Formal Verification of Piece-Wise Linear Feed-Forward Neural Networks
Not on the map. Why?
Abstract (arXiv)
We present an approach for the verification of feed-forward neural networks in which all nodes have a piece-wise linear activation function. Such networks are often used in deep learning and have been shown to be hard to verify for modern satisfiability modulo theory (SMT) and integer linear programming (ILP) solvers. The starting point of our approach is the addition of a global linear approximation of the overall network behavior to the verification problem that helps with SMT-like reasoning over the network behavior. We present a specialized verification algorithm that employs this approximation in a search process in which it infers additional node phases for the non-linear nodes in the network from partial node phase assignments, similar to unit propagation in classical SAT solving. We also show how to infer additional conflict clauses and safe node fixtures from the results of the analysis steps performed during the search. The resulting approach is evaluated on collision avoidance and handwritten digit recognition case studies.
Key facts. Cited by 241 papers in the map (data through 7 Oct 2026). First posted on arXiv 3 May 2017.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 56; 2022: 61; 2023: 37; 2024: 35; 2025: 31; 2026: 21.
241 papers.
Sort:
By area:
- 2021Beta-CROWN: Efficient Bound Propagation with Per-neuron Split Constraints for Complete and Incomplete Neural Network Robustness Verificationcited by 224
- 2021Orthogonalizing Convolutional Layers with the Cayley Transformcited by 105
- 2022General Cutting Planes for Bound-Propagation-Based Neural Network Verificationcited by 102
- 2022Complete Verification via Multi-Neuron Relaxation Guided Branch-and-Boundcited by 92
- 2021PRIMA: General and Precise Neural Network Certification via Scalable Convex Hull Approximationscited by 77
- 2023First Three Years of the International Verification of Neural Networks Competition (VNN-COMP)cited by 58
- 2021Boosting Randomized Smoothing with Variance Reduced Classifierscited by 47
- 2021Improved Branch and Bound for Neural Network Verification via Lagrangian Decompositioncited by 44
- 2021Certified Patch Robustness via Smoothed Vision Transformerscited by 44
- 2022Causality-based Neural Network Repaircited by 44
- 2021CROP: Certifying Robust Policies for Reinforcement Learning through Functional Smoothingcited by 41
- 2021Reachability Analysis of Neural Feedback Loopscited by 41
38 more
- 2022Adversarial Robustness of Deep Neural Networks: A Survey from a Formal Verification Perspectivecited by 41
- 2021Partition-based formulations for mixed-integer optimization of trained ReLU neural networkscited by 39
- 2021Provable Repair of Deep Neural Networkscited by 39
- 2022How to Robustify Black-Box ML Models? A Zeroth-Order Optimization Perspectivecited by 39
- 2023When Deep Learning Meets Polyhedral Theory: A Surveycited by 39
- 2022Don't Lie to Me! Robust and Efficient Explainability with Verified Perturbation Analysiscited by 38
- 2021Scalable Certified Segmentation via Randomized Smoothingcited by 35
- 2021A Review of Formal Methods applied to Machine Learningcited by 33
- 2022Verifying Learning-Based Robotic Navigation Systemscited by 33
- 2024Scalable Neural Network Verification with Branch-and-bound Inferred Cutting Planescited by 33
- 2022VeriX: Towards Verified Explainability of Deep Neural Networkscited by 30
- 2021Low Curvature Activations Reduce Overfitting in Adversarial Trainingcited by 29
- 2024HardNet: Hard-Constrained Neural Networks with Universal Approximation Guaranteescited by 29
- 2023Provably Bounding Neural Network Preimagescited by 28
- 2021Reachability Is NP-Complete Even for the Simplest Neural Networkscited by 27
- 2021Bayesian Inference with Certifiable Adversarial Robustnesscited by 26
- 2022An Abstraction-Refinement Approach to Verifying Convolutional Neural Networkscited by 24
- 2022Efficient Neural Network Analysis with Sum-of-Infeasibilitiescited by 24
- 2022Open- and Closed-Loop Neural Network Verification using Polynomial Zonotopescited by 24
- 2021DNNV: A Framework for Deep Neural Network Verificationcited by 23
- 2022Individual Fairness Guarantees for Neural Networkscited by 23
- 2023Expressive Losses for Verified Robustness via Convex Combinationscited by 23
- 2023A DPLL(T) Framework for Verifying Deep Neural Networkscited by 23
- 2022Neural Network Verification with Proof Productioncited by 22
- 2022Fairify: Fairness Verification of Neural Networkscited by 22
- 2021Safe Control with Neural Network Dynamic Modelscited by 21
- 2022IBP Regularization for Verified Adversarial Robustness via Branch-and-Boundcited by 21
- 2021Pruning and Slicing Neural Networks using Formal Verificationcited by 20
- 2021Neural Network Repair with Reachability Analysiscited by 19
- 2022NNLander-VeriF: A Neural Network Formal Verification Framework for Vision-Based Autonomous Aircraft Landingcited by 19
- 2023Convex Bounds on the Softmax Function with Applications to Robustness Verificationcited by 19
- 2021Make Sure You're Unsure: A Framework for Verifying Probabilistic Specificationscited by 18
- 2021CC-Cert: A Probabilistic Approach to Certify General Robustness of Neural Networkscited by 18
- 2021Latent Space Smoothing for Individually Fair Representationscited by 18
- 2022Verification-Aided Deep Ensemble Selectioncited by 18
- 2022Scalable Verification of GNN-based Job Schedulerscited by 18
- 2021BDD4BNN: A BDD-based Quantitative Analysis Framework for Binarized Neural Networkscited by 17
- 2021DeformRS: Certifying Input Deformations with Randomized Smoothingcited by 17
50 most cited of 241 All 241 (JSON)
- 2026Branch and Bound for Relational Verification of Neural Networks13 Aug 2026
- 2026Mining Verdict Boundaries for Neural Network Verification31 Jul 2026
- 2026Random Parameter Noise Does Not Make Exact ReLU Verification Easy15 Jul 2026
- 2026Fast SDP certification of neural networks : towards large multi-class datasets3 Jul 2026
- 2026Improving Certified Robustness via Adversarial Distillation30 Jun 2026
- 2026veriFIRE: an Industrial Case Study in Verifying Consistency Properties for a DNN-Based Wildfire Detection System2 Jun 2026
- 2026Neural Network Verification using Partial Multi-Neuron Relaxation28 May 2026
- 2026The Cost of Relaxation: Evaluating the Error in Convex Neural Network Verification20 Apr 2026
- 2026Algebraic Invariants of Lightning Self-Attention17 Apr 2026
- 2026Interval Certifications for Multilayered Perceptrons via Lattice Traversal9 Apr 2026
- 2026Towards Verified and Targeted Explanations through Formal Methods5 Apr 2026
- 2026Certified and accurate computation of function space norms of deep neural networks6 Mar 2026
38 more
- 2026IoUCert: Robustness Verification for Anchor-based Object Detectors3 Mar 2026
- 2026Provably Explaining Neural Additive Models19 Feb 2026
- 2026Exact Certification of Data-Poisoning Attacks Using Mixed-Integer Programming18 Feb 2026
- 2026Formal Mechanistic Interpretability: Automated Circuit Discovery with Provable Guarantees18 Feb 2026
- 2026Talking with Verifiers: Automatic Specification Generation for Neural Network Verification13 Feb 2026
- 2026Optimized Piecewise Affine Abstractions of Neural Networks with Learnable Activation Functions6 Feb 2026
- 2026Learning Better Certified Models from Empirically-Robust Teachers2 Feb 2026
- 2026SETA: Statistical Fault Attribution for Compound AI Systems27 Jan 2026
- 2026Robust Privacy: Inference-Stage Privacy through Certified Robustness24 Jan 2026
- 2025Bridging Efficiency and Safety: Formal Verification of Neural Networks with Early Exits23 Dec 2025
- 2025Clip-and-Verify: Linear Constraint-Driven Domain Clipping for Accelerating Neural Network Verification11 Dec 2025
- 2025Formalized Hopfield Networks and Boltzmann Machines8 Dec 2025
- 2025BEAVER: An Efficient Deterministic LLM Verifier5 Dec 2025
- 2025Faster Verified Explanations for Neural Networks28 Nov 2025
- 2025Proof Minimization in Neural Network Verification11 Nov 2025
- 2025Formal Reasoning About Confidence and Automated Verification of Neural Networks10 Nov 2025
- 2025Towards Strong Certified Defense with Universal Asymmetric Randomization22 Oct 2025
- 2025Just-In-Time Piecewise-Linear Semantics for ReLU-type Networks20 Oct 2025
- 2025Adversarial Attacks Leverage Interference Between Features in Superposition13 Oct 2025
- 2025Tight Robustness Certificates and Wasserstein Distributional Attacks for Deep Neural Networks11 Oct 2025
- 2025Influence-Guided Concolic Testing of Transformer Robustness28 Sep 2025
- 2025Bounded PCTL Model Checking of Large Language Model Outputs23 Sep 2025
- 2025Distributionally Robust Safety Verification of Neural Networks via Worst-Case CVaR22 Sep 2025
- 2025SurveyGen-I: Consistent Scientific Survey Generation with Evolving Plans and Memory-Guided Writing20 Aug 2025
- 2025Solution-aware vs global ReLU selection: partial MILP strikes back for DNN verification31 Jul 2025
- 2025NCCR: to Evaluate the Robustness of Neural Networks and Adversarial Examples29 Jul 2025
- 2025Efficient Neural Network Verification via Order Leading Exploration of Branch-and-Bound Trees23 Jul 2025
- 2025Probabilistically Tightened Linear Relaxation-based Perturbation Analysis for Neural Network Verification7 Jul 2025
- 2025Interior-Point Vanishing Problem in Semidefinite Relaxations for Neural Network Verification12 Jun 2025
- 2025Abstraction-Based Proof Production in Formal Verification of Neural Networks11 Jun 2025
- 2025No Soundness in the Real World: On the Challenges of the Verification of Deployed Neural Networks1 Jun 2025
- 2025Enhancing Certified Robustness via Block Reflector Orthogonal Layers and Logit Annealing Loss21 May 2025
- 2025Adaptive Branch-and-Bound Tree Exploration for Neural Network Verification2 May 2025
- 2025Support is All You Need for Certified VAE Training16 Apr 2025
- 2025Adversarial Examples in Environment Perception for Automated Driving (Review)11 Apr 2025
- 2025PICID: Proof-Driven Clause Learning in Neural Network Verification15 Mar 2025
- 2025LTL Verification of Memoryful Neural Agents4 Mar 2025
- 2025Learning Vision-Based Neural Network Controllers with Semi-Probabilistic Safety Guarantees28 Feb 2025
50 newest of 241 All 241 (JSON)
- 2022Causality-based Neural Network Repaircited by 44
- 2026Exact Certification of Data-Poisoning Attacks Using Mixed-Integer Programmingcited by 3
- 2026Exact Certification of Data-Poisoning Attacks Using Mixed-Integer Programming18 Feb 2026
- 2022Causality-based Neural Network Repair20 Apr 2022
- 2021Beta-CROWN: Efficient Bound Propagation with Per-neuron Split Constraints for Complete and Incomplete Neural Network Robustness Verificationcited by 224
- 2021Orthogonalizing Convolutional Layers with the Cayley Transformcited by 105
- 2022General Cutting Planes for Bound-Propagation-Based Neural Network Verificationcited by 102
- 2022Complete Verification via Multi-Neuron Relaxation Guided Branch-and-Boundcited by 92
- 2021PRIMA: General and Precise Neural Network Certification via Scalable Convex Hull Approximationscited by 77
- 2023First Three Years of the International Verification of Neural Networks Competition (VNN-COMP)cited by 58
- 2021Boosting Randomized Smoothing with Variance Reduced Classifierscited by 47
- 2021Improved Branch and Bound for Neural Network Verification via Lagrangian Decompositioncited by 44
- 2021Certified Patch Robustness via Smoothed Vision Transformerscited by 44
- 2021CROP: Certifying Robust Policies for Reinforcement Learning through Functional Smoothingcited by 41
- 2021Reachability Analysis of Neural Feedback Loopscited by 41
- 2022Adversarial Robustness of Deep Neural Networks: A Survey from a Formal Verification Perspectivecited by 41
12 most cited of 237 All 237 (JSON)
- 2026Branch and Bound for Relational Verification of Neural Networks13 Aug 2026
- 2026Mining Verdict Boundaries for Neural Network Verification31 Jul 2026
- 2026Random Parameter Noise Does Not Make Exact ReLU Verification Easy15 Jul 2026
- 2026Fast SDP certification of neural networks : towards large multi-class datasets3 Jul 2026
- 2026Improving Certified Robustness via Adversarial Distillation30 Jun 2026
- 2026veriFIRE: an Industrial Case Study in Verifying Consistency Properties for a DNN-Based Wildfire Detection System2 Jun 2026
- 2026Neural Network Verification using Partial Multi-Neuron Relaxation28 May 2026
- 2026The Cost of Relaxation: Evaluating the Error in Convex Neural Network Verification20 Apr 2026
- 2026Algebraic Invariants of Lightning Self-Attention17 Apr 2026
- 2026Interval Certifications for Multilayered Perceptrons via Lattice Traversal9 Apr 2026
- 2026Towards Verified and Targeted Explanations through Formal Methods5 Apr 2026
- 2026Certified and accurate computation of function space norms of deep neural networks6 Mar 2026
12 newest of 237 All 237 (JSON)