Lipschitz regularity of deep neural networks: analysis and efficient estimation
Not on the map. Why?
Abstract (arXiv)
Deep neural networks are notorious for being sensitive to small well-chosen perturbations, and estimating the regularity of such architectures is of utmost importance for safe and robust practical applications. In this paper, we investigate one of the key characteristics to assess the regularity of such methods: the Lipschitz constant of deep learning architectures. First, we show that, even for two layer neural networks, the exact computation of this quantity is NP-hard and state-of-art methods may significantly overestimate it. Then, we both extend and improve previous estimation methods by providing AutoLip, the first generic algorithm for upper bounding the Lipschitz constant of any automatically differentiable function. We provide a power method algorithm working with automatic differentiation, allowing efficient computations even on large convolutions. Second, for sequential neural networks, we propose an improved algorithm named SeqLip that takes advantage of the linear computation graph to split the computation per pair of consecutive layers. Third we propose heuristics on SeqLip in order to tackle very large networks. Our experiments show that SeqLip can significantly improve on the existing upper bounds. Finally, we provide an implementation of AutoLip in the PyTorch environment that may be used to better estimate the robustness of a given neural network to small perturbations or regularize it using more precise Lipschitz estimations.
Key facts. Cited by 415 papers in the map (data through 14 Oct 2026). First posted on arXiv 28 May 2018.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 63; 2022: 65; 2023: 63; 2024: 82; 2025: 64; 2026: 78.
415 papers.
Sort:
By area:
- 2021Attention is Not All You Need: Pure Attention Loses Rank Doubly Exponentially with Depthcited by 419
- 2021Machine Unlearning of Features and Labelscited by 229
- 2022Vision GNN: An Image is Worth Graph of Nodescited by 186
- 2021Is Homophily a Necessity for Graph Neural Networks?cited by 182
- 2023Score Approximation, Estimation and Distribution Recovery of Diffusion Models on Low-Dimensional Datacited by 174
- 2021Beyond Periodicity: Towards a Unifying Framework for Activations in Coordinate-MLPscited by 135
- 2022Penalizing Gradient Norm for Efficiently Improving Generalization in Deep Learningcited by 122
- 2022Revisiting Over-smoothing and Over-squashing Using Ollivier-Ricci Curvaturecited by 98
- 2021Proximal Optimal Transport Modeling of Population Dynamicscited by 93
- 2022Learning Smooth Neural Functions via Lipschitz Regularizationcited by 86
- 2023A Survey on Uncertainty Quantification Methods for Deep Learningcited by 81
- 2021Spectral Normalisation for Deep Reinforcement Learning: an Optimisation Perspectivecited by 65
38 more
- 2021Training Certifiably Robust Neural Networks with Efficient Local Lipschitz Boundscited by 65
- 2022Contrastive Adapters for Foundation Model Group Robustnesscited by 62
- 2021A Dynamical System Perspective for Lipschitz Neural Networkscited by 60
- 2022A Policy-Guided Imitation Approach for Offline Reinforcement Learningcited by 59
- 2023Direct Parameterization of Lipschitz-Bounded Deep Networkscited by 51
- 2024CViT: Continuous Vision Transformer for Operator Learningcited by 51
- 2021Semi-Supervised Active Learning with Temporal Output Discrepancycited by 50
- 2022Score-based Generative Modeling Secretly Minimizes the Wasserstein Distancecited by 50
- 2021Recurrent Equilibrium Networks: Flexible Dynamic Models with Guaranteed Stability and Robustnesscited by 45
- 2021Generalization Bounds For Meta-Learning: An Information-Theoretic Analysiscited by 45
- 2022Efficiently Computing Local Lipschitz Constants of Neural Networks via Bound Propagationcited by 45
- 2023RPCANet: Deep Unfolding RPCA Based Infrared Small Target Detectioncited by 44
- 2023How Smooth Is Attention?cited by 44
- 2024INViT: A Generalizable Routing Problem Solver with Invariant Nested View Transformercited by 44
- 2021Solving PDE-constrained Control Problems Using Operator Learningcited by 42
- 2023NECO: NEural Collapse Based Out-of-distribution detectioncited by 42
- 2022Can Push-forward Generative Models Fit Multimodal Distributions?cited by 41
- 2022Tree Mover's Distance: Bridging Graph Metrics and Stability of Graph Neural Networkscited by 41
- 2023Towards Understanding the Generalization of Graph Neural Networkscited by 41
- 2021Lipschitz Normalization for Self-Attention Layers with Application to Graph Neural Networkscited by 39
- 2021Understanding the role of importance weighting for deep learningcited by 39
- 2022Almost-Orthogonal Layers for Efficient General-Purpose Lipschitz Networkscited by 39
- 2022On the Effectiveness of Lipschitz-Driven Rehearsal in Continual Learningcited by 39
- 2023When Deep Learning Meets Polyhedral Theory: A Surveycited by 39
- 2023Learn to Categorize or Categorize to Learn? Self-Coding for Generalized Category Discoverycited by 39
- 2021Learning Frequency Domain Approximation for Binary Neural Networkscited by 38
- 2024Stable Neural Stochastic Differential Equations in Analyzing Irregular Time Series Datacited by 36
- 2024Visual Adversarial Attack on Vision-Language Models for Autonomous Drivingcited by 36
- 2023LipsFormer: Introducing Lipschitz Continuity to Vision Transformerscited by 34
- 2021Local-Global Knowledge Distillation in Heterogeneous Federated Learning with Non-IID Datacited by 31
- 2021Pay attention to your loss: understanding misconceptions about 1-Lipschitz neural networkscited by 30
- 2024Continuous Ensemble Weather Forecasting with Diffusion modelscited by 30
- 2021CLIP: Cheap Lipschitz Training of Neural Networkscited by 29
- 2023Physics-Informed Machine Learning for Modeling and Control of Dynamical Systemscited by 28
- 2022L2C2: Locally Lipschitz Continuous Constraint towards Stable and Smooth Reinforcement Learningcited by 27
- 2023Some Fundamental Aspects about Lipschitz Continuity of Neural Networkscited by 26
- 2021Measuring Generalization with Optimal Transportcited by 25
- 2021Gradient Normalization for Generative Adversarial Networkscited by 25
50 most cited of 415 All 415 (JSON)
- 2026Surface Reconstruction from Range Scans Under Visibility Constraints13 Oct 2026
- 2026Plug-and-Play Methods Provably Converge Even with Improperly Trained Denoisers: Convergence by Architectural Design27 Sep 2026
- 2026Brenier Meets Adversarial Training: Optimal Transport Geometry for Robust Learning25 Sep 2026
- 2026AC Power Flow Contingency Analysis Using a Single Deep Neural Network25 Sep 2026
- 2026Psychoacoustically Aligned Latent Smoothing for Adversarial Robustness of Full-Duplex Speech-to-Speech Dialogue Models23 Sep 2026
- 2026Stability-Aware Imitation Learning from Model Predictive Control for Autonomous Vehicle Lateral Control: Exact Q-Loss and a Novel Training Procedure20 Sep 2026
- 2026General Quantification of Covariate and Concept Shifts10 Sep 2026
- 2026Adversarial Training Without Input Gradients via Low-Rank Householder Expansions27 Aug 2026
- 2026High Probability Derivative Bounds for Random tanh Neural Networks on a Hypercube27 Aug 2026
- 2026Parameterized Complexity of Lp-Lipschitz Constants for Input Convex Neural Networks and Lp-Norm Maximization over Zonotopes25 Aug 2026
- 2026Path-dependent Discrete Amortized Inference9 Aug 2026
- 2026Enhancing VLM Reward Models Through Structure-Aware Fine-Tuning4 Aug 2026
38 more
- 2026Round-Trip Consistency: Bidirectional Diffusion Models Can Predict Their Own Rollout Errors1 Aug 2026
- 2026MOSAIC: Masked Outsourcing of Secure AI Computations31 Jul 2026
- 2026Trainable Nonexpansive Denoisers for Contractive Image Reconstruction25 Jul 2026
- 2026Progression as Latent Drift: Generative Forecasting of Slow-Evolving Pathologies9 Jul 2026
- 2026LiST: Lipschitz Scaling Training for Robust and Calibrated Neural Networks8 Jul 2026
- 2026Stability of Flow Models for Graph Signals8 Jul 2026
- 2026On Adversarial Vulnerability of Vision-Language Models through the Lens of Intermediate Spectral Subspaces8 Jul 2026
- 2026Prior-aware and Context-guided Group Sampling for Active Probabilistic Subsampling8 Jul 2026
- 2026LipSSD: Lipschitz-Constrained Single-Shot Detection for Adversarially Robust Object Detection6 Jul 2026
- 2026Off the Rails: Hijacking the Scoring Head in Generative End-to-End Driving Planners with Safety-Violating Adversarial Perturbations29 Jun 2026
- 2026Convergence of Continual Learning in Homogeneous Deep Networks29 Jun 2026
- 2026Robustness Cannot be Reduced to Regularization: Studying Adversarial Training Beyond the Linear Case19 Jun 2026
- 2026Hybrid Robustness Verification for Spatio-Temporal Neural Networks8 Jun 2026
- 2026LEAF: A Learning-Enabled ADMM Framework for Accelerated Convex Optimization8 Jun 2026
- 2026Understanding the Parameter Space Geometry of Transformers Encoding Boolean Functions7 Jun 2026
- 2026Non-Vacuous Certification of Transport MCMC via Oscillation-Controlled Normalizing Flows31 May 2026
- 2026Beyond Lipschitz: Data-Driven Robustness via Discrete Modulus of Continuity27 May 2026
- 2026Fine-Tuning Without Forgetting via Loss-Adaptive Learning Rates19 May 2026
- 2026Navigating Potholes with Geometry-Aware Sharpness Minimization15 May 2026
- 2026Adaptive Data Harvesting for Efficient Neural Network Learning with Universal Constraints10 May 2026
- 2026Fitting Is Not Enough: Smoothness in Extremely Quantized LLMs9 May 2026
- 2026FlowADMM: Plug-and-play ADMM with Flow-based Renoise-Denoise Priors9 May 2026
- 2026Decentralized Diffusion Policy Learning for Enhanced Exploration in Cooperative Multi-agent Reinforcement Learning8 May 2026
- 2026A Nonlinear Singular Value Theory for Neural Networks7 May 2026
- 2026TIDE: Every Layer Knows the Token Beneath the Context7 May 2026
- 2026On the (In-)Security of the Shuffling Defense in the Transformer Secure Inference6 May 2026
- 2026Beyond Rigid Geometries: The Spline-Pullback Metric for Universal Diffeomorphic SPD Representation Learning6 May 2026
- 2026KANs need curvature: penalties for compositional smoothness4 May 2026
- 2026A Delta-Aware Orchestration Framework for Scalable Multi-Agent Edge Computing22 Apr 2026
- 2026Beyond Coefficients: Forecast-Necessity Testing for Interpretable Causal Discovery in Nonlinear Time-Series Models20 Apr 2026
- 2026On the Robustness of LLM-Based Dense Retrievers: A Systematic Analysis of Generalizability and Stability17 Apr 2026
- 2026Stochasticity in Tokenisation Improves Robustness17 Apr 2026
- 2026Binomial Gradient-Based Meta-Learning for Enhanced Meta-Gradient Estimation14 Apr 2026
- 2026Energy-Efficient Federated Edge Learning For Small-Scale Datasets in Large IoT Networks12 Apr 2026
- 2026Analyzing Symbolic Properties for DRL Agents in Systems and Networking6 Apr 2026
- 2026StableTTA: Improving Vision Model Performance by Training-free Test-Time Adaptation Methods6 Apr 2026
- 2026Learning Families of Fixed-Wing Aircraft Control Policies with Hypernetwork-Conditioned Reinforcement Learning3 Apr 2026
- 2026Lipschitz bounds for integral kernels3 Apr 2026
50 newest of 415 All 415 (JSON)
- 2024INViT: A Generalizable Routing Problem Solver with Invariant Nested View Transformercited by 44
- 2024Gradient-based Regularization for Action Smoothness in Robotic Control with Reinforcement Learningcited by 10
- 2025An Optimisation Framework for Unsupervised Environment Designcited by 10
- 2024Understanding What Affects the Generalization Gap in Visual Reinforcement Learning: Theory and Empirical Evidencecited by 5
- 2024On Robust Reinforcement Learning with Lipschitz-Bounded Policy Networkscited by 4
- 2024Deep deterministic policy gradient with symmetric data augmentation for lateral attitude tracking control of a fixed-wing aircraftcited by 1
- 2024Lipschitz-Regularized Critics Lead to Policy Robustness Against Transition Dynamics Uncertaintycited by 0
- 2025Exploration Behavior of Untrained Policiescited by 0
- 2026Optimizing Reinforcement Learning Training over Digital Twin Enabled Multi-fidelity Networkscited by 0
- 2026Learning Families of Fixed-Wing Aircraft Control Policies with Hypernetwork-Conditioned Reinforcement Learningcited by 0
- 2026Analyzing Symbolic Properties for DRL Agents in Systems and Networkingcited by 0
- 2026Analyzing Symbolic Properties for DRL Agents in Systems and Networking6 Apr 2026
- 2026Learning Families of Fixed-Wing Aircraft Control Policies with Hypernetwork-Conditioned Reinforcement Learning3 Apr 2026
- 2026Optimizing Reinforcement Learning Training over Digital Twin Enabled Multi-fidelity Networks9 Mar 2026
- 2025Exploration Behavior of Untrained Policies27 Jun 2025
- 2025An Optimisation Framework for Unsupervised Environment Design27 May 2025
- 2024Deep deterministic policy gradient with symmetric data augmentation for lateral attitude tracking control of a fixed-wing aircraft13 Jul 2024
- 2024Gradient-based Regularization for Action Smoothness in Robotic Control with Reinforcement Learning5 Jul 2024
- 2024On Robust Reinforcement Learning with Lipschitz-Bounded Policy Networks19 May 2024
- 2024Lipschitz-Regularized Critics Lead to Policy Robustness Against Transition Dynamics Uncertainty22 Apr 2024
- 2024Understanding What Affects the Generalization Gap in Visual Reinforcement Learning: Theory and Empirical Evidence5 Feb 2024
- 2024INViT: A Generalizable Routing Problem Solver with Invariant Nested View Transformer4 Feb 2024
- 2022A Policy-Guided Imitation Approach for Offline Reinforcement Learningcited by 59
- 2021Boosting Offline Reinforcement Learning with Residual Generative Modelingcited by 7
- 2025Offline Goal-Conditioned Reinforcement Learning with Projective Quasimetric Planningcited by 5
- 2024Imitation Learning from Suboptimal Demonstrations via Meta-Learning An Action Rankercited by 1
- 2025Understanding Inverse Reinforcement Learning under Overparameterization: Non-Asymptotic Analysis and Global Optimalitycited by 1
- 2024Inverse Delayed Reinforcement Learningcited by 0
- 2026From Robotics to Sepsis Treatment: Offline RL via Geometric Pessimismcited by 0
- 2026From Robotics to Sepsis Treatment: Offline RL via Geometric Pessimism9 Feb 2026
- 2025Offline Goal-Conditioned Reinforcement Learning with Projective Quasimetric Planning23 Jun 2025
- 2025Understanding Inverse Reinforcement Learning under Overparameterization: Non-Asymptotic Analysis and Global Optimality22 Mar 2025
- 2024Imitation Learning from Suboptimal Demonstrations via Meta-Learning An Action Ranker28 Dec 2024
- 2024Inverse Delayed Reinforcement Learning4 Dec 2024
- 2022A Policy-Guided Imitation Approach for Offline Reinforcement Learning15 Oct 2022
- 2021Boosting Offline Reinforcement Learning with Residual Generative Modeling19 Jun 2021
- 2023Score Approximation, Estimation and Distribution Recovery of Diffusion Models on Low-Dimensional Datacited by 174
- 2022Score-based Generative Modeling Secretly Minimizes the Wasserstein Distancecited by 50
- 2023On diffusion-based generative models and their error bounds: The log-concave case with full convergence estimatescited by 25
- 2026Expert-Data Alignment Governs Generation Quality in Decentralized Diffusion Modelscited by 1
- 2026Decentralized Diffusion Policy Learning for Enhanced Exploration in Cooperative Multi-agent Reinforcement Learningcited by 1
- 2026Round-Trip Consistency: Bidirectional Diffusion Models Can Predict Their Own Rollout Errorscited by 0
- 2026Round-Trip Consistency: Bidirectional Diffusion Models Can Predict Their Own Rollout Errors1 Aug 2026
- 2026Decentralized Diffusion Policy Learning for Enhanced Exploration in Cooperative Multi-agent Reinforcement Learning8 May 2026
- 2026Expert-Data Alignment Governs Generation Quality in Decentralized Diffusion Models2 Feb 2026
- 2023On diffusion-based generative models and their error bounds: The log-concave case with full convergence estimates22 Nov 2023
- 2023Score Approximation, Estimation and Distribution Recovery of Diffusion Models on Low-Dimensional Data14 Feb 2023
- 2022Score-based Generative Modeling Secretly Minimizes the Wasserstein Distance13 Dec 2022
- 2022Prompt Tuning with Soft Context Sharing for Vision-Language Modelscited by 13
- 2025Skip-Vision: Efficient and Scalable Acceleration of Vision-Language Models via Adaptive Token Skippingcited by 12
- 2026Induced Numerical Instability: Hidden Costs in Multimodal Large Language Modelscited by 0
- 2026On Adversarial Vulnerability of Vision-Language Models through the Lens of Intermediate Spectral Subspacescited by 0
- 2026On Adversarial Vulnerability of Vision-Language Models through the Lens of Intermediate Spectral Subspaces8 Jul 2026
- 2026Induced Numerical Instability: Hidden Costs in Multimodal Large Language Models27 Feb 2026
- 2025Skip-Vision: Efficient and Scalable Acceleration of Vision-Language Models via Adaptive Token Skipping26 Mar 2025
- 2022Prompt Tuning with Soft Context Sharing for Vision-Language Models29 Aug 2022
- 2021Machine Unlearning of Features and Labelscited by 229
- 2025Improving Unlearning with Model Updates Probably Aligned with Gradientscited by 1
- 2026Variance-Reduced (varepsilon,δ)-Unlearning using Forget Set Gradientscited by 0
- 2026Psychoacoustically Aligned Latent Smoothing for Adversarial Robustness of Full-Duplex Speech-to-Speech Dialogue Modelscited by 0
- 2026Psychoacoustically Aligned Latent Smoothing for Adversarial Robustness of Full-Duplex Speech-to-Speech Dialogue Models23 Sep 2026
- 2026Variance-Reduced (varepsilon,δ)-Unlearning using Forget Set Gradients16 Feb 2026
- 2025Improving Unlearning with Model Updates Probably Aligned with Gradients4 Nov 2025
- 2021Machine Unlearning of Features and Labels26 Aug 2021
- 2026Off the Rails: Hijacking the Scoring Head in Generative End-to-End Driving Planners with Safety-Violating Adversarial Perturbationscited by 0
- 2026Stability-Aware Imitation Learning from Model Predictive Control for Autonomous Vehicle Lateral Control: Exact Q-Loss and a Novel Training Procedurecited by 0
- 2026Stability-Aware Imitation Learning from Model Predictive Control for Autonomous Vehicle Lateral Control: Exact Q-Loss and a Novel Training Procedure20 Sep 2026
- 2026Off the Rails: Hijacking the Scoring Head in Generative End-to-End Driving Planners with Safety-Violating Adversarial Perturbations29 Jun 2026
- 2021Attention is Not All You Need: Pure Attention Loses Rank Doubly Exponentially with Depthcited by 419
- 2022Vision GNN: An Image is Worth Graph of Nodescited by 186
- 2021Is Homophily a Necessity for Graph Neural Networks?cited by 182
- 2021Beyond Periodicity: Towards a Unifying Framework for Activations in Coordinate-MLPscited by 135
- 2022Penalizing Gradient Norm for Efficiently Improving Generalization in Deep Learningcited by 122
- 2022Revisiting Over-smoothing and Over-squashing Using Ollivier-Ricci Curvaturecited by 98
- 2021Proximal Optimal Transport Modeling of Population Dynamicscited by 93
- 2022Learning Smooth Neural Functions via Lipschitz Regularizationcited by 86
- 2023A Survey on Uncertainty Quantification Methods for Deep Learningcited by 81
- 2021Spectral Normalisation for Deep Reinforcement Learning: an Optimisation Perspectivecited by 65
- 2021Training Certifiably Robust Neural Networks with Efficient Local Lipschitz Boundscited by 65
- 2022Contrastive Adapters for Foundation Model Group Robustnesscited by 62
12 most cited of 374 All 374 (JSON)
- 2026Surface Reconstruction from Range Scans Under Visibility Constraints13 Oct 2026
- 2026Plug-and-Play Methods Provably Converge Even with Improperly Trained Denoisers: Convergence by Architectural Design27 Sep 2026
- 2026Brenier Meets Adversarial Training: Optimal Transport Geometry for Robust Learning25 Sep 2026
- 2026AC Power Flow Contingency Analysis Using a Single Deep Neural Network25 Sep 2026
- 2026General Quantification of Covariate and Concept Shifts10 Sep 2026
- 2026Adversarial Training Without Input Gradients via Low-Rank Householder Expansions27 Aug 2026
- 2026High Probability Derivative Bounds for Random tanh Neural Networks on a Hypercube27 Aug 2026
- 2026Parameterized Complexity of Lp-Lipschitz Constants for Input Convex Neural Networks and Lp-Norm Maximization over Zonotopes25 Aug 2026
- 2026Path-dependent Discrete Amortized Inference9 Aug 2026
- 2026MOSAIC: Masked Outsourcing of Secure AI Computations31 Jul 2026
- 2026Trainable Nonexpansive Denoisers for Contractive Image Reconstruction25 Jul 2026
- 2026Progression as Latent Drift: Generative Forecasting of Slow-Evolving Pathologies9 Jul 2026
12 newest of 374 All 374 (JSON)