Traversing the Local Polytopes of ReLU Neural Networks: A Unified Approach for Network Verification
Not on the map. Why?
Abstract (arXiv)
Although neural networks (NNs) with ReLU activation functions have found success in a wide range of applications, their adoption in risk-sensitive settings has been limited by the concerns on robustness and interpretability. Previous works to examine robustness and to improve interpretability partially exploited the piecewise linear function form of ReLU NNs. In this paper, we explore the unique topological structure that ReLU NNs create in the input space, identifying the adjacency among the partitioned local polytopes and developing a traversing algorithm based on this adjacency. Our polytope traversing algorithm can be adapted to verify a wide range of network properties related to robustness and interpretability, providing an unified approach to examine the network behavior. As the traversing algorithm explicitly visits all local polytopes, it returns a clear and full picture of the network behavior within the traversed region. The time and space complexity of the traversing algorithm is determined by the number of a ReLU NN's partitioning hyperplanes passing through the traversing region.
Key facts. Cited by 13 papers in the map (data through 14 Oct 2026). Builds on 31 of its 45 references that are in the map. First posted on arXiv 17 Nov 2021.
Builds on
31 of 45 references.
References · 31
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2013Intriguing properties of neural networkscited by 5,155
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,998
- 2017Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networkscited by 744
- 2017Nonparametric regression using deep neural networks with ReLU activation functioncited by 433
- 2014On the Number of Linear Regions of Deep Neural Networkscited by 381
- 2017The Expressive Power of Neural Networks: A View from the Widthcited by 320
- 2016Understanding Deep Neural Networks with Rectified Linear Unitscited by 257
- 2018Towards Fast Computation of Certified Robustness for ReLU Networkscited by 255
- 2017Formal Verification of Piece-Wise Linear Feed-Forward Neural Networkscited by 242
- 2019Algorithms for Verifying Deep Neural Networkscited by 221
- 2017Bounding and Counting Linear Regions of Deep Neural Networkscited by 161
19 more
- 2019Deep ReLU Networks Have Surprisingly Few Activation Patternscited by 161
- 2018Stochastic Gradient Descent Optimizes Over-parameterized Deep ReLU Networkscited by 141
- 2018Strong mixed-integer programming formulations for trained neural networkscited by 115
- 2016Measuring Neural Net Robustness with Constraintscited by 90
- 2018Provable Robustness of ReLU networks via Maximization of Linear Regionscited by 51
- 2020Certified Monotonic Neural Networkscited by 51
- 2020Reachable Polyhedral Marching (RPM): A Safety Verification Algorithm for Robotic Systems with Deep Neural Network Componentscited by 36
- 2018Exact and Consistent Interpretation for Piecewise Linear Neural Networks: A Closed Form Solutioncited by 32
- 2020Unwrapping The Black Box of Deep ReLU Networks: Interpretability, Diagnostics, and Simplificationcited by 32
- 2019Enhancing Explainability of Neural Networks through Architecture Constraintscited by 29
- 2017Deep Neural Networks as 0-1 Mixed Integer Linear Programs: A Feasibility Studycited by 25
- 2017Reachable Set Computation and Safety Verification for Neural Networks with ReLU Activationscited by 22
- 2019How to Incorporate Monotonicity in Deep Networks While Preserving Flexibility?cited by 21
- 2019Scaling up the randomized gradient-free adversarial attack reveals overestimation of robustness using established attackscited by 11
- 2020Reachability Analysis for Feed-Forward Neural Networks using Face Latticescited by 11
- 2018A randomized gradient-free attack on ReLU networkscited by 8
- 2020Testing Monotonicity of Machine Learning Modelscited by 8
- 2019Dissecting Deep Neural Networkscited by 7
- 2021Self-interpretable Convolutional Neural Networks for Text Classificationcited by 5
Built on by
Citing papers per year: 2022: 5; 2023: 3; 2024: 3; 2025: 0; 2026: 2.
13 papers.
Sort:
By area:
- 2023When Deep Learning Meets Polyhedral Theory: A Surveycited by 39
- 2022Interpreting Neural Networks through the Polytope Lenscited by 33
- 2024FairProof : Confidential and Certifiable Fairness for Neural Networkscited by 13
- 2023ReLU Neural Networks, Polyhedral Decompositions, and Persistent Homologcited by 10
- 2022Reachable Polyhedral Marching (RPM): An Exact Analysis Tool for Deep-Learned Control Systemscited by 6
- 2026Regime Change Hypothesis: Foundations for Decoupled Dynamics in Neural Network Trainingcited by 3
- 2022Dual Graphs of Polyhedral Decompositions for the Detection of Adversarial Attackscited by 2
- 2024Defining Neural Network Architecture through Polytope Structures of Datasetcited by 2
- 2022Verifying Attention Robustness of Deep Neural Networks against Semantic Perturbationscited by 1
- 2023Neural Polytopescited by 1
- 2024The Topos of Transformer Networkscited by 1
- 2022Support Vectors and Gradient Dynamics of Single-Neuron ReLU Networkscited by 0
1 more
- 2026Causal Explanations from the Geometric Properties of ReLU Neural Networks11 May 2026
- 2026Regime Change Hypothesis: Foundations for Decoupled Dynamics in Neural Network Training9 Feb 2026
- 2024The Topos of Transformer Networks27 Mar 2024
- 2024FairProof : Confidential and Certifiable Fairness for Neural Networks19 Feb 2024
- 2024Defining Neural Network Architecture through Polytope Structures of Dataset4 Feb 2024
- 2023Neural Polytopes3 Jul 2023
- 2023ReLU Neural Networks, Polyhedral Decompositions, and Persistent Homolog30 Jun 2023
- 2023When Deep Learning Meets Polyhedral Theory: A Survey29 Apr 2023
- 2022Dual Graphs of Polyhedral Decompositions for the Detection of Adversarial Attacks23 Nov 2022
- 2022Interpreting Neural Networks through the Polytope Lens22 Nov 2022
- 2022Reachable Polyhedral Marching (RPM): An Exact Analysis Tool for Deep-Learned Control Systems15 Oct 2022
- 2022Verifying Attention Robustness of Deep Neural Networks against Semantic Perturbations13 Jul 2022
1 more
- 2022Interpreting Neural Networks through the Polytope Lenscited by 33
- 2022Interpreting Neural Networks through the Polytope Lens22 Nov 2022
- 2023When Deep Learning Meets Polyhedral Theory: A Surveycited by 39
- 2024FairProof : Confidential and Certifiable Fairness for Neural Networkscited by 13
- 2023ReLU Neural Networks, Polyhedral Decompositions, and Persistent Homologcited by 10
- 2022Reachable Polyhedral Marching (RPM): An Exact Analysis Tool for Deep-Learned Control Systemscited by 6
- 2026Regime Change Hypothesis: Foundations for Decoupled Dynamics in Neural Network Trainingcited by 3
- 2022Dual Graphs of Polyhedral Decompositions for the Detection of Adversarial Attackscited by 2
- 2024Defining Neural Network Architecture through Polytope Structures of Datasetcited by 2
- 2022Verifying Attention Robustness of Deep Neural Networks against Semantic Perturbationscited by 1
- 2023Neural Polytopescited by 1
- 2024The Topos of Transformer Networkscited by 1
- 2022Support Vectors and Gradient Dynamics of Single-Neuron ReLU Networkscited by 0
- 2026Causal Explanations from the Geometric Properties of ReLU Neural Networkscited by 0
- 2026Causal Explanations from the Geometric Properties of ReLU Neural Networks11 May 2026
- 2026Regime Change Hypothesis: Foundations for Decoupled Dynamics in Neural Network Training9 Feb 2026
- 2024The Topos of Transformer Networks27 Mar 2024
- 2024FairProof : Confidential and Certifiable Fairness for Neural Networks19 Feb 2024
- 2024Defining Neural Network Architecture through Polytope Structures of Dataset4 Feb 2024
- 2023Neural Polytopes3 Jul 2023
- 2023ReLU Neural Networks, Polyhedral Decompositions, and Persistent Homolog30 Jun 2023
- 2023When Deep Learning Meets Polyhedral Theory: A Survey29 Apr 2023
- 2022Dual Graphs of Polyhedral Decompositions for the Detection of Adversarial Attacks23 Nov 2022
- 2022Reachable Polyhedral Marching (RPM): An Exact Analysis Tool for Deep-Learned Control Systems15 Oct 2022
- 2022Verifying Attention Robustness of Deep Neural Networks against Semantic Perturbations13 Jul 2022
- 2022Support Vectors and Gradient Dynamics of Single-Neuron ReLU Networks11 Feb 2022