OVERT: An Algorithm for Safety Verification of Neural Network Control Policies for Nonlinear Systems
Not on the map. Why?
Abstract (arXiv)
Deep learning methods can be used to produce control policies, but certifying their safety is challenging. The resulting networks are nonlinear and often very large. In response to this challenge, we present OVERT: a sound algorithm for safety verification of nonlinear discrete-time closed loop dynamical systems with neural network control policies. The novelty of OVERT lies in combining ideas from the classical formal methods literature with ideas from the newer neural network verification literature. The central concept of OVERT is to abstract nonlinear functions with a set of optimally tight piecewise linear bounds. Such piecewise linear bounds are designed for seamless integration into ReLU neural network verification tools. OVERT can be used to prove bounded-time safety properties by either computing reachable sets or solving feasibility queries directly. We demonstrate various examples of safety verification for several classical benchmark examples. OVERT compares favorably to existing methods both in computation time and in tightness of the reachable set.
Key facts. Cited by 37 papers in the map (data through 7 Oct 2026). Builds on 14 of its 44 references that are in the map. First posted on arXiv 3 Aug 2021.
Builds on
14 of 44 references.
References · 14
- 2013Intriguing properties of neural networkscited by 5,114
- 2016End to End Learning for Self-Driving Carscited by 1,000
- 2015The Limitations of Deep Learning in Adversarial Settingscited by 784
- 2017Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networkscited by 739
- 2015DeepDriving: Learning Affordance for Direct Perception in Autonomous Drivingcited by 229
- 2019Algorithms for Verifying Deep Neural Networkscited by 221
- 2018Formal Security Analysis of Neural Networks using Symbolic Intervalscited by 185
- 2017An approach to reachability analysis for feed-forward ReLU neural networkscited by 126
- 2018Verisig: verifying safety properties of hybrid systems with neural network controllerscited by 83
- 2017Output Reachable Set Estimation and Verification for Multi-Layer Neural Networkscited by 79
- 2020A Survey of Algorithms for Black-Box Safety Validation of Cyber-Physical Systemscited by 71
- 2020Parallelization Techniques for Verifying Neural Networkscited by 36
Built on by
Citing papers per year: 2021: 2; 2022: 9; 2023: 7; 2024: 7; 2025: 8; 2026: 4.
37 papers.
Sort:
By area:
- 2023When Deep Learning Meets Polyhedral Theory: A Surveycited by 39
- 2021Verification of Neural-Network Control Systems by Integrating Taylor Models and Zonotopescited by 26
- 2022Backward Reachability Analysis of Neural Feedback Loops: Techniques for Linear and Nonlinear Systemscited by 18
- 2022Toward Certified Robustness Against Real-World Distribution Shiftscited by 16
- 2024Formally Verifying Deep Reinforcement Learning Controllers with Lyapunov Barrier Certificatescited by 15
- 2023Distributionally Robust Statistical Verification with Imprecise Neural Networkscited by 12
- 2022Backward Reachability Analysis for Neural Feedback Loopscited by 9
- 2023Efficient Interaction-Aware Interval Analysis of Neural Network Feedback Loopscited by 9
- 2023Interval Reachability of Nonlinear Dynamical Systems with Neural Network Controllerscited by 8
- 2024Provably Safe Neural Network Controllers via Differential Dynamic Logiccited by 7
- 2022A Hybrid Partitioning Strategy for Backward Reachability of Neural Feedback Loopscited by 6
- 2022Reachable Polyhedral Marching (RPM): An Exact Analysis Tool for Deep-Learned Control Systemscited by 6
25 more
- 2022DRIP: Domain Refinement Iteration with Polytopes for Backward Reachability Analysis of Neural Feedback Loopscited by 6
- 2023Bayesian Safety Validation for Failure Probability Estimation of Black-Box Systemscited by 5
- 2024Constraint-Aware Refinement for Safety Verification of Neural Feedback Loopscited by 4
- 2023Contraction-Guided Adaptive Partitioning for Reachability Analysis of Neural Network Controlled Systemscited by 3
- 2023Verification of Neural Network Control Systems using Symbolic Zonotopes and Polynotopescited by 3
- 2024TTT: A Temporal Refinement Heuristic for Tenuously Tractable Discrete Time Reachability Problemscited by 3
- 2025Predictive Uncertainty for Runtime Assurance of a Real-Time Computer Vision-Based Landing Systemcited by 3
- 2022Fail-Safe Adversarial Generative Imitation Learningcited by 2
- 2022Automated Reachability Analysis of Neural Network-Controlled Systems via Adaptive Polytopescited by 2
- 2024Provable Bounds on the Hessian of Neural Networks: Derivative-Preserving Reachability Analysiscited by 2
- 2025BURNS: Backward Underapproximate Reachability for Neural-Feedback-Loop Systemscited by 2
- 2022Verifying Inverse Model Neural Networkscited by 1
- 2024ICODE: Modeling Dynamical Systems with Extrinsic Input Informationcited by 1
- 2025NP-Hard Lower Bound Complexity for Semantic Self-Verificationcited by 1
- 2025Learning Verifiable Control Policies Using Relaxed Verificationcited by 1
- 2026The FABRIC Strategy for Verifying Neural Feedback Systemscited by 1
- 2026Bridging Control with Neural Network Verifier alpha-beta-CROWN: A Tutorialcited by 1
- 2021Interpretable Local Tree Surrogate Policiescited by 0
- 2024Runtime Monitoring and Fault Detection for Neural Network-Controlled Systemscited by 0
- 2025Neural Network-assisted Interval Reachability for Systems with Control Barrier Function-Based Safe Controllerscited by 0
- 2025Language Models That Walk the Talk: A Framework for Formal Fairness Certificatescited by 0
- 2025Verification of Visual Controllers via Compositional Geometric Transformationscited by 0
- 2025Of Good Demons and Bad Angels: Guaranteeing Safe Control under Finite Precisioncited by 0
- 2026Formal Synthesis of Certifiably Robust Neural Lyapunov-Barrier Certificatescited by 0
- 2026Stochastic World Models for Verifying Vision-Based Neural Feedback Systemscited by 0
- 2026Stochastic World Models for Verifying Vision-Based Neural Feedback Systems29 Sep 2026
- 2026Bridging Control with Neural Network Verifier alpha-beta-CROWN: A Tutorial26 May 2026
- 2026The FABRIC Strategy for Verifying Neural Feedback Systems9 Mar 2026
- 2026Formal Synthesis of Certifiably Robust Neural Lyapunov-Barrier Certificates5 Feb 2026
- 2025Predictive Uncertainty for Runtime Assurance of a Real-Time Computer Vision-Based Landing System13 Aug 2025
- 2025Of Good Demons and Bad Angels: Guaranteeing Safe Control under Finite Precision30 Jul 2025
- 2025Verification of Visual Controllers via Compositional Geometric Transformations6 Jul 2025
- 2025Language Models That Walk the Talk: A Framework for Formal Fairness Certificates19 May 2025
- 2025BURNS: Backward Underapproximate Reachability for Neural-Feedback-Loop Systems6 May 2025
- 2025Learning Verifiable Control Policies Using Relaxed Verification23 Apr 2025
- 2025Neural Network-assisted Interval Reachability for Systems with Control Barrier Function-Based Safe Controllers11 Apr 2025
- 2025NP-Hard Lower Bound Complexity for Semantic Self-Verification26 Jan 2025
25 more
- 2024ICODE: Modeling Dynamical Systems with Extrinsic Input Information21 Nov 2024
- 2024Constraint-Aware Refinement for Safety Verification of Neural Feedback Loops30 Sep 2024
- 2024TTT: A Temporal Refinement Heuristic for Tenuously Tractable Discrete Time Reachability Problems19 Jul 2024
- 2024Provable Bounds on the Hessian of Neural Networks: Derivative-Preserving Reachability Analysis6 Jun 2024
- 2024Formally Verifying Deep Reinforcement Learning Controllers with Lyapunov Barrier Certificates22 May 2024
- 2024Runtime Monitoring and Fault Detection for Neural Network-Controlled Systems24 Mar 2024
- 2024Provably Safe Neural Network Controllers via Differential Dynamic Logic16 Feb 2024
- 2023Distributionally Robust Statistical Verification with Imprecise Neural Networks28 Aug 2023
- 2023Efficient Interaction-Aware Interval Analysis of Neural Network Feedback Loops27 Jul 2023
- 2023Verification of Neural Network Control Systems using Symbolic Zonotopes and Polynotopes26 Jun 2023
- 2023Bayesian Safety Validation for Failure Probability Estimation of Black-Box Systems3 May 2023
- 2023When Deep Learning Meets Polyhedral Theory: A Survey29 Apr 2023
- 2023Contraction-Guided Adaptive Partitioning for Reachability Analysis of Neural Network Controlled Systems7 Apr 2023
- 2023Interval Reachability of Nonlinear Dynamical Systems with Neural Network Controllers19 Jan 2023
- 2022Automated Reachability Analysis of Neural Network-Controlled Systems via Adaptive Polytopes14 Dec 2022
- 2022DRIP: Domain Refinement Iteration with Polytopes for Backward Reachability Analysis of Neural Feedback Loops9 Dec 2022
- 2022Reachable Polyhedral Marching (RPM): An Exact Analysis Tool for Deep-Learned Control Systems15 Oct 2022
- 2022A Hybrid Partitioning Strategy for Backward Reachability of Neural Feedback Loops14 Oct 2022
- 2022Backward Reachability Analysis of Neural Feedback Loops: Techniques for Linear and Nonlinear Systems28 Sep 2022
- 2022Toward Certified Robustness Against Real-World Distribution Shifts8 Jun 2022
- 2022Backward Reachability Analysis for Neural Feedback Loops14 Apr 2022
- 2022Fail-Safe Adversarial Generative Imitation Learning3 Mar 2022
- 2022Verifying Inverse Model Neural Networks4 Feb 2022
- 2021Verification of Neural-Network Control Systems by Integrating Taylor Models and Zonotopes16 Dec 2021
- 2021Interpretable Local Tree Surrogate Policies16 Sep 2021
- 2022Fail-Safe Adversarial Generative Imitation Learningcited by 2
- 2022Fail-Safe Adversarial Generative Imitation Learning3 Mar 2022
- 2023When Deep Learning Meets Polyhedral Theory: A Surveycited by 39
- 2021Verification of Neural-Network Control Systems by Integrating Taylor Models and Zonotopescited by 26
- 2022Backward Reachability Analysis of Neural Feedback Loops: Techniques for Linear and Nonlinear Systemscited by 18
- 2022Toward Certified Robustness Against Real-World Distribution Shiftscited by 16
- 2024Formally Verifying Deep Reinforcement Learning Controllers with Lyapunov Barrier Certificatescited by 15
- 2023Distributionally Robust Statistical Verification with Imprecise Neural Networkscited by 12
- 2022Backward Reachability Analysis for Neural Feedback Loopscited by 9
- 2023Efficient Interaction-Aware Interval Analysis of Neural Network Feedback Loopscited by 9
- 2023Interval Reachability of Nonlinear Dynamical Systems with Neural Network Controllerscited by 8
- 2024Provably Safe Neural Network Controllers via Differential Dynamic Logiccited by 7
- 2022A Hybrid Partitioning Strategy for Backward Reachability of Neural Feedback Loopscited by 6
- 2022Reachable Polyhedral Marching (RPM): An Exact Analysis Tool for Deep-Learned Control Systemscited by 6
12 most cited of 35 All 35 (JSON)
- 2026Bridging Control with Neural Network Verifier alpha-beta-CROWN: A Tutorial26 May 2026
- 2026The FABRIC Strategy for Verifying Neural Feedback Systems9 Mar 2026
- 2026Formal Synthesis of Certifiably Robust Neural Lyapunov-Barrier Certificates5 Feb 2026
- 2025Predictive Uncertainty for Runtime Assurance of a Real-Time Computer Vision-Based Landing System13 Aug 2025
- 2025Of Good Demons and Bad Angels: Guaranteeing Safe Control under Finite Precision30 Jul 2025
- 2025Verification of Visual Controllers via Compositional Geometric Transformations6 Jul 2025
- 2025Language Models That Walk the Talk: A Framework for Formal Fairness Certificates19 May 2025
- 2025BURNS: Backward Underapproximate Reachability for Neural-Feedback-Loop Systems6 May 2025
- 2025Learning Verifiable Control Policies Using Relaxed Verification23 Apr 2025
- 2025Neural Network-assisted Interval Reachability for Systems with Control Barrier Function-Based Safe Controllers11 Apr 2025
- 2025NP-Hard Lower Bound Complexity for Semantic Self-Verification26 Jan 2025
- 2024ICODE: Modeling Dynamical Systems with Extrinsic Input Information21 Nov 2024
12 newest of 35 All 35 (JSON)