Efficiently Computing Local Lipschitz Constants of Neural Networks via Bound Propagation
Zhouxing Shi, Yihan Wang, Huan Zhang, J. Zico Kolter, Cho-Jui Hsieh
摘要
Lipschitz constants are connected to many properties of neural networks, such as robustness, fairness, and generalization. Existing methods for computing Lipschitz constants either produce relatively loose upper bounds or are limited to small networks. In this paper, we develop an efficient framework for computing the local Lipschitz constant of a neural network by tightly upper bounding the norm of Clarke Jacobian via linear bound propagation. We formulate the computation of local Lipschitz constants with a linear bound propagation process on a high-order backward graph induced by the chain rule of Clarke Jacobian. To enable linear bound propagation, we derive tight linear relaxations for specific nonlinearities in Clarke Jacobian. This formulate unifies existing ad-hoc approaches such as RecurJac, which can be seen as a special case of ours with weaker relaxations. The bound propagation framework also allows us to easily borrow the popular Branch-and-Bound (BaB) approach from neural network verification to further tighten Lipschitz constants. Experiments show that on tiny models, our method produces comparable bounds compared to exact methods that cannot scale to slightly larger models; on larger models, our method efficiently produces tighter results than existing relaxed or naive methods, and our method scales to much larger practical models that previous works could not handle. We also demonstrate an application on provable monotonicity analysis. Code is available at https://github.com/shizhouxing/Local-Lipschitz-Constants.
问问这篇 Paper
智能体会读完全文。
Lune 把这篇 Paper 索引到了每一个公式,引用它的顶会 Paper 也一样。你提问,回答直接引用原文。
引用它的顶会 Paper21
- Rethinking Lipschitz Neural Networks and Certified Robustness: A Boolean Function PerspectiveBohang Zhang, Du Jiang, Di He, Liwei WangNeurIPS 2022 · 被引用 88 次
- Certified Robustness via Dynamic Margin Maximization and Improved Lipschitz RegularizationMahyar Fazlyab, Taha Entesari, Aniket Roy, Rama ChellappaNeurIPS 2023 · 被引用 26 次
- Performance Scaling via Optimal Transport: Enabling Data Selection from Partially Revealed SourcesFeiyang Kang, Hoang Anh Just, Anit Kumar Sahu, Ruoxi JiaNeurIPS 2023 · 被引用 21 次
- Efficient Bound of Lipschitz Constant for Convolutional Layers by Gram IterationBlaise Delattre, Quentin Barthélemy, Alexandre Araujo, Alexandre AllauzenICML 2023 · 被引用 20 次
- ECLipsE: Efficient Compositional Lipschitz Constant Estimation for Deep Neural NetworksYuezhu Xu, S. SivaranjaniNeurIPS 2024 · 被引用 19 次
它引用的顶会 Paper22
- Formal Security Analysis of Neural Networks using Symbolic IntervalsShiqi Wang, Kexin Pei, Justin Whitehouse, Junfeng Yang 等USENIX Security 2018 · 被引用 523 次
- Automatic Perturbation Analysis for Scalable Certified Robustness and BeyondKaidi Xu, Zhouxing Shi, Huan Zhang, Yihan Wang 等NeurIPS 2020 · 被引用 415 次
- Towards Stable and Efficient Training of Verifiably Robust Neural NetworksHuan Zhang, Hongge Chen, Chaowei Xiao, Sven Gowal 等ICLR 2020 · 被引用 384 次
- Beta-CROWN: Efficient Bound Propagation with Per-neuron Split Constraints for Neural Network Robustness VerificationShiqi Wang, Huan Zhang, Kaidi Xu, Xue Lin 等NeurIPS 2021 · 被引用 359 次
- Fast and Complete: Enabling Complete Neural Network Verification with Rapid and Massively Parallel Incomplete VerifiersKaidi Xu, Huan Zhang, Shiqi Wang, Yihan Wang 等ICLR 2021 · 被引用 250 次
相关 Paper
- Exactly Computing the Local Lipschitz Constant of ReLU NetworksMatt Jordan, Alexandros G. DimakisNeurIPS 2020 · 被引用 156 次
- Training Certifiably Robust Neural Networks with Efficient Local Lipschitz BoundsYujia Huang, Huan Zhang, Yuanyuan Shi, J. Zico Kolter 等NeurIPS 2021 · 被引用 106 次
- Lipschitz constant estimation of Neural Networks via sparse polynomial optimizationFabian Latorre, Paul Rolland, Volkan CevherICLR 2020 · 被引用 154 次
- Mining Verdict Boundaries for Neural Network VerificationJiawei Ren, Guanqin Zhang, Zhenya Zhang, Yulei SuiFM 2026
- Semialgebraic Optimization for Lipschitz Constants of ReLU NetworksTong Chen, Jean B. Lasserre, Victor Magron, Edouard PauwelsNeurIPS 2020 · 被引用 51 次
