Complete Verification via Multi-Neuron Relaxation Guided Branch-and-Bound
Claudio Ferrari, Mark Niklas Müller, Nikola Jovanovic, Martin T. Vechev
摘要
State-of-the-art neural network verifiers are fundamentally based on one of two paradigms: either encoding the whole verification problem via tight multi-neuron convex relaxations or applying a Branch-and-Bound (BaB) procedure leveraging imprecise but fast bounding methods on a large number of easier subproblems. The former can capture complex multi-neuron dependencies but sacrifices completeness due to the inherent limitations of convex relaxations. The latter enables complete verification but becomes increasingly ineffective on larger and more challenging networks. In this work, we present a novel complete verifier which combines the strengths of both paradigms: it leverages multi-neuron relaxations to drastically reduce the number of subproblems generated during the BaB process and an efficient GPU-based dual optimizer to solve the remaining ones. An extensive evaluation demonstrates that our verifier achieves a new state-of-the-art on both established benchmarks as well as networks with significantly higher accuracy than previously considered. The latter result (up to 28% certification gains) indicates meaningful progress towards creating verifiers that can handle practically relevant networks.
问问这篇 Paper
智能体会读完全文。
Lune 把这篇 Paper 索引到了每一个公式,引用它的顶会 Paper 也一样。你提问,回答直接引用原文。
引用它的顶会 Paper53
- General Cutting Planes for Bound-Propagation-Based Neural Network VerificationHuan Zhang, Shiqi Wang, Kaidi Xu, Linyi Li 等NeurIPS 2022 · 被引用 154 次
- Scalable Neural Network Verification with Branch-and-bound Inferred Cutting PlanesDuo Zhou, Christopher Brix, Grani A. Hanasusanto, Huan ZhangNeurIPS 2024 · 被引用 49 次
- VeriX: Towards Verified Explainability of Deep Neural NetworksMin Wu, Haoze Wu, Clark W. BarrettNeurIPS 2023 · 被引用 39 次
- Exact Verification of ReLU Neural Control Barrier FunctionsHongchao Zhang, Junlin Wu, Yevgeniy Vorobeychik, Andrew ClarkNeurIPS 2023 · 被引用 32 次
- Expressive Losses for Verified Robustness via Convex CombinationsAlessandro De Palma, Rudy Bunel, Krishnamurthy (Dj) Dvijotham, M. Pawan Kumar 等ICLR 2024 · 被引用 27 次
它引用的顶会 Paper10
- Automatic Perturbation Analysis for Scalable Certified Robustness and BeyondKaidi Xu, Zhouxing Shi, Huan Zhang, Yihan Wang 等NeurIPS 2020 · 被引用 415 次
- Beta-CROWN: Efficient Bound Propagation with Per-neuron Split Constraints for Neural Network Robustness VerificationShiqi Wang, Huan Zhang, Kaidi Xu, Xue Lin 等NeurIPS 2021 · 被引用 359 次
- How Does Mixup Help With Robustness and Generalization?Linjun Zhang, Zhun Deng, Kenji Kawaguchi, Amirata Ghorbani 等ICLR 2021 · 被引用 294 次
- Fast and Complete: Enabling Complete Neural Network Verification with Rapid and Massively Parallel Incomplete VerifiersKaidi Xu, Huan Zhang, Shiqi Wang, Yihan Wang 等ICLR 2021 · 被引用 250 次
- Guided Adversarial Attack for Evaluating and Enhancing Adversarial DefensesGaurang Sriramanan, Sravanti Addepalli, Arya Baburaj, Venkatesh Babu R.NeurIPS 2020 · 被引用 123 次
相关 Paper
- Mining Verdict Boundaries for Neural Network VerificationJiawei Ren, Guanqin Zhang, Zhenya Zhang, Yulei SuiFM 2026
- Scaling the Convex Barrier with Active SetsAlessandro De Palma, Harkirat S. Behl, Rudy Bunel, Philip H. S. Torr 等ICLR 2021 · 被引用 66 次
- Clip-and-Verify: Linear Constraint-Driven Domain Clipping for Accelerating Neural Network VerificationDuo Zhou, Jorge Chavez, Hesun Chen, Grani A. Hanasusanto 等NeurIPS 2025 · 被引用 10 次
- Sound and Complete Verification of Polynomial NetworksElías Abad-Rocamora, Mehmet Fatih Sahin, Fanghui Liu, Grigorios Chrysos 等NeurIPS 2022 · 被引用 6 次
- Expressiveness of Multi-Neuron Convex Relaxations in Neural Network CertificationYuhao Mao, Yani Zhang, Martin T. VechevICLR 2026 · 被引用 4 次
