credit card required.
Terminal
Install the CLIlune papers fulltext 80c8e6d7-4cd5-490e-aa33-4c8081f576cbCited by top-tier papers7
- Partial success in closing the gap between human and machine visionRobert Geirhos, Kantharaju Narayanappa, Benjamin Mitzkus, Tizian Thieringer et al.NeurIPS 2021 · 304 citations
- Free Lunch for Testing: Fuzzing Deep-Learning Libraries from Open SourceAnjiang Wei, Yinlin Deng, Chenyuan Yang, Lingming ZhangICSE 2022 · 91 citations
- When and Why Test Generators for Deep Learning Produce Invalid Inputs: an Empirical StudyVincenzo Riccio, Paolo TonellaICSE 2023 · 29 citations
- Provably Tightest Linear Approximation for Robustness Verification of Sigmoid-like Neural NetworksZhaodi Zhang, Yiting Wu, Si Liu, Jing Liu et al.ASE 2022 · 11 citations
- See the Forest, not Trees: Unveiling and Escaping the Pitfalls of Error-Triggering Inputs in Neural Network TestingYuanyuan Yuan, Shuai Wang, Zhendong SuISSTA 2024 · 1 citation
Builds on11
- Fast is better than free: Revisiting adversarial trainingEric Wong, Leslie Rice, J. Zico KolterICLR 2020 · 1,352 citations
- Do Adversarially Robust ImageNet Models Transfer Better?Hadi Salman, Andrew Ilyas, Logan Engstrom, Ashish Kapoor et al.NeurIPS 2020 · 506 citations
- On the "steerability" of generative adversarial networksAli Jahanian, Lucy Chai, Phillip IsolaICLR 2020 · 421 citations
- Fuzz testing based data augmentation to improve robustness of deep neural networksXiang Gao, Ripon K. Saha, Mukul R. Prasad, Abhik RoychoudhuryICSE 2020 · 116 citations
- Semantic Adversarial Attacks: Parametric Transformations That Fool Deep ClassifiersAmeya Joshi, Amitangshu Mukherjee, Soumik Sarkar, Chinmay HegdeICCV 2019 · 114 citations
Related papers
- Distribution-Aware Testing of Neural Networks Using Generative ModelsSwaroopa Dola, Matthew B. Dwyer, Mary Lou SoffaICSE 2021 · 3 citations
- CIT4DNN: Generating Diverse and Rare Inputs for Neural Networks Using Latent Space Combinatorial TestingSwaroopa Dola, Rory McDaniel, Matthew B. Dwyer, Mary Lou SoffaICSE 2024 · 12 citations
- Efficient Online Testing for DNN-Enabled Systems using Surrogate-Assisted and Many-Objective OptimizationFitash Ul Haq, Donghwan Shin, Lionel C. BriandICSE 2022 · 77 citations
- DeepMetis: Augmenting a Deep Learning Test Set to Increase its Mutation ScoreVincenzo Riccio, Nargiz Humbatova, Gunel Jahangirova, Paolo TonellaASE 2021 · 41 citations
- TensorJSFuzz: Effective Testing of Web-Based Deep Learning Frameworks via Input-Constraint ExtractionLili Quan, Xiaofei Xie, Qianyu Guo, Lingxiao Jiang et al.WWW 2025
