TensorFuzz: Debugging Neural Networks with Coverage-Guided Fuzzing
Not on the map. Why?
Abstract (arXiv)
Machine learning models are notoriously difficult to interpret and debug. This is particularly true of neural networks. In this work, we introduce automated software testing techniques for neural networks that are well-suited to discovering errors which occur only for rare inputs. Specifically, we develop coverage-guided fuzzing (CGF) methods for neural networks. In CGF, random mutations of inputs to a neural network are guided by a coverage metric toward the goal of satisfying user-specified constraints. We describe how fast approximate nearest neighbor algorithms can provide this coverage metric. We then discuss the application of CGF to the following goals: finding numerical errors in trained neural networks, generating disagreements between neural networks and quantized versions of those networks, and surfacing undesirable behavior in character level language models. Finally, we release an open source library called TensorFuzz that implements the described techniques.
Key facts. Cited by 68 papers in the map (data through 14 Oct 2026). First posted on arXiv 28 Jul 2018.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 16; 2022: 16; 2023: 15; 2024: 7; 2025: 7; 2026: 7.
68 papers.
Sort:
By area:
- 2021Software Engineering for AI-Based Systems: A Surveycited by 69
- 2021Provable Repair of Deep Neural Networkscited by 42
- 2021Inspect, Understand, Overcome: A Survey of Practical Methods for AI Safetycited by 35
- 2021ModelDiff: Testing-Based DNN Similarity Comparison for Model Reuse Detectioncited by 33
- 2021Distribution-Aware Testing of Neural Networks Using Generative Modelscited by 22
- 2022NPC: Neuron Path Coverage via Characterizing Decision Logic of Deep Neural Networkscited by 18
- 2021Understanding Performance Problems in Deep Learning Systemscited by 12
- 2021MDPFuzz: Testing Models Solving Markov Decision Processescited by 12
- 2022QVIP: An ILP-based Formal Verification Approach for Quantized Neural Networkscited by 12
- 2025Neural Network Verification is a Programming Language Challengecited by 12
- 2021Revisiting Neuron Coverage for DNN Testing: A Layer-Wise and Distribution-Aware Criterioncited by 11
- 2022Coverage-Guided Tensor Compiler Fuzzing with Joint IR-Pass Mutationcited by 10
38 more
- 2024A Survey on Verification and Validation, Testing and Evaluations of Neurosymbolic Artificial Intelligencecited by 10
- 2021AequeVox: Automated Fairness Testing of Speech Recognition Systemscited by 9
- 2022QEBVerif: Quantization Error Bound Verification of Neural Networkscited by 9
- 2023Preemptively Pruning Clever-Hans Strategies in Deep Neural Networkscited by 9
- 2026ChainFuzzer: Greybox Fuzzing for Workflow-Level Multi-Tool Vulnerabilities in LLM Agentscited by 9
- 2022Generating and Detecting True Ambiguity: A Forgotten Danger in DNN Supervision Testingcited by 8
- 2023Machine Learning with Requirements: a Manifestocited by 8
- 2024Machine Learning Robustness: A Primercited by 8
- 2024Understanding the Effectiveness of Coverage Criteria for Large Language Models: A Special Angle from Jailbreak Attackscited by 8
- 2021ArchRepair: Block-Level Architecture-Oriented Repairing for Deep Neural Networkscited by 7
- 2021Distribution Awareness for AI System Testingcited by 6
- 2023FedDebug: Systematic Debugging for Federated Learning Applicationscited by 6
- 2021Active Assessment of Prediction Services as Accuracy Surface Over Attribute Combinationscited by 5
- 2022Software Testing for Machine Learningcited by 5
- 2022COMET: Coverage-guided Model Generation For Deep Learning Library Testingcited by 4
- 2023Exploring Adversarial Attacks on Neural Networks: An Explainable Approachcited by 4
- 2023Test & Evaluation Best Practices for Machine Learning-Enabled Systemscited by 4
- 2022Tailored Uncertainty Estimation for Deep Learning Systemscited by 3
- 2022DiverGet: A Search-Based Software Testing Approach for Deep Neural Network Quantization Assessmentcited by 3
- 2023Reliability Assurance for Deep Neural Network Architectures Against Numerical Defectscited by 3
- 2023Semantic-Based Neural Network Repaircited by 3
- 2023NeuroCodeBench: a plain C neural network benchmark for software verificationcited by 3
- 2024Automated Repair of AI Code with Large Language Models and Formal Verificationcited by 3
- 2021ML4ML: Automated Invariance Testing for Machine Learning Modelscited by 2
- 2022Testing Feedforward Neural Networks Training Programscited by 2
- 2023NoiseCAM: Explainable AI for the Boundary Between Noise and Adversarial Attackscited by 2
- 2025Adaptive Branch-and-Bound Tree Exploration for Neural Network Verificationcited by 2
- 2021Defuse: Harnessing Unrestricted Adversarial Examples for Debugging Models Beyond Test Accuracycited by 1
- 2021Provably Valid and Diverse Mutations of Real-World Media Data for DNN Testingcited by 1
- 2021Finding Deviated Behaviors of the Compressed DNN Models for Image Classificationscited by 1
- 2022LaF: Labeling-Free Model Selection for Automated Deep Neural Network Reusingcited by 1
- 2022Is Neuron Coverage Needed to Make Person Detection More Robust?cited by 1
- 2023Feature Map Testing for Deep Neural Networkscited by 1
- 2023DREAM: Debugging and Repairing AutoML Pipelinescited by 1
- 2024Precision Guided Approach to Mitigate Data Poisoning Attacks in Federated Learningcited by 1
- 2026Content Fuzzing for Escaping Information Cocoons on Digital Social Mediacited by 1
- 2022Safe AI -- How is this Possible?cited by 0
- 2022Excitement Surfeited Turns to Errors: Deep Learning Testing Framework Based on Excitable Neuronscited by 0
50 most cited of 68 All 68 (JSON)
- 2026Reliability Testing of Medical Model Performance under Distributed Deployment29 Sep 2026
- 2026Testing Neural Networks via Bayesian-Guided Exploration of Decision Landscapes3 Jun 2026
- 2026Latent Anchor-Driven Test Generation for Deep Neural Networks3 Jun 2026
- 2026Content Fuzzing for Escaping Information Cocoons on Digital Social Media7 Apr 2026
- 2026ChainFuzzer: Greybox Fuzzing for Workflow-Level Multi-Tool Vulnerabilities in LLM Agents13 Mar 2026
- 2026Latent Regularization in Generative Test Input Generation17 Feb 2026
- 2026RACC: Representation-Aware Coverage Criteria for LLM Safety Testing2 Feb 2026
- 2025Influence-Guided Concolic Testing of Transformer Robustness28 Sep 2025
- 2025Toward Reproducible Cross-Backend Compatibility for Deep Learning: A Configuration-First Framework with Three-Tier Verification29 Aug 2025
- 2025Efficient Neural Network Verification via Order Leading Exploration of Branch-and-Bound Trees23 Jul 2025
- 2025Adaptive Branch-and-Bound Tree Exploration for Neural Network Verification2 May 2025
- 2025Towards Assessing Deep Learning Test Input Generators3 Apr 2025
38 more
- 2025Generating Realistic, Diverse, and Fault-Revealing Inputs with Latent Space Interpolation for Testing Deep Neural Networks22 Mar 2025
- 2025Neural Network Verification is a Programming Language Challenge10 Jan 2025
- 2024Understanding the Effectiveness of Coverage Criteria for Large Language Models: A Special Angle from Jailbreak Attacks27 Aug 2024
- 2024Robust Black-box Testing of Deep Neural Networks using Co-Domain Coverage13 Aug 2024
- 2024Automated Repair of AI Code with Large Language Models and Formal Verification14 May 2024
- 2024Quantifying AI Vulnerabilities: A Synthesis of Complexity, Dynamical Systems, and Game Theory7 Apr 2024
- 2024Precision Guided Approach to Mitigate Data Poisoning Attacks in Federated Learning5 Apr 2024
- 2024Machine Learning Robustness: A Primer1 Apr 2024
- 2024A Survey on Verification and Validation, Testing and Evaluations of Neurosymbolic Artificial Intelligence6 Jan 2024
- 2023DREAM: Debugging and Repairing AutoML Pipelines31 Dec 2023
- 2023Good Tools are Half the Work: Tool Usage in Deep Learning Projects29 Oct 2023
- 2023Test & Evaluation Best Practices for Machine Learning-Enabled Systems10 Oct 2023
- 2023NeuroCodeBench: a plain C neural network benchmark for software verification7 Sep 2023
- 2023Feature Map Testing for Deep Neural Networks21 Jul 2023
- 2023QNNRepair: Quantized Neural Network Repair23 Jun 2023
- 2023Semantic-Based Neural Network Repair12 Jun 2023
- 2023Preemptively Pruning Clever-Hans Strategies in Deep Neural Networks12 Apr 2023
- 2023Machine Learning with Requirements: a Manifesto7 Apr 2023
- 2023NoiseCAM: Explainable AI for the Boundary Between Noise and Adversarial Attacks9 Mar 2023
- 2023Exploring Adversarial Attacks on Neural Networks: An Explainable Approach8 Mar 2023
- 2023Testing the Channels of Convolutional Neural Networks6 Mar 2023
- 2023Reliability Assurance for Deep Neural Network Architectures Against Numerical Defects13 Feb 2023
- 2023Understanding the Complexity and Its Impact on Testing in ML-Enabled Systems10 Jan 2023
- 2023FedDebug: Systematic Debugging for Federated Learning Applications9 Jan 2023
- 2022QVIP: An ILP-based Formal Verification Approach for Quantized Neural Networks10 Dec 2022
- 2022QEBVerif: Quantization Error Bound Verification of Neural Networks6 Dec 2022
- 2022Deep Fake Detection, Deterrence and Response: Challenges and Opportunities26 Nov 2022
- 2022Background Invariance Testing According to Semantic Proximity19 Aug 2022
- 2022COMET: Coverage-guided Model Generation For Deep Learning Library Testing2 Aug 2022
- 2022Generating and Detecting True Ambiguity: A Forgotten Danger in DNN Supervision Testing21 Jul 2022
- 2022DiverGet: A Search-Based Software Testing Approach for Deep Neural Network Quantization Assessment13 Jul 2022
- 2022Software Testing for Machine Learning30 Apr 2022
- 2022Tailored Uncertainty Estimation for Deep Learning Systems29 Apr 2022
- 2022Is Neuron Coverage Needed to Make Person Detection More Robust?21 Apr 2022
- 2022LaF: Labeling-Free Model Selection for Automated Deep Neural Network Reusing8 Apr 2022
- 2022Testing Feedforward Neural Networks Training Programs1 Apr 2022
- 2022NPC: Neuron Path Coverage via Characterizing Decision Logic of Deep Neural Networks24 Mar 2022
- 2022Coverage-Guided Tensor Compiler Fuzzing with Joint IR-Pass Mutation21 Feb 2022
50 newest of 68 All 68 (JSON)
- 2024Understanding the Effectiveness of Coverage Criteria for Large Language Models: A Special Angle from Jailbreak Attackscited by 8
- 2024Precision Guided Approach to Mitigate Data Poisoning Attacks in Federated Learningcited by 1
- 2026RACC: Representation-Aware Coverage Criteria for LLM Safety Testingcited by 0
- 2026RACC: Representation-Aware Coverage Criteria for LLM Safety Testing2 Feb 2026
- 2024Understanding the Effectiveness of Coverage Criteria for Large Language Models: A Special Angle from Jailbreak Attacks27 Aug 2024
- 2024Precision Guided Approach to Mitigate Data Poisoning Attacks in Federated Learning5 Apr 2024
- 2021Software Engineering for AI-Based Systems: A Surveycited by 69
- 2021Provable Repair of Deep Neural Networkscited by 42
- 2021Inspect, Understand, Overcome: A Survey of Practical Methods for AI Safetycited by 35
- 2021ModelDiff: Testing-Based DNN Similarity Comparison for Model Reuse Detectioncited by 33
- 2021Distribution-Aware Testing of Neural Networks Using Generative Modelscited by 22
- 2022NPC: Neuron Path Coverage via Characterizing Decision Logic of Deep Neural Networkscited by 18
- 2021Understanding Performance Problems in Deep Learning Systemscited by 12
- 2021MDPFuzz: Testing Models Solving Markov Decision Processescited by 12
- 2022QVIP: An ILP-based Formal Verification Approach for Quantized Neural Networkscited by 12
- 2025Neural Network Verification is a Programming Language Challengecited by 12
- 2021Revisiting Neuron Coverage for DNN Testing: A Layer-Wise and Distribution-Aware Criterioncited by 11
- 2022Coverage-Guided Tensor Compiler Fuzzing with Joint IR-Pass Mutationcited by 10
12 most cited of 64 All 64 (JSON)
- 2026Reliability Testing of Medical Model Performance under Distributed Deployment29 Sep 2026
- 2026Testing Neural Networks via Bayesian-Guided Exploration of Decision Landscapes3 Jun 2026
- 2026Latent Anchor-Driven Test Generation for Deep Neural Networks3 Jun 2026
- 2026Content Fuzzing for Escaping Information Cocoons on Digital Social Media7 Apr 2026
- 2026Latent Regularization in Generative Test Input Generation17 Feb 2026
- 2025Influence-Guided Concolic Testing of Transformer Robustness28 Sep 2025
- 2025Toward Reproducible Cross-Backend Compatibility for Deep Learning: A Configuration-First Framework with Three-Tier Verification29 Aug 2025
- 2025Efficient Neural Network Verification via Order Leading Exploration of Branch-and-Bound Trees23 Jul 2025
- 2025Adaptive Branch-and-Bound Tree Exploration for Neural Network Verification2 May 2025
- 2025Towards Assessing Deep Learning Test Input Generators3 Apr 2025
- 2025Generating Realistic, Diverse, and Fault-Revealing Inputs with Latent Space Interpolation for Testing Deep Neural Networks22 Mar 2025
- 2025Neural Network Verification is a Programming Language Challenge10 Jan 2025
12 newest of 64 All 64 (JSON)