GoTube: Scalable Stochastic Verification of Continuous-Depth Models
Not on the map. Why?
Abstract (arXiv)
We introduce a new stochastic verification algorithm that formally quantifies the behavioral robustness of any time-continuous process formulated as a continuous-depth model. Our algorithm solves a set of global optimization (Go) problems over a given time horizon to construct a tight enclosure (Tube) of the set of all process executions starting from a ball of initial states. We call our algorithm GoTube. Through its construction, GoTube ensures that the bounding tube is conservative up to a desired probability and up to a desired tightness. GoTube is implemented in JAX and optimized to scale to complex continuous-depth neural network models. Compared to advanced reachability analysis tools for time-continuous neural networks, GoTube does not accumulate overapproximation errors between time steps and avoids the infamous wrapping effect inherent in symbolic techniques. We show that GoTube substantially outperforms state-of-the-art verification tools in terms of the size of the initial ball, speed, time-horizon, task completion, and scalability on a large set of experiments. GoTube is stable and sets the state-of-the-art in terms of its ability to scale to time horizons well beyond what has been previously possible.
Key facts. Cited by 12 papers in the map (data through 7 Oct 2026). Builds on 37 of its 90 references that are in the map. First posted on arXiv 18 Jul 2021.
Builds on
37 of 90 references.
References · 37
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2018Neural Ordinary Differential Equationscited by 3,733
- 2018Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examplescited by 1,259
- 2020A Review of Uncertainty Quantification in Deep Learning: Techniques, Applications and Challengescited by 813
- 2017Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networkscited by 739
- 2017Provable defenses against adversarial examples via the convex outer adversarial polytopecited by 564
- 2018Efficient Neural Network Robustness Certification with General Activation Functionscited by 439
- 2018On the Effectiveness of Interval Bound Propagation for Training Verifiably Robust Modelscited by 322
- 2019Efficient and Accurate Estimation of Lipschitz Constants for Deep Neural Networkscited by 290
- 2020Scalable Gradients for Stochastic Differential Equationscited by 264
- 2017Formal Verification of Piece-Wise Linear Feed-Forward Neural Networkscited by 241
- 2018Adversarial Risk and the Dangers of Evaluating Against Weak Attackscited by 221
25 more
- 2018Efficient Formal Safety Analysis of Neural Networkscited by 165
- 2020Liquid Time-constant Networkscited by 160
- 2019Branch and Bound for Piecewise Linear Neural Network Verificationcited by 138
- 2019A Convex Relaxation Barrier to Tight Robustness Verification of Neural Networkscited by 124
- 2020Learning Long-Term Dependencies in Irregularly-Sampled Time Seriescited by 82
- 2020The Convex Relaxation Barrier, Revisited: Tightened Single-Neuron Relaxations for Neural Network Verificationcited by 50
- 2021Improved Branch and Bound for Neural Network Verification via Lagrangian Decompositioncited by 44
- 2017Global optimization of Lipschitz functionscited by 39
- 2021Infinitely Deep Bayesian Neural Networks with Stochastic Differential Equationscited by 38
- 2020Lagrangian Decomposition for Neural Network Verificationcited by 35
- 2020Hypersolvers: Toward Fast Continuous-Depth Modelscited by 33
- 2020Scalable Verification of Quantized Neural Networks (Technical Report)cited by 28
- 2020On The Verification of Neural ODEs with Stochastic Guaranteescited by 24
- 2021Causal Navigation by Continuous-time Neural Networkscited by 23
- 2021Adversarial Training is Not Ready for Robot Learningcited by 20
- 2021LipBaB: Computing exact Lipschitz constant of ReLU networkscited by 16
- 2021On-Off Center-Surround Receptive Fields for Accurate and Robust Image Classificationcited by 15
- 2019TIRA: Toolbox for Interval Reachability Analysiscited by 12
- 2018Response Characterization for Auditing Cell Dynamics in Long Short-term Memory Networkscited by 10
- 2020Lagrangian Reachtubes: The Next Generationcited by 10
- 2014ProbReach: Verified Probabilistic Delta-Reachability for Stochastic Hybrid Systemscited by 7
- 2018Stochastic reachability of a target tube: Theory and computationcited by 7
- 2013Satisfiability Modulo ODEscited by 3
- 2017Lagrangian Reachabililtycited by 3
- 2020PIRK: Scalable Interval Reachability Analysis for High-Dimensional Nonlinear Systemscited by 2
Built on by
Citing papers per year: 2021: 3; 2022: 4; 2023: 4; 2024: 0; 2025: 0; 2026: 1.
12 papers.
- 2021Stability Verification in Stochastic Control Systems via Neural Network Supermartingalescited by 24
- 2022Reachability Analysis of a General Class of Neural Ordinary Differential Equationscited by 13
- 2021A Simple and Efficient Sampling-based Algorithm for General Reachability Analysiscited by 12
- 2021BarrierNet: A Safety-Guaranteed Layer for Neural Networkscited by 11
- 2023Neural Abstractionscited by 11
- 2022Differentiable Control Barrier Functions for Vision-based End-to-End Autonomous Drivingcited by 10
- 2022On the Forward Invariance of Neural ODEscited by 10
- 2022Safety Verification for Neural Networks Based on Set-boundary Analysiscited by 5
- 2023Verifying Safety of Neural Networks from Topological Perspectivescited by 1
- 2026TNODEV: Toolbox for Neural ODE Verificationcited by 1
- 2023On the Trade-off Between Efficiency and Precision of Neural Abstractioncited by 0
- 2023Robustness Analysis of Continuous-Depth Models with Lagrangian Techniquescited by 0
- 2026TNODEV: Toolbox for Neural ODE Verification15 Jun 2026
- 2023Robustness Analysis of Continuous-Depth Models with Lagrangian Techniques23 Aug 2023
- 2023On the Trade-off Between Efficiency and Precision of Neural Abstraction28 Jul 2023
- 2023Verifying Safety of Neural Networks from Topological Perspectives27 Jun 2023
- 2023Neural Abstractions27 Jan 2023
- 2022On the Forward Invariance of Neural ODEs10 Oct 2022
- 2022Safety Verification for Neural Networks Based on Set-boundary Analysis9 Oct 2022
- 2022Reachability Analysis of a General Class of Neural Ordinary Differential Equations13 Jul 2022
- 2022Differentiable Control Barrier Functions for Vision-based End-to-End Autonomous Driving4 Mar 2022
- 2021Stability Verification in Stochastic Control Systems via Neural Network Supermartingales17 Dec 2021
- 2021A Simple and Efficient Sampling-based Algorithm for General Reachability Analysis10 Dec 2021
- 2021BarrierNet: A Safety-Guaranteed Layer for Neural Networks22 Nov 2021