Provable Repair of Deep Neural Networks
Not on the map. Why?
Abstract (arXiv)
Deep Neural Networks (DNNs) have grown in popularity over the past decade and are now being used in safety-critical domains such as aircraft collision avoidance. This has motivated a large number of techniques for finding unsafe behavior in DNNs. In contrast, this paper tackles the problem of correcting a DNN once unsafe behavior is found. We introduce the provable repair problem, which is the problem of repairing a network N to construct a new network N' that satisfies a given specification. If the safety specification is over a finite set of points, our Provable Point Repair algorithm can find a provably minimal repair satisfying the specification, regardless of the activation functions used. For safety specifications addressing convex polytopes containing infinitely many points, our Provable Polytope Repair algorithm can find a provably minimal repair satisfying the specification for DNNs using piecewise-linear activation functions. The key insight behind both of these algorithms is the introduction of a Decoupled DNN architecture, which allows us to reduce provable repair to a linear programming problem. Our experimental results demonstrate the efficiency and effectiveness of our Provable Repair algorithms on a variety of challenging tasks.
Key facts. Cited by 42 papers in the map (data through 14 Oct 2026). Builds on 30 of its 65 references that are in the map. First posted on arXiv 9 Apr 2021.
Builds on
30 of 65 references.
References · 30
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
- 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,305
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2013Intriguing properties of neural networkscited by 5,155
- 2019Natural Adversarial Examplescited by 1,408
- 2016SqueezeNet: AlexNet-level accuracy with 50x fewer parameters and <0.5MB model sizecited by 1,060
- 2016End to End Learning for Self-Driving Carscited by 1,009
- 2017Ensemble Adversarial Training: Attacks and Defensescited by 840
- 2017Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networkscited by 744
- 2017Safe Reinforcement Learning via Shieldingcited by 449
- 2017Measuring Catastrophic Forgetting in Neural Networkscited by 360
- 2017DeepXplore: Automated Whitebox Testing of Deep Learning Systemscited by 311
18 more
- 2016Safety Verification of Deep Neural Networkscited by 263
- 2017DeepTest: Automated Testing of Deep-Neural-Network-driven Autonomous Carscited by 251
- 2017Formal Verification of Piece-Wise Linear Feed-Forward Neural Networkscited by 242
- 2018Verifiable Reinforcement Learning via Policy Extractioncited by 177
- 2019Complexity of Linear Regions in Deep Networkscited by 167
- 2019Deep ReLU Networks Have Surprisingly Few Activation Patternscited by 161
- 2020Editable Neural Networkscited by 155
- 2018DeepGauge: Multi-Granularity Testing Criteria for Deep Learning Systemscited by 147
- 2019MNIST-C: A Robustness Benchmark for Computer Visioncited by 138
- 2016Measuring Neural Net Robustness with Constraintscited by 90
- 2018TensorFuzz: Debugging Neural Networks with Coverage-Guided Fuzzingcited by 68
- 2018Deep Neural Network Compression for Aircraft Collision Avoidance Systemscited by 58
- 2018Concolic Testing for Deep Neural Networkscited by 51
- 2019Optimization and Abstraction: A Synergistic Approach for Analyzing Neural Network Robustnesscited by 40
- 2019An Inductive Synthesis Framework for Verifiable Reinforcement Learningcited by 39
- 2019Computing Linear Restrictions of Neural Networkscited by 15
- 2019Decoupling Gating from Linearitycited by 13
- 2021SyReNN: A Tool for Analyzing Deep Neural Networkscited by 10
Built on by
Citing papers per year: 2021: 7; 2022: 4; 2023: 10; 2024: 8; 2025: 6; 2026: 7.
42 papers.
Sort:
By area:
- 2021Fast Model Editing at Scalecited by 498
- 2022Post-hoc Concept Bottleneck Modelscited by 293
- 2023Transformer-Patcher: One Mistake worth One Neuroncited by 197
- 2022Causality-based Neural Network Repaircited by 47
- 2023A Survey on Knowledge Editing of Neural Networkscited by 34
- 2024HardNet: Hard-Constrained Neural Networks with Universal Approximation Guaranteescited by 31
- 2021Neural Network Repair with Reachability Analysiscited by 19
- 2024Eliminating Information Leakage in Hard Concept Bottleneck Models with Supervised, Hierarchical Concept Learningcited by 17
- 2021Minimal Multi-Layer Modifications of Deep Neural Networkscited by 14
- 2021Sound and Complete Neural Network Repair with Minimality and Locality Guaranteescited by 13
- 2023Architecture-Preserving Provable Repair of Deep Neural Networkscited by 11
- 2024Machine Learning Robustness: A Primercited by 8
30 more
- 2021SpecRepair: Counter-Example Guided Safety Repair of Deep Neural Networkscited by 6
- 2021Ensuring DNN Solution Feasibility for Optimization Problems with Convex Constraints and Its Application to DC Optimal Power Flow Problemscited by 6
- 2023Partial Network Cloningcited by 6
- 2024Online Safety Analysis for LLMs: a Benchmark, an Assessment, and a Path Forwardcited by 6
- 2024Certified Continual Learning for Neural Network Regressioncited by 5
- 2021Self-Correcting Neural Networks For Safe Classificationcited by 4
- 2022AIREPAIR: A Repair Platform for Neural Networkscited by 4
- 2023Repairing Deep Neural Networks Based on Behavior Imitationcited by 4
- 2023A Robust Optimisation Perspective on Counterexample-Guided Repair of Neural Networkscited by 3
- 2023Reliability Assurance for Deep Neural Network Architectures Against Numerical Defectscited by 3
- 2023Semantic-Based Neural Network Repaircited by 3
- 2023Incremental Satisfiability Modulo Theory for Verification of Deep Neural Networkscited by 2
- 2025A Comprehensive Study of Deep Learning Model Fixing Approachescited by 2
- 2022Verifying Attention Robustness of Deep Neural Networks against Semantic Perturbationscited by 1
- 2024Counterexample-Guided Repair of Reinforcement Learning Systems Using Safety Criticscited by 1
- 2025Exploring and Leveraging Class Vectors for Classifier Editingcited by 1
- 2026WARP: Guaranteed Inner-Layer Repair of NLP Transformerscited by 1
- 2023QNNRepair: Quantized Neural Network Repaircited by 0
- 2024Patch Synthesis for Property Repair of Deep Neural Networkscited by 0
- 2024An Empirical Study of Fault Localisation Techniques for Deep Learningcited by 0
- 2025PRUNE: A Patching Based Repair Framework for Certifiable Unlearning of Neural Networkscited by 0
- 2025AR2: Attention-Guided Repair for the Robustness of CNNs Against Common Corruptionscited by 0
- 2025DeepProv: Behavioral Characterization and Repair of Neural Networks via Inference Provenance Graph Analysiscited by 0
- 2025Provable Repair of Deep Neural Network Defects by Preimage Synthesis and Property Refinementcited by 0
- 2026Shapley-Guided Neural Repair Approach via Derivative-Free Optimizationcited by 0
- 2026Provable Fairness Repair for Deep Neural Networkscited by 0
- 2026RepTran: Search-Based Repair of Transformer Modelscited by 0
- 2026Security Properties of Neural Networks as Decision Problemscited by 0
- 2026FORGE: Verification-Gated Behavioral Repair for Generative Language Modelscited by 0
- 2026Mind the Gaps: From Failure Attribution to Closed-Form Repair of Code Language Modelscited by 0
- 2026Mind the Gaps: From Failure Attribution to Closed-Form Repair of Code Language Models4 Oct 2026
- 2026FORGE: Verification-Gated Behavioral Repair for Generative Language Models4 Oct 2026
- 2026Security Properties of Neural Networks as Decision Problems30 Sep 2026
- 2026RepTran: Search-Based Repair of Transformer Models13 Jul 2026
- 2026Provable Fairness Repair for Deep Neural Networks19 May 2026
- 2026WARP: Guaranteed Inner-Layer Repair of NLP Transformers1 Apr 2026
- 2026Shapley-Guided Neural Repair Approach via Derivative-Free Optimization1 Apr 2026
- 2025A Comprehensive Study of Deep Learning Model Fixing Approaches26 Dec 2025
- 2025Provable Repair of Deep Neural Network Defects by Preimage Synthesis and Property Refinement11 Nov 2025
- 2025Exploring and Leveraging Class Vectors for Classifier Editing13 Oct 2025
- 2025DeepProv: Behavioral Characterization and Repair of Neural Networks via Inference Provenance Graph Analysis30 Sep 2025
- 2025AR2: Attention-Guided Repair for the Robustness of CNNs Against Common Corruptions8 Jul 2025
30 more
- 2025PRUNE: A Patching Based Repair Framework for Certifiable Unlearning of Neural Networks10 May 2025
- 2024An Empirical Study of Fault Localisation Techniques for Deep Learning15 Dec 2024
- 2024HardNet: Hard-Constrained Neural Networks with Universal Approximation Guarantees14 Oct 2024
- 2024Certified Continual Learning for Neural Network Regression9 Jul 2024
- 2024Counterexample-Guided Repair of Reinforcement Learning Systems Using Safety Critics24 May 2024
- 2024Online Safety Analysis for LLMs: a Benchmark, an Assessment, and a Path Forward12 Apr 2024
- 2024Patch Synthesis for Property Repair of Deep Neural Networks2 Apr 2024
- 2024Machine Learning Robustness: A Primer1 Apr 2024
- 2024Eliminating Information Leakage in Hard Concept Bottleneck Models with Supervised, Hierarchical Concept Learning3 Feb 2024
- 2023A Survey on Knowledge Editing of Neural Networks30 Oct 2023
- 2023QNNRepair: Quantized Neural Network Repair23 Jun 2023
- 2023Semantic-Based Neural Network Repair12 Jun 2023
- 2023Repairing Deep Neural Networks Based on Behavior Imitation5 May 2023
- 2023Architecture-Preserving Provable Repair of Deep Neural Networks7 Apr 2023
- 2023Partial Network Cloning19 Mar 2023
- 2023Reliability Assurance for Deep Neural Network Architectures Against Numerical Defects13 Feb 2023
- 2023Incremental Satisfiability Modulo Theory for Verification of Deep Neural Networks10 Feb 2023
- 2023A Robust Optimisation Perspective on Counterexample-Guided Repair of Neural Networks26 Jan 2023
- 2023Transformer-Patcher: One Mistake worth One Neuron24 Jan 2023
- 2022AIREPAIR: A Repair Platform for Neural Networks24 Nov 2022
- 2022Verifying Attention Robustness of Deep Neural Networks against Semantic Perturbations13 Jul 2022
- 2022Post-hoc Concept Bottleneck Models31 May 2022
- 2022Causality-based Neural Network Repair20 Apr 2022
- 2021Ensuring DNN Solution Feasibility for Optimization Problems with Convex Constraints and Its Application to DC Optimal Power Flow Problems15 Dec 2021
- 2021Fast Model Editing at Scale21 Oct 2021
- 2021Minimal Multi-Layer Modifications of Deep Neural Networks18 Oct 2021
- 2021Sound and Complete Neural Network Repair with Minimality and Locality Guarantees14 Oct 2021
- 2021Neural Network Repair with Reachability Analysis9 Aug 2021
- 2021Self-Correcting Neural Networks For Safe Classification23 Jul 2021
- 2021SpecRepair: Counter-Example Guided Safety Repair of Deep Neural Networks3 Jun 2021
- 2022Causality-based Neural Network Repaircited by 47
- 2025PRUNE: A Patching Based Repair Framework for Certifiable Unlearning of Neural Networkscited by 0
- 2025Provable Repair of Deep Neural Network Defects by Preimage Synthesis and Property Refinementcited by 0
- 2026Shapley-Guided Neural Repair Approach via Derivative-Free Optimizationcited by 0
- 2026Security Properties of Neural Networks as Decision Problemscited by 0
- 2026Security Properties of Neural Networks as Decision Problems30 Sep 2026
- 2026Shapley-Guided Neural Repair Approach via Derivative-Free Optimization1 Apr 2026
- 2025Provable Repair of Deep Neural Network Defects by Preimage Synthesis and Property Refinement11 Nov 2025
- 2025PRUNE: A Patching Based Repair Framework for Certifiable Unlearning of Neural Networks10 May 2025
- 2022Causality-based Neural Network Repair20 Apr 2022
- 2021Fast Model Editing at Scalecited by 498
- 2022Post-hoc Concept Bottleneck Modelscited by 293
- 2023Transformer-Patcher: One Mistake worth One Neuroncited by 197
- 2023A Survey on Knowledge Editing of Neural Networkscited by 34
- 2024HardNet: Hard-Constrained Neural Networks with Universal Approximation Guaranteescited by 31
- 2021Neural Network Repair with Reachability Analysiscited by 19
- 2024Eliminating Information Leakage in Hard Concept Bottleneck Models with Supervised, Hierarchical Concept Learningcited by 17
- 2021Minimal Multi-Layer Modifications of Deep Neural Networkscited by 14
- 2021Sound and Complete Neural Network Repair with Minimality and Locality Guaranteescited by 13
- 2023Architecture-Preserving Provable Repair of Deep Neural Networkscited by 11
- 2024Machine Learning Robustness: A Primercited by 8
- 2021SpecRepair: Counter-Example Guided Safety Repair of Deep Neural Networkscited by 6
12 most cited of 36 All 36 (JSON)
- 2026Mind the Gaps: From Failure Attribution to Closed-Form Repair of Code Language Models4 Oct 2026
- 2026FORGE: Verification-Gated Behavioral Repair for Generative Language Models4 Oct 2026
- 2026RepTran: Search-Based Repair of Transformer Models13 Jul 2026
- 2026Provable Fairness Repair for Deep Neural Networks19 May 2026
- 2026WARP: Guaranteed Inner-Layer Repair of NLP Transformers1 Apr 2026
- 2025A Comprehensive Study of Deep Learning Model Fixing Approaches26 Dec 2025
- 2025Exploring and Leveraging Class Vectors for Classifier Editing13 Oct 2025
- 2025DeepProv: Behavioral Characterization and Repair of Neural Networks via Inference Provenance Graph Analysis30 Sep 2025
- 2025AR2: Attention-Guided Repair for the Robustness of CNNs Against Common Corruptions8 Jul 2025
- 2024An Empirical Study of Fault Localisation Techniques for Deep Learning15 Dec 2024
- 2024HardNet: Hard-Constrained Neural Networks with Universal Approximation Guarantees14 Oct 2024
- 2024Certified Continual Learning for Neural Network Regression9 Jul 2024
12 newest of 36 All 36 (JSON)