Safety Verification and Robustness Analysis of Neural Networks via Quadratic Constraints and Semidefinite Programming
Not on the map. Why?
Abstract (arXiv)
Certifying the safety or robustness of neural networks against input uncertainties and adversarial attacks is an emerging challenge in the area of safe machine learning and control. To provide such a guarantee, one must be able to bound the output of neural networks when their input changes within a bounded set. In this paper, we propose a semidefinite programming (SDP) framework to address this problem for feed-forward neural networks with general activation functions and input uncertainty sets. Our main idea is to abstract various properties of activation functions (e.g., monotonicity, bounded slope, bounded values, and repetition across layers) with the formalism of quadratic constraints. We then analyze the safety properties of the abstracted network via the S-procedure and semidefinite programming. Our framework spans the trade-off between conservatism and computational efficiency and applies to problems beyond safety verification. We evaluate the performance of our approach via numerical problem instances of various sizes.
Key facts. Cited by 100 papers in the map (data through 7 Oct 2026). First posted on arXiv 4 Mar 2019.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2020: 1; 2021: 18; 2022: 24; 2023: 17; 2024: 17; 2025: 16; 2026: 7.
100 papers.
Sort:
By area:
- 2021Beta-CROWN: Efficient Bound Propagation with Per-neuron Split Constraints for Complete and Incomplete Neural Network Robustness Verificationcited by 224
- 2023A Unified Algebraic Perspective on Lipschitz Neural Networkscited by 58
- 2021Recurrent Equilibrium Networks: Flexible Dynamic Models with Guaranteed Stability and Robustnesscited by 43
- 2021Reachability Analysis of Neural Feedback Loopscited by 41
- 2022Adversarial Robustness of Deep Neural Networks: A Survey from a Formal Verification Perspectivecited by 41
- 2023When Deep Learning Meets Polyhedral Theory: A Surveycited by 39
- 2020Imitation Learning with Stability and Safety Guaranteescited by 34
- 2024HardNet: Hard-Constrained Neural Networks with Universal Approximation Guaranteescited by 29
- 2023Physics-Informed Machine Learning for Modeling and Control of Dynamical Systemscited by 28
- 2022Robust Explanation Constraints for Neural Networkscited by 23
- 2024Lyapunov-stable Neural Control for State and Output Feedback: A Novel Formulationcited by 23
- 2021Robust Implicit Networks via Non-Euclidean Contractionscited by 19
38 more
- 2023Certified Robustness via Dynamic Margin Maximization and Improved Lipschitz Regularizationcited by 19
- 2021Recurrent Neural Network Controllers Synthesis with Stability Guarantees for Partially Observed Systemscited by 15
- 2022Chordal Sparsity for Lipschitz Constant Estimation of Deep Neural Networkscited by 15
- 2021Neural Network Verification in Controlcited by 14
- 2021Reliably-stabilizing piecewise-affine neural network controllerscited by 13
- 2022A Unified View of SDP-based Neural Network Verification through Completely Positive Programmingcited by 12
- 2023POLAR-Express: Efficient and Precise Formal Reachability Analysis of Neural-Network Controlled Systemscited by 12
- 2022Neural network training under semidefinite constraintscited by 11
- 2021Efficient Reachability Analysis of Closed-Loop Systems with Neural Network Controllerscited by 10
- 2022Stability Verification of Neural Network Controllers using Mixed-Integer Programmingcited by 10
- 2023Neural Schr"odinger Bridge with Sinkhorn Losses: Application to Data-driven Minimum Effort Control of Colloidal Self-assemblycited by 10
- 2024ECLipsE: Efficient Compositional Lipschitz Constant Estimation for Deep Neural Networkscited by 10
- 2022Closing the Loop: A Framework for Trustworthy Machine Learning in Power Systemscited by 9
- 2023Efficient Interaction-Aware Interval Analysis of Neural Network Feedback Loopscited by 9
- 2025Clip-and-Verify: Linear Constraint-Driven Domain Clipping for Accelerating Neural Network Verificationcited by 9
- 2021DeepSplit: Scalable Verification of Deep Neural Networks via Operator Splittingcited by 8
- 2021Robustness Certificates for Implicit Neural Networks: A Mixed Monotone Contractive Approachcited by 8
- 2022Synthesis of Stabilizing Recurrent Equilibrium Network Controllerscited by 8
- 2024Lipschitz constant estimation for general neural network architectures using control toolscited by 8
- 2021Robustness against Adversarial Attacks in Neural Networks using Incremental Dissipativitycited by 7
- 2024Verification of Geometric Robustness of Neural Networks via Piecewise Linear Approximation and Lipschitz Optimisationcited by 7
- 2021Linear systems with neural network nonlinearities: Improved stability analysis via acausal Zames-Falb multiplierscited by 6
- 2021Verifying Quantized Neural Networks using SMT-Based Model Checkingcited by 6
- 2022Neural Lyapunov Differentiable Predictive Controlcited by 6
- 2022Risk Verification of Stochastic Systems with Neural Network Controllerscited by 6
- 2025Two-Stage Learning of Stabilizing Neural Controllers via Zubov Sampling and Iterative Domain Expansioncited by 6
- 2022Probabilistic Verification of ReLU Neural Networks via Characteristic Functionscited by 5
- 2023Convolutional Neural Networks as 2-D systemscited by 5
- 2023Learning Dissipative Neural Dynamical Systemscited by 5
- 2021QNNVerifier: A Tool for Verifying Neural Networks using SMT-Based Model Checkingcited by 4
- 2022Chordal Sparsity for SDP-based Neural Network Verificationcited by 4
- 2022Global Performance Guarantees for Neural Network Models of AC Power Flowcited by 4
- 2023GPU-Accelerated Verification of Machine Learning Models for Power Systemscited by 4
- 2024Synthesizing Neural Network Controllers with Closed-Loop Dissipativity Guaranteescited by 4
- 2024Stability and Performance Analysis of Discrete-Time ReLU Recurrent Neural Networkscited by 4
- 2025Logic Gate Neural Networks are Good for Verificationcited by 4
- 2021Reduced-Order Neural Network Synthesis with Robustness Guaranteescited by 3
- 2022Stability Analysis of Recurrent Neural Networks by IQC with Copositive Mutiplierscited by 3
50 most cited of 100 All 100 (JSON)
- 2026General Quantification of Covariate and Concept Shifts10 Sep 2026
- 2026(DNN)2: Doubly Non-Negative Relaxations for Deep Neural Networks25 Aug 2026
- 2026Implicit Neural Networks as Static Controllers: Certificates and Performance Separation13 Jul 2026
- 2026When Certificates Fail: A Unified Safety Framework for Embedded Neural Interface Models7 Jul 2026
- 2026Quadratic Characterizations for Reachability Analysis of Neural Networks19 May 2026
- 2026IoUCert: Robustness Verification for Anchor-based Object Detectors3 Mar 2026
- 2026Cascading Robustness Verification: Toward Efficient Model-Agnostic Certification4 Feb 2026
- 2025Clip-and-Verify: Linear Constraint-Driven Domain Clipping for Accelerating Neural Network Verification11 Dec 2025
- 2025Delay Independent Safe Control with Neural Networks: Positive Lur'e Certificates for Risk Aware Autonomy8 Oct 2025
- 2025ECLipsE-Gen-Local: Efficient Compositional Local Lipschitz Estimates for Deep Neural Networks6 Oct 2025
- 2025Lipschitz-Based Robustness Certification for Recurrent Neural Networks via Convex Relaxation22 Sep 2025
- 2025Distributionally Robust Safety Verification of Neural Networks via Worst-Case CVaR22 Sep 2025
38 more
- 2025Stochastic Sample Approximations of (Local) Moduli of Continuity18 Sep 2025
- 2025Robust Convolution Neural ODEs via Contractivity-promoting regularization15 Aug 2025
- 2025Efficient Neural Network Verification via Order Leading Exploration of Branch-and-Bound Trees23 Jul 2025
- 2025A Scalable Approach for Safe and Robust Learning via Lipschitz-Constrained Networks30 Jun 2025
- 2025A New Perspective On AI Safety Through Control Theory Methodologies30 Jun 2025
- 2025Two-Stage Learning of Stabilizing Neural Controllers via Zubov Sampling and Iterative Domain Expansion2 Jun 2025
- 2025Logic Gate Neural Networks are Good for Verification26 May 2025
- 2025YANNs: Y-wise Affine Neural Networks for Exact and Efficient Representations of Piecewise Linear Functions11 May 2025
- 2025Learning Verifiable Control Policies Using Relaxed Verification23 Apr 2025
- 2025Neural Network-assisted Interval Reachability for Systems with Control Barrier Function-Based Safe Controllers11 Apr 2025
- 2025Towards Understanding the Optimization Mechanisms in Deep Learning29 Mar 2025
- 2024SAVER: A Toolbox for Sampling-Based, Probabilistic Verification of Neural Networks4 Dec 2024
- 2024Verification of Neural Networks against Convolutional Perturbations via Parameterised Kernels7 Nov 2024
- 2024LipKernel: Lipschitz-Bounded Convolutional Neural Networks via Dissipative Layers29 Oct 2024
- 2024HardNet: Hard-Constrained Neural Networks with Universal Approximation Guarantees14 Oct 2024
- 2024Identification For Control Based on Neural Networks: Approximately Linearizable Models24 Sep 2024
- 2024Verification of Geometric Robustness of Neural Networks via Piecewise Linear Approximation and Lipschitz Optimisation23 Aug 2024
- 2024A Complete Set of Quadratic Constraints for Repeated ReLU and Generalizations9 Jul 2024
- 2024Provable Bounds on the Hessian of Neural Networks: Derivative-Preserving Reachability Analysis6 Jun 2024
- 2024Certifying Global Robustness for Deep Neural Networks31 May 2024
- 2024Verifying Properties of Binary Neural Networks Using Sparse Polynomial Optimization27 May 2024
- 2024Stability and Performance Analysis of Discrete-Time ReLU Recurrent Neural Networks8 May 2024
- 2024Lipschitz constant estimation for general neural network architectures using control tools2 May 2024
- 2024Lyapunov-stable Neural Control for State and Output Feedback: A Novel Formulation11 Apr 2024
- 2024Synthesizing Neural Network Controllers with Closed-Loop Dissipativity Guarantees10 Apr 2024
- 2024ECLipsE: Efficient Compositional Lipschitz Constant Estimation for Deep Neural Networks5 Apr 2024
- 2024State space representations of the Roesser type for convolutional layers18 Mar 2024
- 2024A Transition System Abstraction Framework for Neural Network Dynamical System Models18 Feb 2024
- 2023Verified Compositional Neuro-Symbolic Control for Stochastic Systems with Temporal Logic Tasks17 Nov 2023
- 2023Local Lipschitz Constant Computation of ReLU-FNNs: Upper Bound Computation with Exactness Verification17 Oct 2023
- 2023Is Certifying ℓp Robustness Still Worthwhile?13 Oct 2023
- 2023Tight Certified Robustness via Min-Max Representations of ReLU Neural Networks7 Oct 2023
- 2023Certified Robustness via Dynamic Margin Maximization and Improved Lipschitz Regularization29 Sep 2023
- 2023Learning Dissipative Neural Dynamical Systems27 Sep 2023
- 2023Efficient Interaction-Aware Interval Analysis of Neural Network Feedback Loops27 Jul 2023
- 2023Neural Schr"odinger Bridge with Sinkhorn Losses: Application to Data-driven Minimum Effort Control of Colloidal Self-assembly26 Jul 2023
- 2023Verification of Neural Network Control Systems using Symbolic Zonotopes and Polynotopes26 Jun 2023
- 2023Physics-Informed Machine Learning for Modeling and Control of Dynamical Systems24 Jun 2023
50 newest of 100 All 100 (JSON)
- 2020Imitation Learning with Stability and Safety Guaranteescited by 34
- 2020Imitation Learning with Stability and Safety Guarantees16 Dec 2020
- 2021Beta-CROWN: Efficient Bound Propagation with Per-neuron Split Constraints for Complete and Incomplete Neural Network Robustness Verificationcited by 224
- 2023A Unified Algebraic Perspective on Lipschitz Neural Networkscited by 58
- 2021Recurrent Equilibrium Networks: Flexible Dynamic Models with Guaranteed Stability and Robustnesscited by 43
- 2021Reachability Analysis of Neural Feedback Loopscited by 41
- 2022Adversarial Robustness of Deep Neural Networks: A Survey from a Formal Verification Perspectivecited by 41
- 2023When Deep Learning Meets Polyhedral Theory: A Surveycited by 39
- 2024HardNet: Hard-Constrained Neural Networks with Universal Approximation Guaranteescited by 29
- 2023Physics-Informed Machine Learning for Modeling and Control of Dynamical Systemscited by 28
- 2022Robust Explanation Constraints for Neural Networkscited by 23
- 2024Lyapunov-stable Neural Control for State and Output Feedback: A Novel Formulationcited by 23
- 2021Robust Implicit Networks via Non-Euclidean Contractionscited by 19
- 2023Certified Robustness via Dynamic Margin Maximization and Improved Lipschitz Regularizationcited by 19
12 most cited of 98 All 98 (JSON)
- 2026General Quantification of Covariate and Concept Shifts10 Sep 2026
- 2026(DNN)2: Doubly Non-Negative Relaxations for Deep Neural Networks25 Aug 2026
- 2026Implicit Neural Networks as Static Controllers: Certificates and Performance Separation13 Jul 2026
- 2026When Certificates Fail: A Unified Safety Framework for Embedded Neural Interface Models7 Jul 2026
- 2026Quadratic Characterizations for Reachability Analysis of Neural Networks19 May 2026
- 2026IoUCert: Robustness Verification for Anchor-based Object Detectors3 Mar 2026
- 2026Cascading Robustness Verification: Toward Efficient Model-Agnostic Certification4 Feb 2026
- 2025Clip-and-Verify: Linear Constraint-Driven Domain Clipping for Accelerating Neural Network Verification11 Dec 2025
- 2025Delay Independent Safe Control with Neural Networks: Positive Lur'e Certificates for Risk Aware Autonomy8 Oct 2025
- 2025ECLipsE-Gen-Local: Efficient Compositional Local Lipschitz Estimates for Deep Neural Networks6 Oct 2025
- 2025Lipschitz-Based Robustness Certification for Recurrent Neural Networks via Convex Relaxation22 Sep 2025
- 2025Distributionally Robust Safety Verification of Neural Networks via Worst-Case CVaR22 Sep 2025
12 newest of 98 All 98 (JSON)