Formal Verification of CNN-based Perception Systems
Not on the map. Why?
Abstract (arXiv)
We address the problem of verifying neural-based perception systems implemented by convolutional neural networks. We define a notion of local robustness based on affine and photometric transformations. We show the notion cannot be captured by previously employed notions of robustness. The method proposed is based on reachability analysis for feed-forward neural networks and relies on MILP encodings of both the CNNs and transformations under question. We present an implementation and discuss the experimental results obtained for a CNN trained from the MNIST data set.
Key facts. Cited by 13 papers in the map (data through 14 Oct 2026). First posted on arXiv 28 Nov 2018.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 2; 2022: 3; 2023: 3; 2024: 3; 2025: 0; 2026: 2.
13 papers.
Sort:
- 2021Robust Machine Learning Systems: Challenges, Current Trends, Perspectives, and the Road Aheadcited by 41
- 2022An Abstraction-Refinement Approach to Verifying Convolutional Neural Networkscited by 24
- 2024Verification of Geometric Robustness of Neural Networks via Piecewise Linear Approximation and Lipschitz Optimisationcited by 7
- 2022Reachable Polyhedral Marching (RPM): An Exact Analysis Tool for Deep-Learned Control Systemscited by 6
- 2021Reachability Analysis of Convolutional Neural Networkscited by 4
- 2023A Neurosymbolic Approach to the Verification of Temporal Logic Properties of Learning enabled Control Systemscited by 3
- 2024Statistical Challenges with Dataset Construction: Why You Will Never Have Enough Imagescited by 2
- 2024Verification of Neural Networks against Convolutional Perturbations via Parameterised Kernelscited by 2
- 2022Work In Progress: Safety and Robustness Verification of Autoencoder-Based Regression Models using the NNV Toolcited by 0
- 2023PCV: A Point Cloud-Based Network Verifiercited by 0
- 2023Formal Verification of Long Short-Term Memory based Audio Classifiers: A Star based Approachcited by 0
- 2026Lipschitz Optimization for Formal Verification of Homographiescited by 0
1 more
- 2026Certified Training for Convolutional Perturbationscited by 0
- 2026Certified Training for Convolutional Perturbations20 Jul 2026
- 2026Lipschitz Optimization for Formal Verification of Homographies22 May 2026
- 2024Verification of Neural Networks against Convolutional Perturbations via Parameterised Kernels7 Nov 2024
- 2024Verification of Geometric Robustness of Neural Networks via Piecewise Linear Approximation and Lipschitz Optimisation23 Aug 2024
- 2024Statistical Challenges with Dataset Construction: Why You Will Never Have Enough Images20 Aug 2024
- 2023Formal Verification of Long Short-Term Memory based Audio Classifiers: A Star based Approach16 Nov 2023
- 2023A Neurosymbolic Approach to the Verification of Temporal Logic Properties of Learning enabled Control Systems7 Mar 2023
- 2023PCV: A Point Cloud-Based Network Verifier27 Jan 2023
- 2022Reachable Polyhedral Marching (RPM): An Exact Analysis Tool for Deep-Learned Control Systems15 Oct 2022
- 2022Work In Progress: Safety and Robustness Verification of Autoencoder-Based Regression Models using the NNV Tool14 Jul 2022
- 2022An Abstraction-Refinement Approach to Verifying Convolutional Neural Networks6 Jan 2022
- 2021Reachability Analysis of Convolutional Neural Networks22 Jun 2021
- 2021Robust Machine Learning Systems: Challenges, Current Trends, Perspectives, and the Road Aheadcited by 41
- 2022An Abstraction-Refinement Approach to Verifying Convolutional Neural Networkscited by 24
- 2024Verification of Geometric Robustness of Neural Networks via Piecewise Linear Approximation and Lipschitz Optimisationcited by 7
- 2022Reachable Polyhedral Marching (RPM): An Exact Analysis Tool for Deep-Learned Control Systemscited by 6
- 2021Reachability Analysis of Convolutional Neural Networkscited by 4
- 2023A Neurosymbolic Approach to the Verification of Temporal Logic Properties of Learning enabled Control Systemscited by 3
- 2024Statistical Challenges with Dataset Construction: Why You Will Never Have Enough Imagescited by 2
- 2024Verification of Neural Networks against Convolutional Perturbations via Parameterised Kernelscited by 2
- 2022Work In Progress: Safety and Robustness Verification of Autoencoder-Based Regression Models using the NNV Toolcited by 0
- 2023PCV: A Point Cloud-Based Network Verifiercited by 0
- 2023Formal Verification of Long Short-Term Memory based Audio Classifiers: A Star based Approachcited by 0
- 2026Lipschitz Optimization for Formal Verification of Homographiescited by 0
12 most cited of 13 All 13 (JSON)
- 2026Certified Training for Convolutional Perturbations20 Jul 2026
- 2026Lipschitz Optimization for Formal Verification of Homographies22 May 2026
- 2024Verification of Neural Networks against Convolutional Perturbations via Parameterised Kernels7 Nov 2024
- 2024Verification of Geometric Robustness of Neural Networks via Piecewise Linear Approximation and Lipschitz Optimisation23 Aug 2024
- 2024Statistical Challenges with Dataset Construction: Why You Will Never Have Enough Images20 Aug 2024
- 2023Formal Verification of Long Short-Term Memory based Audio Classifiers: A Star based Approach16 Nov 2023
- 2023A Neurosymbolic Approach to the Verification of Temporal Logic Properties of Learning enabled Control Systems7 Mar 2023
- 2023PCV: A Point Cloud-Based Network Verifier27 Jan 2023
- 2022Reachable Polyhedral Marching (RPM): An Exact Analysis Tool for Deep-Learned Control Systems15 Oct 2022
- 2022Work In Progress: Safety and Robustness Verification of Autoencoder-Based Regression Models using the NNV Tool14 Jul 2022
- 2022An Abstraction-Refinement Approach to Verifying Convolutional Neural Networks6 Jan 2022
- 2021Reachability Analysis of Convolutional Neural Networks22 Jun 2021
12 newest of 13 All 13 (JSON)