Verification of Neural-Network Control Systems by Integrating Taylor Models and Zonotopes
Not on the map. Why?
Abstract (arXiv)
We study the verification problem for closed-loop dynamical systems with neural-network controllers (NNCS). This problem is commonly reduced to computing the set of reachable states. When considering dynamical systems and neural networks in isolation, there exist precise approaches for that task based on set representations respectively called Taylor models and zonotopes. However, the combination of these approaches to NNCS is non-trivial because, when converting between the set representations, dependency information gets lost in each control cycle and the accumulated approximation error quickly renders the result useless. We present an algorithm to chain approaches based on Taylor models and zonotopes, yielding a precise reachability algorithm for NNCS. Because the algorithm only acts at the interface of the isolated approaches, it is applicable to general dynamical systems and neural networks and can benefit from future advances in these areas. Our implementation delivers state-of-the-art performance and is the first to successfully analyze all benchmark problems of an annual reachability competition for NNCS.
Key facts. Cited by 26 papers in the map (data through 7 Oct 2026). Builds on 11 of its 39 references that are in the map. First posted on arXiv 16 Dec 2021.
Builds on
11 of 39 references.
References · 11
- 2019Algorithms for Verifying Deep Neural Networkscited by 221
- 2020NNV: The Neural Network Verification Tool for Deep Neural Networks and Learning-Enabled Cyber-Physical Systemscited by 128
- 2018Verisig: verifying safety properties of hybrid systems with neural network controllerscited by 83
- 2020Verification of Deep Convolutional Neural Networks Using ImageStarscited by 75
- 2021OVERT: An Algorithm for Safety Verification of Neural Network Control Policies for Nonlinear Systemscited by 37
- 2019JuliaReach: a Toolbox for Set-Based Reachabilitycited by 28
- 2019ReachNN: Reachability Analysis of Neural-Network Controlled Systemscited by 26
- 2018Reachable Set Estimation and Safety Verification for Piecewise Linear Systems with Neural Network Controllerscited by 15
- 2019Sparse Polynomial Zonotopes: A Novel Set Representation for Reachability Analysiscited by 14
- 2020Safety Verification of Neural Network Controlled Systemscited by 9
- 2021LazySets.jl: Scalable Symbolic-Numeric Set Computationscited by 4
Built on by
Citing papers per year: 2022: 3; 2023: 11; 2024: 7; 2025: 4; 2026: 1.
26 papers.
Sort:
By area:
- 2023Empowering Autonomous Driving with Large Language Models: A Safety Perspectivecited by 34
- 2022Open- and Closed-Loop Neural Network Verification using Polynomial Zonotopescited by 24
- 2023POLAR-Express: Efficient and Precise Formal Reachability Analysis of Neural-Network Controlled Systemscited by 12
- 2023Neural Abstractionscited by 11
- 2023Efficient Interaction-Aware Interval Analysis of Neural Network Feedback Loopscited by 9
- 2023Interval Reachability of Nonlinear Dynamical Systems with Neural Network Controllerscited by 8
- 2024Scalable Surrogate Verification of Image-based Neural Network Control Systems using Composition and Unrollingcited by 8
- 2024Provably Safe Neural Network Controllers via Differential Dynamic Logiccited by 7
- 2024ModelVerification.jl: a Comprehensive Toolbox for Formally Verifying Deep Neural Networkscited by 7
- 2023Contraction-Guided Adaptive Partitioning for Reachability Analysis of Neural Network Controlled Systemscited by 3
- 2023Verification of Neural Network Control Systems using Symbolic Zonotopes and Polynotopescited by 3
- 2024Certified Robust Invariant Polytope Training in Neural Controlled ODEscited by 3
14 more
- 2024Certified Training with Branch-and-Bound for Lyapunov-stable Neural Controlcited by 3
- 2025PICID: Proof-Driven Clause Learning in Neural Network Verificationcited by 3
- 2022Automated Reachability Analysis of Neural Network-Controlled Systems via Adaptive Polytopescited by 2
- 2023Forward Invariance in Neural Network Controlled Systemscited by 2
- 2022Taming Reachability Analysis of DNN-Controlled Systems via Abstraction-Based Trainingcited by 0
- 2023On the Trade-off Between Efficiency and Precision of Neural Abstractioncited by 0
- 2023The inverse problem for neural networkscited by 0
- 2023Compositional Inductive Invariant Based Verification of Neural Network Controlled Systemscited by 0
- 2024Learning from Uncertain Data: From Possible Worlds to Possible Modelscited by 0
- 2024The Reachability Problem for Neural-Network Control Systemscited by 0
- 2025Neural Network-assisted Interval Reachability for Systems with Control Barrier Function-Based Safe Controllerscited by 0
- 2025Of Good Demons and Bad Angels: Guaranteeing Safe Control under Finite Precisioncited by 0
- 2025Robust Verification of Controllers under State Uncertainty via Hamilton-Jacobi Reachability Analysiscited by 0
- 2026NNV3: Expanding Neural Network Verification to New Architectures and Domainscited by 0
- 2026NNV3: Expanding Neural Network Verification to New Architectures and Domains24 Sep 2026
- 2025Robust Verification of Controllers under State Uncertainty via Hamilton-Jacobi Reachability Analysis18 Nov 2025
- 2025Of Good Demons and Bad Angels: Guaranteeing Safe Control under Finite Precision30 Jul 2025
- 2025Neural Network-assisted Interval Reachability for Systems with Control Barrier Function-Based Safe Controllers11 Apr 2025
- 2025PICID: Proof-Driven Clause Learning in Neural Network Verification15 Mar 2025
- 2024Certified Training with Branch-and-Bound for Lyapunov-stable Neural Control27 Nov 2024
- 2024Certified Robust Invariant Polytope Training in Neural Controlled ODEs2 Aug 2024
- 2024The Reachability Problem for Neural-Network Control Systems6 Jul 2024
- 2024ModelVerification.jl: a Comprehensive Toolbox for Formally Verifying Deep Neural Networks30 Jun 2024
- 2024Scalable Surrogate Verification of Image-based Neural Network Control Systems using Composition and Unrolling28 May 2024
- 2024Learning from Uncertain Data: From Possible Worlds to Possible Models28 May 2024
- 2024Provably Safe Neural Network Controllers via Differential Dynamic Logic16 Feb 2024
14 more
- 2023Compositional Inductive Invariant Based Verification of Neural Network Controlled Systems17 Dec 2023
- 2023Empowering Autonomous Driving with Large Language Models: A Safety Perspective28 Nov 2023
- 2023Forward Invariance in Neural Network Controlled Systems16 Sep 2023
- 2023The inverse problem for neural networks27 Aug 2023
- 2023On the Trade-off Between Efficiency and Precision of Neural Abstraction28 Jul 2023
- 2023Efficient Interaction-Aware Interval Analysis of Neural Network Feedback Loops27 Jul 2023
- 2023Verification of Neural Network Control Systems using Symbolic Zonotopes and Polynotopes26 Jun 2023
- 2023Contraction-Guided Adaptive Partitioning for Reachability Analysis of Neural Network Controlled Systems7 Apr 2023
- 2023POLAR-Express: Efficient and Precise Formal Reachability Analysis of Neural-Network Controlled Systems31 Mar 2023
- 2023Neural Abstractions27 Jan 2023
- 2023Interval Reachability of Nonlinear Dynamical Systems with Neural Network Controllers19 Jan 2023
- 2022Automated Reachability Analysis of Neural Network-Controlled Systems via Adaptive Polytopes14 Dec 2022
- 2022Taming Reachability Analysis of DNN-Controlled Systems via Abstraction-Based Training21 Nov 2022
- 2022Open- and Closed-Loop Neural Network Verification using Polynomial Zonotopes6 Jul 2022
- 2022Open- and Closed-Loop Neural Network Verification using Polynomial Zonotopescited by 24
- 2023POLAR-Express: Efficient and Precise Formal Reachability Analysis of Neural-Network Controlled Systemscited by 12
- 2023Neural Abstractionscited by 11
- 2023Efficient Interaction-Aware Interval Analysis of Neural Network Feedback Loopscited by 9
- 2023Interval Reachability of Nonlinear Dynamical Systems with Neural Network Controllerscited by 8
- 2024Scalable Surrogate Verification of Image-based Neural Network Control Systems using Composition and Unrollingcited by 8
- 2024Provably Safe Neural Network Controllers via Differential Dynamic Logiccited by 7
- 2024ModelVerification.jl: a Comprehensive Toolbox for Formally Verifying Deep Neural Networkscited by 7
- 2023Contraction-Guided Adaptive Partitioning for Reachability Analysis of Neural Network Controlled Systemscited by 3
- 2023Verification of Neural Network Control Systems using Symbolic Zonotopes and Polynotopescited by 3
- 2024Certified Robust Invariant Polytope Training in Neural Controlled ODEscited by 3
- 2024Certified Training with Branch-and-Bound for Lyapunov-stable Neural Controlcited by 3
12 most cited of 25 All 25 (JSON)
- 2026NNV3: Expanding Neural Network Verification to New Architectures and Domains24 Sep 2026
- 2025Robust Verification of Controllers under State Uncertainty via Hamilton-Jacobi Reachability Analysis18 Nov 2025
- 2025Of Good Demons and Bad Angels: Guaranteeing Safe Control under Finite Precision30 Jul 2025
- 2025Neural Network-assisted Interval Reachability for Systems with Control Barrier Function-Based Safe Controllers11 Apr 2025
- 2025PICID: Proof-Driven Clause Learning in Neural Network Verification15 Mar 2025
- 2024Certified Training with Branch-and-Bound for Lyapunov-stable Neural Control27 Nov 2024
- 2024Certified Robust Invariant Polytope Training in Neural Controlled ODEs2 Aug 2024
- 2024The Reachability Problem for Neural-Network Control Systems6 Jul 2024
- 2024ModelVerification.jl: a Comprehensive Toolbox for Formally Verifying Deep Neural Networks30 Jun 2024
- 2024Scalable Surrogate Verification of Image-based Neural Network Control Systems using Composition and Unrolling28 May 2024
- 2024Learning from Uncertain Data: From Possible Worlds to Possible Models28 May 2024
- 2024Provably Safe Neural Network Controllers via Differential Dynamic Logic16 Feb 2024
12 newest of 25 All 25 (JSON)