Fastened CROWN: Tightened Neural Network Robustness Certificates
Not on the map. Why?
Abstract (arXiv)
The rapid growth of deep learning applications in real life is accompanied by severe safety concerns. To mitigate this uneasy phenomenon, much research has been done providing reliable evaluations of the fragility level in different deep neural networks. Apart from devising adversarial attacks, quantifiers that certify safeguarded regions have also been designed in the past five years. The summarizing work of Salman et al. unifies a family of existing verifiers under a convex relaxation framework. We draw inspiration from such work and further demonstrate the optimality of deterministic CROWN (Zhang et al. 2018) solutions in a given linear programming problem under mild constraints. Given this theoretical result, the computationally expensive linear programming based method is shown to be unnecessary. We then propose an optimization-based approach textitFROWN (Fastened CROWN): a general algorithm to tighten robustness certificates for neural networks. Extensive experiments on various networks trained individually verify the effectiveness of FROWN in safeguarding larger robust regions.
Key facts. Cited by 39 papers in the map (data through 14 Oct 2026). First posted on arXiv 2 Dec 2019.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 4; 2022: 15; 2023: 6; 2024: 11; 2025: 2; 2026: 1.
39 papers.
Sort:
By area:
- 2021PRIMA: General and Precise Neural Network Certification via Scalable Convex Hull Approximationscited by 77
- 2024Neural Network Verification with Branch-and-Bound for General Nonlinearitiescited by 47
- 2022Efficiently Computing Local Lipschitz Constants of Neural Networks via Bound Propagationcited by 45
- 2021How to Certify Machine Learning Based Safety-critical Systems? A Systematic Literature Reviewcited by 39
- 2023When Deep Learning Meets Polyhedral Theory: A Surveycited by 39
- 2022Verifying Learning-Based Robotic Navigation Systemscited by 33
- 2022An Abstraction-Refinement Approach to Verifying Convolutional Neural Networkscited by 24
- 2022Efficient Neural Network Analysis with Sum-of-Infeasibilitiescited by 24
- 2022Neural Network Verification with Proof Productioncited by 22
- 2022Scalable Verification of GNN-based Job Schedulerscited by 19
- 2022Verification-Aided Deep Ensemble Selectioncited by 18
- 2022Toward Certified Robustness Against Real-World Distribution Shiftscited by 16
27 more
- 2024NLP Verification: Towards a General Methodology for Certifying Robustnesscited by 16
- 2024Formally Verifying Deep Reinforcement Learning Controllers with Lyapunov Barrier Certificatescited by 16
- 2021Towards Evaluating and Training Verifiably Robust Neural Networkscited by 15
- 2024Verification-Guided Shielding for Deep Reinforcement Learningcited by 13
- 2022veriFIRE: Verifying an Industrial, Learning-Based Wildfire Detection Systemcited by 12
- 2024Shield Synthesis for LTL Modulo Theoriescited by 12
- 2022Constrained Reinforcement Learning for Robotics via Scenario-Based Programmingcited by 11
- 2023Verifying Generalization in Deep Learningcited by 11
- 2024Hard to Explain: On the Computational Hardness of In-Distribution Model Interpretationcited by 11
- 2022Provably Tightest Linear Approximation for Robustness Verification of Sigmoid-like Neural Networkscited by 8
- 2024Robustness Assessment of a Runway Object Classifier for Safe Aircraft Taxiingcited by 8
- 2022NCVX: A General-Purpose Optimization Solver for Constrained Machine and Deep Learningcited by 7
- 2023Optimization and Optimizers for Adversarial Robustnesscited by 6
- 2024Certification of Speaker Recognition Models to Additive Perturbationscited by 6
- 2023OccRob: Efficient SMT-Based Occlusion Robustness Verification of Deep Neural Networkscited by 5
- 2025Proof Minimization in Neural Network Verificationcited by 4
- 2025PICID: Proof-Driven Clause Learning in Neural Network Verificationcited by 3
- 2023A Tale of Two Approximations: Tightening Over-Approximation for DNN Robustness Verification via Under-Approximationcited by 2
- 2024Verifying the Generalization of Deep Learning to Out-of-Distribution Domainscited by 2
- 2024Achieving the Tightest Relaxation of Sigmoids for Formal Verificationcited by 2
- 2022Tightening Robustness Verification of MaxPool-based Neural Networks via Minimizing the Over-Approximation Zonecited by 1
- 2023Expediting Neural Network Verification via Network Reductioncited by 1
- 2021A Framework for Verification of Wasserstein Adversarial Robustnesscited by 0
- 2022VeriCompress: A Tool to Streamline the Synthesis of Verified Robust Compressed Neural Networks from Scratchcited by 0
- 2022DualApp: Tight Over-Approximation for Neural Network Robustness Verification via Under-Approximationcited by 0
- 2024Towards General Robustness Verification of MaxPool-based Convolutional Neural Networks via Tightening Linear Approximationcited by 0
- 2026Shifting-based Optimizable Linear Relaxations for General Activation Functionscited by 0
- 2026Shifting-based Optimizable Linear Relaxations for General Activation Functions18 Jun 2026
- 2025Proof Minimization in Neural Network Verification11 Nov 2025
- 2025PICID: Proof-Driven Clause Learning in Neural Network Verification15 Mar 2025
- 2024Achieving the Tightest Relaxation of Sigmoids for Formal Verification20 Aug 2024
- 2024Hard to Explain: On the Computational Hardness of In-Distribution Model Interpretation7 Aug 2024
- 2024Verification-Guided Shielding for Deep Reinforcement Learning10 Jun 2024
- 2024Shield Synthesis for LTL Modulo Theories6 Jun 2024
- 2024Verifying the Generalization of Deep Learning to Out-of-Distribution Domains4 Jun 2024
- 2024Towards General Robustness Verification of MaxPool-based Convolutional Neural Networks via Tightening Linear Approximation2 Jun 2024
- 2024Neural Network Verification with Branch-and-Bound for General Nonlinearities31 May 2024
- 2024Formally Verifying Deep Reinforcement Learning Controllers with Lyapunov Barrier Certificates22 May 2024
- 2024Certification of Speaker Recognition Models to Additive Perturbations29 Apr 2024
27 more
- 2024NLP Verification: Towards a General Methodology for Certifying Robustness15 Mar 2024
- 2024Robustness Assessment of a Runway Object Classifier for Safe Aircraft Taxiing8 Jan 2024
- 2023Expediting Neural Network Verification via Network Reduction7 Aug 2023
- 2023A Tale of Two Approximations: Tightening Over-Approximation for DNN Robustness Verification via Under-Approximation26 May 2023
- 2023When Deep Learning Meets Polyhedral Theory: A Survey29 Apr 2023
- 2023Optimization and Optimizers for Adversarial Robustness23 Mar 2023
- 2023Verifying Generalization in Deep Learning11 Feb 2023
- 2023OccRob: Efficient SMT-Based Occlusion Robustness Verification of Deep Neural Networks27 Jan 2023
- 2022veriFIRE: Verifying an Industrial, Learning-Based Wildfire Detection System6 Dec 2022
- 2022DualApp: Tight Over-Approximation for Neural Network Robustness Verification via Under-Approximation21 Nov 2022
- 2022VeriCompress: A Tool to Streamline the Synthesis of Verified Robust Compressed Neural Networks from Scratch17 Nov 2022
- 2022Tightening Robustness Verification of MaxPool-based Neural Networks via Minimizing the Over-Approximation Zone13 Nov 2022
- 2022Efficiently Computing Local Lipschitz Constants of Neural Networks via Bound Propagation13 Oct 2022
- 2022NCVX: A General-Purpose Optimization Solver for Constrained Machine and Deep Learning3 Oct 2022
- 2022Provably Tightest Linear Approximation for Robustness Verification of Sigmoid-like Neural Networks21 Aug 2022
- 2022Constrained Reinforcement Learning for Robotics via Scenario-Based Programming20 Jun 2022
- 2022Toward Certified Robustness Against Real-World Distribution Shifts8 Jun 2022
- 2022Neural Network Verification with Proof Production1 Jun 2022
- 2022Verifying Learning-Based Robotic Navigation Systems26 May 2022
- 2022Efficient Neural Network Analysis with Sum-of-Infeasibilities19 Mar 2022
- 2022Scalable Verification of GNN-based Job Schedulers7 Mar 2022
- 2022Verification-Aided Deep Ensemble Selection8 Feb 2022
- 2022An Abstraction-Refinement Approach to Verifying Convolutional Neural Networks6 Jan 2022
- 2021A Framework for Verification of Wasserstein Adversarial Robustness13 Oct 2021
- 2021How to Certify Machine Learning Based Safety-critical Systems? A Systematic Literature Review26 Jul 2021
- 2021Towards Evaluating and Training Verifiably Robust Neural Networks1 Apr 2021
- 2021PRIMA: General and Precise Neural Network Certification via Scalable Convex Hull Approximations5 Mar 2021
- 2021PRIMA: General and Precise Neural Network Certification via Scalable Convex Hull Approximationscited by 77
- 2024Neural Network Verification with Branch-and-Bound for General Nonlinearitiescited by 47
- 2022Efficiently Computing Local Lipschitz Constants of Neural Networks via Bound Propagationcited by 45
- 2021How to Certify Machine Learning Based Safety-critical Systems? A Systematic Literature Reviewcited by 39
- 2023When Deep Learning Meets Polyhedral Theory: A Surveycited by 39
- 2022Verifying Learning-Based Robotic Navigation Systemscited by 33
- 2022An Abstraction-Refinement Approach to Verifying Convolutional Neural Networkscited by 24
- 2022Efficient Neural Network Analysis with Sum-of-Infeasibilitiescited by 24
- 2022Neural Network Verification with Proof Productioncited by 22
- 2022Scalable Verification of GNN-based Job Schedulerscited by 19
- 2022Verification-Aided Deep Ensemble Selectioncited by 18
- 2022Toward Certified Robustness Against Real-World Distribution Shiftscited by 16
12 most cited of 37 All 37 (JSON)
- 2026Shifting-based Optimizable Linear Relaxations for General Activation Functions18 Jun 2026
- 2025Proof Minimization in Neural Network Verification11 Nov 2025
- 2025PICID: Proof-Driven Clause Learning in Neural Network Verification15 Mar 2025
- 2024Achieving the Tightest Relaxation of Sigmoids for Formal Verification20 Aug 2024
- 2024Hard to Explain: On the Computational Hardness of In-Distribution Model Interpretation7 Aug 2024
- 2024Shield Synthesis for LTL Modulo Theories6 Jun 2024
- 2024Verifying the Generalization of Deep Learning to Out-of-Distribution Domains4 Jun 2024
- 2024Towards General Robustness Verification of MaxPool-based Convolutional Neural Networks via Tightening Linear Approximation2 Jun 2024
- 2024Neural Network Verification with Branch-and-Bound for General Nonlinearities31 May 2024
- 2024Certification of Speaker Recognition Models to Additive Perturbations29 Apr 2024
- 2024NLP Verification: Towards a General Methodology for Certifying Robustness15 Mar 2024
- 2024Robustness Assessment of a Runway Object Classifier for Safe Aircraft Taxiing8 Jan 2024
12 newest of 37 All 37 (JSON)