Scaling Polyhedral Neural Network Verification on GPUs
Not on the map. Why?
Abstract (arXiv)
Certifying the robustness of neural networks against adversarial attacks is essential to their reliable adoption in safety-critical systems such as autonomous driving and medical diagnosis. Unfortunately, state-of-the-art verifiers either do not scale to bigger networks or are too imprecise to prove robustness, limiting their practical adoption. In this work, we introduce GPUPoly, a scalable verifier that can prove the robustness of significantly larger deep neural networks than previously possible. The key technical insight behind GPUPoly is the design of custom, sound polyhedra algorithms for neural network verification on a GPU. Our algorithms leverage the available GPU parallelism and inherent sparsity of the underlying verification task. GPUPoly scales to large networks: for example, it can prove the robustness of a 1M neuron, 34-layer deep residual network in approximately 34.5 ms. We believe GPUPoly is a promising step towards practical verification of real-world neural networks.
Key facts. Cited by 43 papers in the map (data through 7 Oct 2026). First posted on arXiv 20 Jul 2020.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 6; 2022: 11; 2023: 9; 2024: 8; 2025: 5; 2026: 4.
43 papers.
Sort:
- 2022General Cutting Planes for Bound-Propagation-Based Neural Network Verificationcited by 102
- 2021PRIMA: General and Precise Neural Network Certification via Scalable Convex Hull Approximationscited by 77
- 2021The Second International Verification of Neural Networks Competition (VNN-COMP 2021): Summary and Resultscited by 71
- 2023First Three Years of the International Verification of Neural Networks Competition (VNN-COMP)cited by 58
- 2024Scalable Neural Network Verification with Branch-and-bound Inferred Cutting Planescited by 33
- 2022Efficient Neural Network Analysis with Sum-of-Infeasibilitiescited by 24
- 2023A DPLL(T) Framework for Verifying Deep Neural Networkscited by 23
- 2022IBP Regularization for Verified Adversarial Robustness via Branch-and-Boundcited by 21
- 2022Scalable Verification of GNN-based Job Schedulerscited by 18
- 2021Learning Security Classifiers with Verified Global Robustness Propertiescited by 14
- 2022Provable Defense Against Geometric Transformationscited by 14
- 2023Incremental Verification of Neural Networkscited by 14
31 more
- 2024Harnessing Neuron Stability to Improve DNN Verificationcited by 13
- 2021On the Paradox of Certified Trainingcited by 12
- 2022Stability Verification of Neural Network Controllers using Mixed-Integer Programmingcited by 10
- 2026Formal Mechanistic Interpretability: Automated Circuit Discovery with Provable Guaranteescited by 10
- 2022CAISAR: A platform for Characterizing Artificial Intelligence Safety and Robustnesscited by 9
- 2022Improved techniques for deterministic l2 robustnesscited by 9
- 2025Clip-and-Verify: Linear Constraint-Driven Domain Clipping for Accelerating Neural Network Verificationcited by 9
- 2024Set-Based Training for Neural Network Verificationcited by 6
- 2021Self-Correcting Neural Networks For Safe Classificationcited by 4
- 2022Boosting Robustness Verification of Semantic Feature Neighborhoodscited by 4
- 2022Optimized Symbolic Interval Propagation for Neural Network Verificationcited by 4
- 2023Efficient MILP Decomposition in Quantum Computing for ReLU Network Robustnesscited by 4
- 2024Revisiting Differential Verification: Equivalence Verification with Confidencecited by 4
- 2022Quantization-aware Interval Bound Propagation for Training Certifiably Robust Quantized Neural Networkscited by 3
- 2023Interpreting Robustness Proofs of Deep Neural Networkscited by 3
- 2024VerifIoU -- Robustness of Object Detection to Perturbationscited by 3
- 2024Boosting Few-Pixel Robustness Verification via Covering Verification Designscited by 2
- 2025Verification of Bit-Flip Attacks against Quantized Neural Networkscited by 2
- 2021Abstract Interpretation of Fixpoint Iterators with Applications to Neural Networkscited by 1
- 2023Expediting Neural Network Verification via Network Reductioncited by 1
- 2024Automated Design of Linear Bounding Functions for Sigmoidal Nonlinearities in Neural Networkscited by 1
- 2025Mini-Batch Robustness Verification of Deep Neural Networkscited by 1
- 2025Tight Robustness Certification Through the Convex Hull of ℓ0 Attackscited by 1
- 2023CGDTest: A Constrained Gradient Descent Algorithm for Testing Neural Networkscited by 0
- 2023Verification of Neural Networks Local Differential Classification Privacycited by 0
- 2024Inferring Properties of Graph Neural Networkscited by 0
- 2023STR-Cert: Robustness Certification for Deep Text Recognition on Deep Learning Pipelines and Vision Transformerscited by 0
- 2025Evaluation and Verification of Physics-Informed Neural Models of the Grad-Shafranov Equationcited by 0
- 2026Verified SHAP: Provable Bounds for Exact Shapley Values of Neural Networkscited by 0
- 2026Scaling Neural Network Verification with Tensor Parallelism and Fully Sharded Data Parallelismcited by 0
- 2026Certified Training for Convolutional Perturbationscited by 0
- 2026Certified Training for Convolutional Perturbations20 Jul 2026
- 2026Scaling Neural Network Verification with Tensor Parallelism and Fully Sharded Data Parallelism8 Jun 2026
- 2026Verified SHAP: Provable Bounds for Exact Shapley Values of Neural Networks22 May 2026
- 2026Formal Mechanistic Interpretability: Automated Circuit Discovery with Provable Guarantees18 Feb 2026
- 2025Clip-and-Verify: Linear Constraint-Driven Domain Clipping for Accelerating Neural Network Verification11 Dec 2025
- 2025Tight Robustness Certification Through the Convex Hull of ℓ0 Attacks13 Nov 2025
- 2025Mini-Batch Robustness Verification of Deep Neural Networks21 Aug 2025
- 2025Evaluation and Verification of Physics-Informed Neural Models of the Grad-Shafranov Equation29 Apr 2025
- 2025Verification of Bit-Flip Attacks against Quantized Neural Networks22 Feb 2025
- 2024Scalable Neural Network Verification with Branch-and-bound Inferred Cutting Planes31 Dec 2024
- 2024Revisiting Differential Verification: Equivalence Verification with Confidence26 Oct 2024
- 2024Automated Design of Linear Bounding Functions for Sigmoidal Nonlinearities in Neural Networks14 Jun 2024
31 more
- 2024Boosting Few-Pixel Robustness Verification via Covering Verification Designs17 May 2024
- 2024VerifIoU -- Robustness of Object Detection to Perturbations30 Jan 2024
- 2024Set-Based Training for Neural Network Verification26 Jan 2024
- 2024Harnessing Neuron Stability to Improve DNN Verification19 Jan 2024
- 2024Inferring Properties of Graph Neural Networks8 Jan 2024
- 2023STR-Cert: Robustness Certification for Deep Text Recognition on Deep Learning Pipelines and Vision Transformers28 Nov 2023
- 2023Verification of Neural Networks Local Differential Classification Privacy31 Oct 2023
- 2023Expediting Neural Network Verification via Network Reduction7 Aug 2023
- 2023A DPLL(T) Framework for Verifying Deep Neural Networks17 Jul 2023
- 2023Efficient MILP Decomposition in Quantum Computing for ReLU Network Robustness30 Apr 2023
- 2023Incremental Verification of Neural Networks4 Apr 2023
- 2023CGDTest: A Constrained Gradient Descent Algorithm for Testing Neural Networks4 Apr 2023
- 2023Interpreting Robustness Proofs of Deep Neural Networks31 Jan 2023
- 2023First Three Years of the International Verification of Neural Networks Competition (VNN-COMP)14 Jan 2023
- 2022Optimized Symbolic Interval Propagation for Neural Network Verification15 Dec 2022
- 2022Quantization-aware Interval Bound Propagation for Training Certifiably Robust Quantized Neural Networks29 Nov 2022
- 2022Improved techniques for deterministic l2 robustness15 Nov 2022
- 2022Boosting Robustness Verification of Semantic Feature Neighborhoods12 Sep 2022
- 2022General Cutting Planes for Bound-Propagation-Based Neural Network Verification11 Aug 2022
- 2022Provable Defense Against Geometric Transformations22 Jul 2022
- 2022IBP Regularization for Verified Adversarial Robustness via Branch-and-Bound29 Jun 2022
- 2022Stability Verification of Neural Network Controllers using Mixed-Integer Programming27 Jun 2022
- 2022CAISAR: A platform for Characterizing Artificial Intelligence Safety and Robustness7 Jun 2022
- 2022Efficient Neural Network Analysis with Sum-of-Infeasibilities19 Mar 2022
- 2022Scalable Verification of GNN-based Job Schedulers7 Mar 2022
- 2021Abstract Interpretation of Fixpoint Iterators with Applications to Neural Networks14 Oct 2021
- 2021The Second International Verification of Neural Networks Competition (VNN-COMP 2021): Summary and Results31 Aug 2021
- 2021Self-Correcting Neural Networks For Safe Classification23 Jul 2021
- 2021Learning Security Classifiers with Verified Global Robustness Properties24 May 2021
- 2021PRIMA: General and Precise Neural Network Certification via Scalable Convex Hull Approximations5 Mar 2021
- 2021On the Paradox of Certified Training12 Feb 2021
- 2022General Cutting Planes for Bound-Propagation-Based Neural Network Verificationcited by 102
- 2021PRIMA: General and Precise Neural Network Certification via Scalable Convex Hull Approximationscited by 77
- 2021The Second International Verification of Neural Networks Competition (VNN-COMP 2021): Summary and Resultscited by 71
- 2023First Three Years of the International Verification of Neural Networks Competition (VNN-COMP)cited by 58
- 2024Scalable Neural Network Verification with Branch-and-bound Inferred Cutting Planescited by 33
- 2022Efficient Neural Network Analysis with Sum-of-Infeasibilitiescited by 24
- 2023A DPLL(T) Framework for Verifying Deep Neural Networkscited by 23
- 2022IBP Regularization for Verified Adversarial Robustness via Branch-and-Boundcited by 21
- 2022Scalable Verification of GNN-based Job Schedulerscited by 18
- 2021Learning Security Classifiers with Verified Global Robustness Propertiescited by 14
- 2022Provable Defense Against Geometric Transformationscited by 14
- 2023Incremental Verification of Neural Networkscited by 14
12 most cited of 43 All 43 (JSON)
- 2026Certified Training for Convolutional Perturbations20 Jul 2026
- 2026Scaling Neural Network Verification with Tensor Parallelism and Fully Sharded Data Parallelism8 Jun 2026
- 2026Verified SHAP: Provable Bounds for Exact Shapley Values of Neural Networks22 May 2026
- 2026Formal Mechanistic Interpretability: Automated Circuit Discovery with Provable Guarantees18 Feb 2026
- 2025Clip-and-Verify: Linear Constraint-Driven Domain Clipping for Accelerating Neural Network Verification11 Dec 2025
- 2025Tight Robustness Certification Through the Convex Hull of ℓ0 Attacks13 Nov 2025
- 2025Mini-Batch Robustness Verification of Deep Neural Networks21 Aug 2025
- 2025Evaluation and Verification of Physics-Informed Neural Models of the Grad-Shafranov Equation29 Apr 2025
- 2025Verification of Bit-Flip Attacks against Quantized Neural Networks22 Feb 2025
- 2024Scalable Neural Network Verification with Branch-and-bound Inferred Cutting Planes31 Dec 2024
- 2024Revisiting Differential Verification: Equivalence Verification with Confidence26 Oct 2024
- 2024Automated Design of Linear Bounding Functions for Sigmoidal Nonlinearities in Neural Networks14 Jun 2024
12 newest of 43 All 43 (JSON)