An approach to reachability analysis for feed-forward ReLU neural networks
Not on the map. Why?
Abstract (arXiv)
We study the reachability problem for systems implemented as feed-forward neural networks whose activation function is implemented via ReLU functions. We draw a correspondence between establishing whether some arbitrary output can ever be outputed by a neural system and linear problems characterising a neural system of interest. We present a methodology to solve cases of practical interest by means of a state-of-the-art linear programs solver. We evaluate the technique presented by discussing the experimental results obtained by analysing reachability properties for a number of benchmarks in the literature.
Key facts. Cited by 126 papers in the map (data through 7 Oct 2026). First posted on arXiv 22 Jun 2017.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 30; 2022: 30; 2023: 26; 2024: 16; 2025: 14; 2026: 10.
126 papers.
Sort:
By area:
- 2021Orthogonalizing Convolutional Layers with the Cayley Transformcited by 105
- 2021Certified Patch Robustness via Smoothed Vision Transformerscited by 44
- 2021Reachability Analysis of Neural Feedback Loopscited by 41
- 2022Adversarial Robustness of Deep Neural Networks: A Survey from a Formal Verification Perspectivecited by 41
- 2021Robust Machine Learning Systems: Challenges, Current Trends, Perspectives, and the Road Aheadcited by 40
- 2021Partition-based formulations for mixed-integer optimization of trained ReLU neural networkscited by 39
- 2023When Deep Learning Meets Polyhedral Theory: A Surveycited by 39
- 2021OVERT: An Algorithm for Safety Verification of Neural Network Control Policies for Nonlinear Systemscited by 37
- 2021Multi-Label Classification Neural Networks with Hard Logical Constraintscited by 36
- 2022OMLT: Optimization & Machine Learning Toolkitcited by 34
- 2022Verifying Learning-Based Robotic Navigation Systemscited by 33
- 2021Low Curvature Activations Reduce Overfitting in Adversarial Trainingcited by 29
38 more
- 2022An Abstraction-Refinement Approach to Verifying Convolutional Neural Networkscited by 24
- 2021ANCER: Anisotropic Certification via Sample-wise Volume Maximizationcited by 23
- 2023Expressive Losses for Verified Robustness via Convex Combinationscited by 23
- 2021Safe Control with Neural Network Dynamic Modelscited by 21
- 2021Pruning and Slicing Neural Networks using Formal Verificationcited by 20
- 2021Neural Network Repair with Reachability Analysiscited by 19
- 2023The #DNN-Verification Problem: Counting Unsafe Inputs for Deep Neural Networkscited by 19
- 2022Verification-Aided Deep Ensemble Selectioncited by 18
- 2021BDD4BNN: A BDD-based Quantitative Analysis Framework for Binarized Neural Networkscited by 17
- 2022CertiFair: A Framework for Certified Global Fairness of Neural Networkscited by 17
- 2022Efficient Global Robustness Certification of Neural Networks via Interleaving Twin-Network Encodingcited by 15
- 2024Mitigating the Curse of Dimensionality for Certified Robustness via Dual Randomized Smoothingcited by 15
- 2021Learning Security Classifiers with Verified Global Robustness Propertiescited by 14
- 2021Neural Network Verification in Controlcited by 14
- 2021Minimal Multi-Layer Modifications of Deep Neural Networkscited by 14
- 2024Verification-Guided Shielding for Deep Reinforcement Learningcited by 13
- 2021Infinite Time Horizon Safety of Bayesian Neural Networkscited by 12
- 2022A Unified View of SDP-based Neural Network Verification through Completely Positive Programmingcited by 12
- 2022veriFIRE: Verifying an Industrial, Learning-Based Wildfire Detection Systemcited by 12
- 2023POLAR-Express: Efficient and Precise Formal Reachability Analysis of Neural-Network Controlled Systemscited by 12
- 2022Abstraction and Refinement: Towards Scalable and Exact Verification of Neural Networkscited by 11
- 2023Verifying Generalization in Deep Learningcited by 11
- 2021Efficient Reachability Analysis of Closed-Loop Systems with Neural Network Controllerscited by 10
- 2022CARE: Certifiably Robust Learning with Reasoning via Variational Inferencecited by 10
- 2023Efficient Error Certification for Physics-Informed Neural Networkscited by 10
- 2024A Survey on Verification and Validation, Testing and Evaluations of Neurosymbolic Artificial Intelligencecited by 10
- 2024Verifying message-passing neural networks via topology-based bounds tighteningcited by 10
- 2024Detecting Brittle Decisions for Free: Leveraging Margin Consistency in Deep Robust Classifierscited by 10
- 2022Closing the Loop: A Framework for Trustworthy Machine Learning in Power Systemscited by 9
- 2022QEBVerif: Quantization Error Bound Verification of Neural Networkscited by 9
- 2025Clip-and-Verify: Linear Constraint-Driven Domain Clipping for Accelerating Neural Network Verificationcited by 9
- 2021DeepSplit: Scalable Verification of Deep Neural Networks via Operator Splittingcited by 8
- 2021Fast BATLLNN: Fast Box Analysis of Two-Level Lattice Neural Networkscited by 8
- 2022Tighter Abstract Queries in Neural Network Verificationcited by 8
- 2023Machine Learning with Requirements: a Manifestocited by 8
- 2024Interval Abstractions for Robust Counterfactual Explanationscited by 7
- 2024ModelVerification.jl: a Comprehensive Toolbox for Formally Verifying Deep Neural Networkscited by 7
- 2021Customizable Reference Runtime Monitoring of Neural Networks using Resolution Boxescited by 6
50 most cited of 126 All 126 (JSON)
- 2026Are Safety Guarantees in Neural Networks Safe? How to Compute Trustworthy Robustness Certifications22 Jun 2026
- 2026Hybrid Robustness Verification for Spatio-Temporal Neural Networks8 Jun 2026
- 2026A Survey on the Verification of Reinforcement Learning Policies14 May 2026
- 2026Laplace-Bridged Randomized Smoothing for Fast Certified Robustness27 Apr 2026
- 2026The Cost of Relaxation: Evaluating the Error in Convex Neural Network Verification20 Apr 2026
- 2026Interval Certifications for Multilayered Perceptrons via Lattice Traversal9 Apr 2026
- 2026IoUCert: Robustness Verification for Anchor-based Object Detectors3 Mar 2026
- 2026Exact and Asymptotically Complete Robust Verifications of Neural Networks via Ising Solvers28 Feb 2026
- 2026Optimized Piecewise Affine Abstractions of Neural Networks with Learnable Activation Functions6 Feb 2026
- 2026Learning Better Certified Models from Empirically-Robust Teachers2 Feb 2026
- 2025Clip-and-Verify: Linear Constraint-Driven Domain Clipping for Accelerating Neural Network Verification11 Dec 2025
- 2025Faster Verified Explanations for Neural Networks28 Nov 2025
38 more
- 2025Towards Strong Certified Defense with Universal Asymmetric Randomization22 Oct 2025
- 2025Lipschitz-Based Robustness Certification for Recurrent Neural Networks via Convex Relaxation22 Sep 2025
- 2025Probabilistically Tightened Linear Relaxation-based Perturbation Analysis for Neural Network Verification7 Jul 2025
- 2025Interior-Point Vanishing Problem in Semidefinite Relaxations for Neural Network Verification12 Jun 2025
- 2025Conformal Mixed-Integer Constraint Learning with Feasibility Guarantees4 Jun 2025
- 2025MUC-G4: Minimal Unsat Core-Guided Incremental Verification for Deep Neural Network Compression3 Jun 2025
- 2025Advancing Neural Network Verification through Hierarchical Safety Abstract Interpretation8 May 2025
- 2025Optimization over Trained (and Sparse) Neural Networks: A Surrogate within a Surrogate4 May 2025
- 2025Adversarial Examples in Environment Perception for Automated Driving (Review)11 Apr 2025
- 2025LTL Verification of Memoryful Neural Agents4 Mar 2025
- 2025Verification of Bit-Flip Attacks against Quantized Neural Networks22 Feb 2025
- 2025A Scalable Approach to Probabilistic Neuro-Symbolic Robustness Verification5 Feb 2025
- 2024SAVER: A Toolbox for Sampling-Based, Probabilistic Verification of Neural Networks4 Dec 2024
- 2024On Using Certified Training towards Empirical Robustness2 Oct 2024
- 2024Safe and Reliable Training of Learning-Based Aerospace Controllers9 Jul 2024
- 2024Towards Formal Verification of Deep Neural Networks for Object Detection1 Jul 2024
- 2024ModelVerification.jl: a Comprehensive Toolbox for Formally Verifying Deep Neural Networks30 Jun 2024
- 2024Detecting Brittle Decisions for Free: Leveraging Margin Consistency in Deep Robust Classifiers26 Jun 2024
- 2024Verification-Guided Shielding for Deep Reinforcement Learning10 Jun 2024
- 2024Interval Abstractions for Robust Counterfactual Explanations21 Apr 2024
- 2024Mitigating the Curse of Dimensionality for Certified Robustness via Dual Randomized Smoothing15 Apr 2024
- 2024A Survey of Neural Network Robustness Assessment in Image Recognition12 Apr 2024
- 2024Runtime Monitoring and Fault Detection for Neural Network-Controlled Systems24 Mar 2024
- 2024Verifiable Boosted Tree Ensembles22 Feb 2024
- 2024Verifying message-passing neural networks via topology-based bounds tightening21 Feb 2024
- 2024Feed-Forward Neural Networks as a Mixed-Integer Program9 Feb 2024
- 2024Tight Verification of Probabilistic Robustness in Bayesian Neural Networks21 Jan 2024
- 2024A Survey on Verification and Validation, Testing and Evaluations of Neurosymbolic Artificial Intelligence6 Jan 2024
- 2023Extending Neural Network Verification to a Larger Family of Piece-wise Linear Activation Functions16 Nov 2023
- 2023ABIGX: A Unified Framework for eXplainable Fault Detection and Classification9 Nov 2023
- 2023What, Indeed, is an Achievable Provable Guarantee for Learning-Enabled Safety Critical Systems20 Jul 2023
- 2023Scaling Model Checking for DNN Analysis via State-Space Reduction and Input Segmentation (Extended Version)29 Jun 2023
- 2023Verifying Safety of Neural Networks from Topological Perspectives27 Jun 2023
- 2023DelBugV: Delta-Debugging Neural Network Verifiers29 May 2023
- 2023Expressive Losses for Verified Robustness via Convex Combinations23 May 2023
- 2023DeepBern-Nets: Taming the Complexity of Certifying Neural Networks using Bernstein Polynomial Activations and Precise Bound Propagation22 May 2023
- 2023Efficient Error Certification for Physics-Informed Neural Networks17 May 2023
- 2023Verifiable Learning for Robust Tree Ensembles5 May 2023
50 newest of 126 All 126 (JSON)
- 2021Orthogonalizing Convolutional Layers with the Cayley Transformcited by 105
- 2021Certified Patch Robustness via Smoothed Vision Transformerscited by 44
- 2021Reachability Analysis of Neural Feedback Loopscited by 41
- 2022Adversarial Robustness of Deep Neural Networks: A Survey from a Formal Verification Perspectivecited by 41
- 2021Robust Machine Learning Systems: Challenges, Current Trends, Perspectives, and the Road Aheadcited by 40
- 2021Partition-based formulations for mixed-integer optimization of trained ReLU neural networkscited by 39
- 2023When Deep Learning Meets Polyhedral Theory: A Surveycited by 39
- 2021OVERT: An Algorithm for Safety Verification of Neural Network Control Policies for Nonlinear Systemscited by 37
- 2021Multi-Label Classification Neural Networks with Hard Logical Constraintscited by 36
- 2022OMLT: Optimization & Machine Learning Toolkitcited by 34
- 2022Verifying Learning-Based Robotic Navigation Systemscited by 33
- 2021Low Curvature Activations Reduce Overfitting in Adversarial Trainingcited by 29
12 most cited of 125 All 125 (JSON)
- 2026Are Safety Guarantees in Neural Networks Safe? How to Compute Trustworthy Robustness Certifications22 Jun 2026
- 2026Hybrid Robustness Verification for Spatio-Temporal Neural Networks8 Jun 2026
- 2026A Survey on the Verification of Reinforcement Learning Policies14 May 2026
- 2026Laplace-Bridged Randomized Smoothing for Fast Certified Robustness27 Apr 2026
- 2026The Cost of Relaxation: Evaluating the Error in Convex Neural Network Verification20 Apr 2026
- 2026Interval Certifications for Multilayered Perceptrons via Lattice Traversal9 Apr 2026
- 2026IoUCert: Robustness Verification for Anchor-based Object Detectors3 Mar 2026
- 2026Exact and Asymptotically Complete Robust Verifications of Neural Networks via Ising Solvers28 Feb 2026
- 2026Optimized Piecewise Affine Abstractions of Neural Networks with Learnable Activation Functions6 Feb 2026
- 2026Learning Better Certified Models from Empirically-Robust Teachers2 Feb 2026
- 2025Clip-and-Verify: Linear Constraint-Driven Domain Clipping for Accelerating Neural Network Verification11 Dec 2025
- 2025Faster Verified Explanations for Neural Networks28 Nov 2025
12 newest of 125 All 125 (JSON)