Excitement Surfeited Turns to Errors: Deep Learning Testing Framework Based on Excitable Neurons
Not on the map. Why?
Abstract (arXiv)
Despite impressive capabilities and outstanding performance, deep neural networks (DNNs) have captured increasing public concern about their security problems, due to their frequently occurred erroneous behaviors. Therefore, it is necessary to conduct a systematical testing for DNNs before they are deployed to real-world applications. Existing testing methods have provided fine-grained metrics based on neuron coverage and proposed various approaches to improve such metrics. However, it has been gradually realized that a higher neuron coverage does textitnot necessarily represent better capabilities in identifying defects that lead to errors. Besides, coverage-guided methods cannot hunt errors due to faulty training procedure. So the robustness improvement of DNNs via retraining by these testing examples are unsatisfactory. To address this challenge, we introduce the concept of excitable neurons based on Shapley value and design a novel white-box testing framework for DNNs, namely DeepSensor. It is motivated by our observation that neurons with larger responsibility towards model loss changes due to small perturbations are more likely related to incorrect corner cases due to potential defects. By maximizing the number of excitable neurons concerning various wrong behaviors of models, DeepSensor can generate testing examples that effectively trigger more errors due to adversarial inputs, polluted data and incomplete training. Extensive experiments implemented on both image classification models and speaker recognition models have demonstrated the superiority of DeepSensor.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 29 of its 63 references that are in the map. First posted on arXiv 12 Feb 2022.
Builds on
29 of 63 references.
References · 29
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
- 2014ImageNet Large Scale Visual Recognition Challengecited by 8,441
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2013Intriguing properties of neural networkscited by 5,114
- 2017MobileNets: Efficient Convolutional Neural Networks for Mobile Vision Applicationscited by 3,827
- 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,315
- 2018Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examplescited by 1,259
- 2015The Limitations of Deep Learning in Adversarial Settingscited by 784
- 2017DeepXplore: Automated Whitebox Testing of Deep Learning Systemscited by 307
- 2017DeepTest: Automated Testing of Deep-Neural-Network-driven Autonomous Carscited by 249
17 more
- 2018Evaluating the Robustness of Neural Networks: An Extreme Value Theory Approachcited by 181
- 2018DeepGauge: Multi-Granularity Testing Criteria for Deep Learning Systemscited by 144
- 2018L-Shapley and C-Shapley: Efficient Model Interpretation for Structured Datacited by 100
- 2020Neuron Shapley: Discovering the Responsible Neuronscited by 98
- 2018TensorFuzz: Debugging Neural Networks with Coverage-Guided Fuzzingcited by 67
- 2018DeepMutation: Mutation Testing of Deep Learning Systemscited by 66
- 2018DLFuzz: Differential Fuzzing Testing of Deep Learning Systemscited by 64
- 2017Deep Speaker: an End-to-End Neural Speaker Embedding Systemcited by 56
- 2017Detecting Adversarial Image Examples in Deep Networks with Adaptive Noise Reductioncited by 49
- 2017Feature-Guided Black-Box Safety Testing of Deep Neural Networkscited by 48
- 2021Few-shot Backdoor Defense Using Shapley Estimationcited by 40
- 2020Interpreting and Boosting Dropout from a Game-Theoretic Viewcited by 34
- 2021RobOT: Robustness-Oriented Testing for Deep Learning Systemscited by 27
- 2021A Unified Game-Theoretic Interpretation of Adversarial Robustnesscited by 17
- 2019DC-SPP-YOLO: Dense Connection and Spatial Pyramid Pooling Based YOLO for Object Detectioncited by 14
- 2021Instance-wise or Class-wise? A Tale of Neighbor Shapley for Concept-based Explanationcited by 9
- 2019There is Limited Correlation between Coverage and Robustness for Deep Neural Networkscited by 8
Built on by
Not cited yet.