Reachability Analysis of Neural Feedback Loops
Not on the map. Why?
Abstract (arXiv)
Neural Networks (NNs) can provide major empirical performance improvements for closed-loop systems, but they also introduce challenges in formally analyzing those systems' safety properties. In particular, this work focuses on estimating the forward reachable set of textitneural feedback loops (closed-loop systems with NN controllers). Recent work provides bounds on these reachable sets, but the computationally tractable approaches yield overly conservative bounds (thus cannot be used to verify useful properties), and the methods that yield tighter bounds are too intensive for online computation. This work bridges the gap by formulating a convex optimization problem for the reachability analysis of closed-loop systems with NN controllers. While the solutions are less tight than previous (semidefinite program-based) methods, they are substantially faster to compute, and some of those computational time savings can be used to refine the bounds through new input set partitioning techniques, which is shown to dramatically reduce the tightness gap. The new framework is developed for systems with uncertainty (e.g., measurement and process noise) and nonlinearities (e.g., polynomial dynamics), and thus is shown to be applicable to real-world systems. To inform the design of an initial state set when only the target state set is known/specified, a novel algorithm for backward reachability analysis is also provided, which computes the set of states that are guaranteed to lead to the target set. The numerical experiments show that our approach (based on linear relaxations and partitioning) gives a 5× reduction in conservatism in 150× less computation time compared to the state-of-the-art. Furthermore, experiments on quadrotor, 270-state, and polynomial systems demonstrate the method's ability to handle uncertainty sources, high dimensionality, and nonlinear dynamics, respectively.
Key facts. Cited by 41 papers in the map (data through 14 Oct 2026). Builds on 24 of its 58 references that are in the map. First posted on arXiv 9 Aug 2021.
Builds on
24 of 58 references.
References · 24
- 2013Intriguing properties of neural networkscited by 5,155
- 2017Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networkscited by 744
- 2016CVXPY: A Python-Embedded Modeling Language for Convex Optimizationcited by 641
- 2017Provable defenses against adversarial examples via the convex outer adversarial polytopecited by 567
- 2018Efficient Neural Network Robustness Certification with General Activation Functionscited by 445
- 2018Invertible Residual Networkscited by 365
- 2018On the Effectiveness of Interval Bound Propagation for Training Verifiably Robust Modelscited by 328
- 2018Certified Defenses against Adversarial Examplescited by 306
- 2016Control Barrier Function Based Quadratic Programs for Safety Critical Systemscited by 287
- 2016Safety Verification of Deep Neural Networkscited by 263
- 2018Towards Fast Computation of Certified Robustness for ReLU Networkscited by 255
- 2017Formal Verification of Piece-Wise Linear Feed-Forward Neural Networkscited by 242
12 more
- 2018Analyzing Inverse Problems with Invertible Neural Networkscited by 242
- 2017Hamilton-Jacobi Reachability: A Brief Overview and Recent Advancescited by 201
- 2020Fast and Complete: Enabling Complete Neural Network Verification with Rapid and Massively Parallel Incomplete Verifierscited by 187
- 2017An approach to reachability analysis for feed-forward ReLU neural networkscited by 127
- 2019Safety Verification and Robustness Analysis of Neural Networks via Quadratic Constraints and Semidefinite Programmingcited by 101
- 2018Verisig: verifying safety properties of hybrid systems with neural network controllerscited by 84
- 2017Output Reachable Set Estimation and Verification for Multi-Layer Neural Networkscited by 80
- 2020Reach-SDP: Reachability Analysis of Closed-Loop Systems with Neural Network Controllers via Semidefinite Programmingcited by 43
- 2020Reachable Set Estimation for Neural Network Control Systems: A Simulation-Guided Approachcited by 36
- 2019ReachNN: Reachability Analysis of Neural-Network Controlled Systemscited by 26
- 2020Certifiable Robustness to Adversarial State Uncertainty in Deep Reinforcement Learningcited by 24
- 2021Efficient Reachability Analysis of Closed-Loop Systems with Neural Network Controllerscited by 10
Built on by
Citing papers per year: 2021: 2; 2022: 5; 2023: 12; 2024: 9; 2025: 8; 2026: 5.
41 papers.
Sort:
By area:
- 2023The Safety Filter: A Unified View of Safety-Critical Control in Autonomous Systemscited by 88
- 2023Provably Bounding Neural Network Preimagescited by 29
- 2024Lyapunov-stable Neural Control for State and Output Feedback: A Novel Formulationcited by 25
- 2022Backward Reachability Analysis of Neural Feedback Loops: Techniques for Linear and Nonlinear Systemscited by 18
- 2021Neural Network Verification in Controlcited by 14
- 2021A Simple and Efficient Sampling-based Algorithm for General Reachability Analysiscited by 12
- 2022Backward Reachability Analysis for Neural Feedback Loopscited by 9
- 2023Interval Reachability of Nonlinear Dynamical Systems with Neural Network Controllerscited by 9
- 2023Efficient Interaction-Aware Interval Analysis of Neural Network Feedback Loopscited by 9
- 2023Reachability Analysis of Neural Network Control Systemscited by 8
- 2022A Hybrid Partitioning Strategy for Backward Reachability of Neural Feedback Loopscited by 6
- 2022DRIP: Domain Refinement Iteration with Polytopes for Backward Reachability Analysis of Neural Feedback Loopscited by 6
29 more
- 2023DeepBern-Nets: Taming the Complexity of Certifying Neural Networks using Bernstein Polynomial Activations and Precise Bound Propagationcited by 5
- 2023Hybrid Zonotopes Exactly Represent ReLU Neural Networkscited by 4
- 2024Constraint-Aware Refinement for Safety Verification of Neural Feedback Loopscited by 4
- 2023Contraction-Guided Adaptive Partitioning for Reachability Analysis of Neural Network Controlled Systemscited by 3
- 2023Forward Invariance in Neural Network Controlled Systemscited by 3
- 2023Value Approximation for Two-Player General-Sum Differential Games with State Constraintscited by 3
- 2024Certified Robust Invariant Polytope Training in Neural Controlled ODEscited by 3
- 2024Certified Training with Branch-and-Bound for Lyapunov-stable Neural Controlcited by 3
- 2025Predictive Uncertainty for Runtime Assurance of a Real-Time Computer Vision-Based Landing Systemcited by 3
- 2022Automated Reachability Analysis of Neural Network-Controlled Systems via Adaptive Polytopescited by 2
- 2025BURNS: Backward Underapproximate Reachability for Neural-Feedback-Loop Systemscited by 2
- 2025Formal Safety Verification and Refinement for Generative Motion Planners via Certified Local Stabilizationcited by 2
- 2026Factored Diffusion Policies:Compositionally Generalized Robot Control with a Single Score Networkcited by 2
- 2025Learning Verifiable Control Policies Using Relaxed Verificationcited by 1
- 2025ECLipsE-Gen-Local: Efficient Compositional Local Lipschitz Estimates for Deep Neural Networkscited by 1
- 2026Scalable Data-Driven Reachability Analysis and Control via Koopman Operators with Conformal Coverage Guaranteescited by 1
- 2026Permissive Safety Through Trusted Inference: Verifiable Belief-Space Neural Safety Filters for Assured Interactive Roboticscited by 1
- 2023Convex Hulls of Reachable Setscited by 0
- 2023Rational Neural Network Controllerscited by 0
- 2024Collision Avoidance Verification of Multiagent Systems with Learned Policiescited by 0
- 2024Runtime Monitoring and Fault Detection for Neural Network-Controlled Systemscited by 0
- 2024Learning a Stable, Safe, Distributed Feedback Controller for a Heterogeneous Platoon of Autonomous Vehiclescited by 0
- 2024Predicting AI Agent Behavior through Approximation of the Perron-Frobenius Operatorcited by 0
- 2024Training Safe Neural Networks with Global SDP Boundscited by 0
- 2025Efficient Reachability Analysis for Convolutional Neural Networks Using Hybrid Zonotopescited by 0
- 2025Neural Network-assisted Interval Reachability for Systems with Control Barrier Function-Based Safe Controllerscited by 0
- 2025Verification of Visual Controllers via Compositional Geometric Transformationscited by 0
- 2026Probabilistic Verification of Recurrent Neural Networks for Single and Multi-Agent Reinforcement Learningcited by 0
- 2026A Survey on the Verification of Reinforcement Learning Policiescited by 0
- 2026Permissive Safety Through Trusted Inference: Verifiable Belief-Space Neural Safety Filters for Assured Interactive Robotics1 Jun 2026
- 2026Factored Diffusion Policies:Compositionally Generalized Robot Control with a Single Score Network21 May 2026
- 2026A Survey on the Verification of Reinforcement Learning Policies14 May 2026
- 2026Probabilistic Verification of Recurrent Neural Networks for Single and Multi-Agent Reinforcement Learning14 May 2026
- 2026Scalable Data-Driven Reachability Analysis and Control via Koopman Operators with Conformal Coverage Guarantees3 Jan 2026
- 2025ECLipsE-Gen-Local: Efficient Compositional Local Lipschitz Estimates for Deep Neural Networks6 Oct 2025
- 2025Formal Safety Verification and Refinement for Generative Motion Planners via Certified Local Stabilization24 Sep 2025
- 2025Predictive Uncertainty for Runtime Assurance of a Real-Time Computer Vision-Based Landing System13 Aug 2025
- 2025Verification of Visual Controllers via Compositional Geometric Transformations6 Jul 2025
- 2025BURNS: Backward Underapproximate Reachability for Neural-Feedback-Loop Systems6 May 2025
- 2025Learning Verifiable Control Policies Using Relaxed Verification23 Apr 2025
- 2025Neural Network-assisted Interval Reachability for Systems with Control Barrier Function-Based Safe Controllers11 Apr 2025
29 more
- 2025Efficient Reachability Analysis for Convolutional Neural Networks Using Hybrid Zonotopes13 Mar 2025
- 2024Certified Training with Branch-and-Bound for Lyapunov-stable Neural Control27 Nov 2024
- 2024Constraint-Aware Refinement for Safety Verification of Neural Feedback Loops30 Sep 2024
- 2024Training Safe Neural Networks with Global SDP Bounds15 Sep 2024
- 2024Certified Robust Invariant Polytope Training in Neural Controlled ODEs2 Aug 2024
- 2024Predicting AI Agent Behavior through Approximation of the Perron-Frobenius Operator4 Jun 2024
- 2024Learning a Stable, Safe, Distributed Feedback Controller for a Heterogeneous Platoon of Autonomous Vehicles18 Apr 2024
- 2024Lyapunov-stable Neural Control for State and Output Feedback: A Novel Formulation11 Apr 2024
- 2024Runtime Monitoring and Fault Detection for Neural Network-Controlled Systems24 Mar 2024
- 2024Collision Avoidance Verification of Multiagent Systems with Learned Policies5 Mar 2024
- 2023Value Approximation for Two-Player General-Sum Differential Games with State Constraints28 Nov 2023
- 2023Forward Invariance in Neural Network Controlled Systems16 Sep 2023
- 2023The Safety Filter: A Unified View of Safety-Critical Control in Autonomous Systems11 Sep 2023
- 2023Efficient Interaction-Aware Interval Analysis of Neural Network Feedback Loops27 Jul 2023
- 2023Rational Neural Network Controllers12 Jul 2023
- 2023DeepBern-Nets: Taming the Complexity of Certifying Neural Networks using Bernstein Polynomial Activations and Precise Bound Propagation22 May 2023
- 2023Contraction-Guided Adaptive Partitioning for Reachability Analysis of Neural Network Controlled Systems7 Apr 2023
- 2023Hybrid Zonotopes Exactly Represent ReLU Neural Networks5 Apr 2023
- 2023Convex Hulls of Reachable Sets30 Mar 2023
- 2023Provably Bounding Neural Network Preimages2 Feb 2023
- 2023Reachability Analysis of Neural Network Control Systems28 Jan 2023
- 2023Interval Reachability of Nonlinear Dynamical Systems with Neural Network Controllers19 Jan 2023
- 2022Automated Reachability Analysis of Neural Network-Controlled Systems via Adaptive Polytopes14 Dec 2022
- 2022DRIP: Domain Refinement Iteration with Polytopes for Backward Reachability Analysis of Neural Feedback Loops9 Dec 2022
- 2022A Hybrid Partitioning Strategy for Backward Reachability of Neural Feedback Loops14 Oct 2022
- 2022Backward Reachability Analysis of Neural Feedback Loops: Techniques for Linear and Nonlinear Systems28 Sep 2022
- 2022Backward Reachability Analysis for Neural Feedback Loops14 Apr 2022
- 2021A Simple and Efficient Sampling-based Algorithm for General Reachability Analysis10 Dec 2021
- 2021Neural Network Verification in Control30 Sep 2021
- 2023The Safety Filter: A Unified View of Safety-Critical Control in Autonomous Systemscited by 88
- 2023Provably Bounding Neural Network Preimagescited by 29
- 2024Lyapunov-stable Neural Control for State and Output Feedback: A Novel Formulationcited by 25
- 2022Backward Reachability Analysis of Neural Feedback Loops: Techniques for Linear and Nonlinear Systemscited by 18
- 2021Neural Network Verification in Controlcited by 14
- 2021A Simple and Efficient Sampling-based Algorithm for General Reachability Analysiscited by 12
- 2022Backward Reachability Analysis for Neural Feedback Loopscited by 9
- 2023Interval Reachability of Nonlinear Dynamical Systems with Neural Network Controllerscited by 9
- 2023Efficient Interaction-Aware Interval Analysis of Neural Network Feedback Loopscited by 9
- 2023Reachability Analysis of Neural Network Control Systemscited by 8
- 2022A Hybrid Partitioning Strategy for Backward Reachability of Neural Feedback Loopscited by 6
- 2022DRIP: Domain Refinement Iteration with Polytopes for Backward Reachability Analysis of Neural Feedback Loopscited by 6
12 most cited of 39 All 39 (JSON)
- 2026Permissive Safety Through Trusted Inference: Verifiable Belief-Space Neural Safety Filters for Assured Interactive Robotics1 Jun 2026
- 2026Probabilistic Verification of Recurrent Neural Networks for Single and Multi-Agent Reinforcement Learning14 May 2026
- 2026Scalable Data-Driven Reachability Analysis and Control via Koopman Operators with Conformal Coverage Guarantees3 Jan 2026
- 2025ECLipsE-Gen-Local: Efficient Compositional Local Lipschitz Estimates for Deep Neural Networks6 Oct 2025
- 2025Formal Safety Verification and Refinement for Generative Motion Planners via Certified Local Stabilization24 Sep 2025
- 2025Predictive Uncertainty for Runtime Assurance of a Real-Time Computer Vision-Based Landing System13 Aug 2025
- 2025Verification of Visual Controllers via Compositional Geometric Transformations6 Jul 2025
- 2025BURNS: Backward Underapproximate Reachability for Neural-Feedback-Loop Systems6 May 2025
- 2025Learning Verifiable Control Policies Using Relaxed Verification23 Apr 2025
- 2025Neural Network-assisted Interval Reachability for Systems with Control Barrier Function-Based Safe Controllers11 Apr 2025
- 2025Efficient Reachability Analysis for Convolutional Neural Networks Using Hybrid Zonotopes13 Mar 2025
- 2024Certified Training with Branch-and-Bound for Lyapunov-stable Neural Control27 Nov 2024
12 newest of 39 All 39 (JSON)