Verification of deep probabilistic models
Not on the map. Why?
Abstract (arXiv)
Probabilistic models are a critical part of the modern deep learning toolbox - ranging from generative models (VAEs, GANs), sequence to sequence models used in machine translation and speech processing to models over functional spaces (conditional neural processes, neural processes). Given the size and complexity of these models, safely deploying them in applications requires the development of tools to analyze their behavior rigorously and provide some guarantees that these models are consistent with a list of desirable properties or specifications. For example, a machine translation model should produce semantically equivalent outputs for innocuous changes in the input to the model. A functional regression model that is learning a distribution over monotonic functions should predict a larger value at a larger input. Verification of these properties requires a new framework that goes beyond notions of verification studied in deterministic feedforward networks, since requiring worst-case guarantees in probabilistic models is likely to produce conservative or vacuous results. We propose a novel formulation of verification for deep probabilistic models that take in conditioning inputs and sample latent variables in the course of producing an output: We require that the output of the model satisfies a linear constraint with high probability over the sampling of latent variables and for every choice of conditioning input to the model. We show that rigorous lower bounds on the probability that the constraint is satisfied can be obtained efficiently. Experiments with neural processes show that several properties of interest while modeling functional spaces can be modeled within this framework (monotonicity, convexity) and verified efficiently using our algorithms
Key facts. Cited by 8 papers in the map (data through 7 Oct 2026). First posted on arXiv 6 Dec 2018.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 3; 2022: 2; 2023: 1; 2024: 1; 2025: 1.
8 papers.
- 2022The Neural Process Family: Survey, Applications and Perspectivescited by 23
- 2021Make Sure You're Unsure: A Framework for Verifying Probabilistic Specificationscited by 18
- 2021The Vulnerability of Semantic Segmentation Networks to Adversarial Attacks in Autonomous Driving: Enhancing Extensive Environment Sensingcited by 12
- 2021RoMA: a Method for Neural Network Robustness Measurement and Assessmentcited by 10
- 2023Adversarial Robustness Certification for Bayesian Neural Networkscited by 7
- 2022Probabilistic Verification of ReLU Neural Networks via Characteristic Functionscited by 5
- 2024A Survey of Neural Network Robustness Assessment in Image Recognitioncited by 2
- 2025Probabilistically Tightened Linear Relaxation-based Perturbation Analysis for Neural Network Verificationcited by 2
- 2025Probabilistically Tightened Linear Relaxation-based Perturbation Analysis for Neural Network Verification7 Jul 2025
- 2024A Survey of Neural Network Robustness Assessment in Image Recognition12 Apr 2024
- 2023Adversarial Robustness Certification for Bayesian Neural Networks23 Jun 2023
- 2022Probabilistic Verification of ReLU Neural Networks via Characteristic Functions3 Dec 2022
- 2022The Neural Process Family: Survey, Applications and Perspectives1 Sep 2022
- 2021RoMA: a Method for Neural Network Robustness Measurement and Assessment21 Oct 2021
- 2021Make Sure You're Unsure: A Framework for Verifying Probabilistic Specifications18 Feb 2021
- 2021The Vulnerability of Semantic Segmentation Networks to Adversarial Attacks in Autonomous Driving: Enhancing Extensive Environment Sensing11 Jan 2021