Verifying Learning-Based Robotic Navigation Systems
Not on the map. Why?
Abstract (arXiv)
Deep reinforcement learning (DRL) has become a dominant deep-learning paradigm for tasks where complex policies are learned within reactive systems. Unfortunately, these policies are known to be susceptible to bugs. Despite significant progress in DNN verification, there has been little work demonstrating the use of modern verification tools on real-world, DRL-controlled systems. In this case study, we attempt to begin bridging this gap, and focus on the important task of mapless robotic navigation -- a classic robotics problem, in which a robot, usually controlled by a DRL agent, needs to efficiently and safely navigate through an unknown arena towards a target. We demonstrate how modern verification engines can be used for effective model selection, i.e., selecting the best available policy for the robot in question from a pool of candidate policies. Specifically, we use verification to detect and rule out policies that may demonstrate suboptimal behavior, such as collisions and infinite loops. We also apply verification to identify models with overly conservative behavior, thus allowing users to choose superior policies, which might be better at finding shorter paths to a target. To validate our work, we conducted extensive experiments on an actual robot, and confirmed that the suboptimal policies detected by our method were indeed flawed. We also demonstrate the superiority of our verification-driven approach over state-of-the-art, gradient attacks. Our work is the first to establish the usefulness of DNN verification in identifying and filtering out suboptimal DRL policies in real-world robots, and we believe that the methods presented here are applicable to a wide range of systems that incorporate deep-learning-based agents.
Key facts. Cited by 33 papers in the map (data through 14 Oct 2026). Builds on 50 of its 97 references that are in the map. First posted on arXiv 26 May 2022.
Builds on
50 of 97 references.
References · 50
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,364
- 2017Proximal Policy Optimization Algorithmscited by 15,215
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2013Intriguing properties of neural networkscited by 5,155
- 2013Playing Atari with Deep Reinforcement Learningcited by 3,274
- 2016Adversarial examples in the physical worldcited by 1,769
- 2015Deep Reinforcement Learning with Double Q-learningcited by 1,745
- 2016End to End Learning for Self-Driving Carscited by 1,009
- 2017Constrained Policy Optimizationcited by 983
- 2016Universal adversarial perturbationscited by 784
- 2017Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networkscited by 744
- 2017Safe Reinforcement Learning via Shieldingcited by 449
38 more
- 2021Safe Learning in Robotics: From Learning-Based Control to Safe Reinforcement Learningcited by 371
- 2017Deep Reinforcement Learning: An Overviewcited by 333
- 2020Responsive Safety in Reinforcement Learning by PID Lagrangian Methodscited by 316
- 2016Safety Verification of Deep Neural Networkscited by 263
- 2017Formal Verification of Piece-Wise Linear Feed-Forward Neural Networkscited by 242
- 2018Unity: A General Platform for Intelligent Agentscited by 236
- 2018Formal Security Analysis of Neural Networks using Symbolic Intervalscited by 185
- 2019IPO: Interior-point Policy Optimization under Constraintscited by 132
- 2017An approach to reachability analysis for feed-forward ReLU neural networkscited by 127
- 2020Safe Reinforcement Learning in Constrained Markov Decision Processescited by 115
- 2017Virtual-to-real Deep Reinforcement Learning: Continuous Control of Mobile Robots for Mapless Navigationcited by 98
- 2020Sample Efficient Reinforcement Learning with REINFORCEcited by 86
- 2018Learning Navigation Behaviors End-to-End with AutoRLcited by 70
- 2019An Abstraction-Based Framework for Neural Network Verificationcited by 68
- 2019Quantitative Verification of Neural Networks And its Security Applicationscited by 56
- 2016Deep Reinforcement Learning with Successor Features for Navigation across Similar Environmentscited by 50
- 2020An SMT-Based Approach for Verifying Binarized Neural Networkscited by 47
- 2018Formal Verification of Neural Network Controlled Autonomous Systemscited by 41
- 2019Fastened CROWN: Tightened Neural Network Robustness Certificatescited by 39
- 2018Reinforced Imitation: Sample Efficient Deep Reinforcement Learning for Map-less Navigation by Leveraging Prior Demonstrationscited by 38
- 2020Parallelization Techniques for Verifying Neural Networkscited by 36
- 2021Neural Network Robustness as a Verification Property: A Principled Case Studycited by 35
- 2021Towards Scalable Verification of Deep Reinforcement Learningcited by 33
- 2021Direct Behavior Specification via Constrained Reinforcement Learningcited by 31
- 2020Verifying Recurrent Neural Networks using Invariant Inferencecited by 26
- 2020Global Optimization of Objective Functions Represented by ReLU Networkscited by 24
- 2021Safe Reinforcement Learning using Formal Verification for Tissue Retraction in Autonomous Robotic-Assisted Surgerycited by 24
- 2022An Abstraction-Refinement Approach to Verifying Convolutional Neural Networkscited by 24
- 2022Efficient Neural Network Analysis with Sum-of-Infeasibilitiescited by 24
- 2021Pruning and Slicing Neural Networks using Formal Verificationcited by 20
- 2022Verification-Aided Deep Ensemble Selectioncited by 18
- 2018Curiosity-driven Exploration for Mapless Navigation with Deep Reinforcement Learningcited by 14
- 2021Minimal Multi-Layer Modifications of Deep Neural Networkscited by 14
- 2018Toward Scalable Verification for Safety-Critical Deep Networkscited by 12
- 2019Mo"ET: Mixture of Expert Trees and its Application to Verifiable Reinforcement Learningcited by 12
- 2021Curriculum Learning for Safe Mapless Navigationcited by 11
- 2021Benchmarking Safe Deep Reinforcement Learning in Aquatic Navigationcited by 10
- 2019Long Range Neural Navigation Policies for the Real Worldcited by 4
Built on by
Citing papers per year: 2022: 5; 2023: 7; 2024: 14; 2025: 6; 2026: 1.
33 papers.
Sort:
By area:
- 2024Marabou 2.0: A Versatile Formal Analyzer of Neural Networkscited by 81
- 2022Towards Formal XAI: Formally Approximate Minimal Explanations of Neural Networkscited by 42
- 2023Formally Explaining Neural Networks within Reactive Systemscited by 24
- 2024Local vs. Global Interpretability: A Computational Complexity Perspectivecited by 23
- 2022Neural Network Verification with Proof Productioncited by 22
- 2023The #DNN-Verification Problem: Counting Unsafe Inputs for Deep Neural Networkscited by 19
- 2023Enumerating Safe Regions in Deep Neural Networks with Provable Probabilistic Guaranteescited by 19
- 2024Formally Verifying Deep Reinforcement Learning Controllers with Lyapunov Barrier Certificatescited by 16
- 2024Verification-Guided Shielding for Deep Reinforcement Learningcited by 13
- 2022veriFIRE: Verifying an Industrial, Learning-Based Wildfire Detection Systemcited by 12
- 2024Shield Synthesis for LTL Modulo Theoriescited by 12
- 2022Constrained Reinforcement Learning for Robotics via Scenario-Based Programmingcited by 11
21 more
- 2023Verifying Generalization in Deep Learningcited by 11
- 2024Hard to Explain: On the Computational Hardness of In-Distribution Model Interpretationcited by 11
- 2023Safe Deep Reinforcement Learning by Verifying Task-Level Propertiescited by 9
- 2022Tighter Abstract Queries in Neural Network Verificationcited by 8
- 2023Online Safety Property Collection and Refinement for Safe Deep Reinforcement Learning in Mapless Navigationcited by 7
- 2024Analyzing Adversarial Inputs in Deep Reinforcement Learningcited by 7
- 2024A Certified Proof Checker for Deep Neural Network Verification in Imandracited by 7
- 2024ModelVerification.jl: a Comprehensive Toolbox for Formally Verifying Deep Neural Networkscited by 7
- 2024Towards Formal Verification of Deep Neural Networks for Object Detectioncited by 4
- 2024Safe and Reliable Training of Learning-Based Aerospace Controllerscited by 4
- 2025Advancing Neural Network Verification through Hierarchical Safety Abstract Interpretationcited by 4
- 2025Proof Minimization in Neural Network Verificationcited by 4
- 2024Realizable Continuous-Space Shields for Safe Reinforcement Learningcited by 3
- 2025PICID: Proof-Driven Clause Learning in Neural Network Verificationcited by 3
- 2025Designing Control Barrier Function via Probabilistic Enumeration for Safe Reinforcement Learning Navigationcited by 3
- 2025Probabilistically Tightened Linear Relaxation-based Perturbation Analysis for Neural Network Verificationcited by 2
- 2023Scaling #DNN-Verification Tools with Efficient Bound Propagation and Parallel Computingcited by 1
- 2024Aquatic Navigation: A Challenging Benchmark for Deep Reinforcement Learningcited by 1
- 2024Reinfier and Reintrainer: Verification and Interpretation-Driven Safe Deep Reinforcement Learning Frameworkscited by 0
- 2025On Improving Deep Active Learning with Formal Verificationcited by 0
- 2026veriFIRE: an Industrial Case Study in Verifying Consistency Properties for a DNN-Based Wildfire Detection Systemcited by 0
- 2026veriFIRE: an Industrial Case Study in Verifying Consistency Properties for a DNN-Based Wildfire Detection System2 Jun 2026
- 2025On Improving Deep Active Learning with Formal Verification16 Dec 2025
- 2025Proof Minimization in Neural Network Verification11 Nov 2025
- 2025Probabilistically Tightened Linear Relaxation-based Perturbation Analysis for Neural Network Verification7 Jul 2025
- 2025Advancing Neural Network Verification through Hierarchical Safety Abstract Interpretation8 May 2025
- 2025Designing Control Barrier Function via Probabilistic Enumeration for Safe Reinforcement Learning Navigation30 Apr 2025
- 2025PICID: Proof-Driven Clause Learning in Neural Network Verification15 Mar 2025
- 2024Reinfier and Reintrainer: Verification and Interpretation-Driven Safe Deep Reinforcement Learning Frameworks19 Oct 2024
- 2024Realizable Continuous-Space Shields for Safe Reinforcement Learning2 Oct 2024
- 2024Hard to Explain: On the Computational Hardness of In-Distribution Model Interpretation7 Aug 2024
- 2024Safe and Reliable Training of Learning-Based Aerospace Controllers9 Jul 2024
- 2024Towards Formal Verification of Deep Neural Networks for Object Detection1 Jul 2024
21 more
- 2024ModelVerification.jl: a Comprehensive Toolbox for Formally Verifying Deep Neural Networks30 Jun 2024
- 2024Verification-Guided Shielding for Deep Reinforcement Learning10 Jun 2024
- 2024Shield Synthesis for LTL Modulo Theories6 Jun 2024
- 2024Local vs. Global Interpretability: A Computational Complexity Perspective5 Jun 2024
- 2024Aquatic Navigation: A Challenging Benchmark for Deep Reinforcement Learning30 May 2024
- 2024Formally Verifying Deep Reinforcement Learning Controllers with Lyapunov Barrier Certificates22 May 2024
- 2024A Certified Proof Checker for Deep Neural Network Verification in Imandra17 May 2024
- 2024Analyzing Adversarial Inputs in Deep Reinforcement Learning7 Feb 2024
- 2024Marabou 2.0: A Versatile Formal Analyzer of Neural Networks25 Jan 2024
- 2023Scaling #DNN-Verification Tools with Efficient Bound Propagation and Parallel Computing10 Dec 2023
- 2023Enumerating Safe Regions in Deep Neural Networks with Provable Probabilistic Guarantees18 Aug 2023
- 2023Formally Explaining Neural Networks within Reactive Systems31 Jul 2023
- 2023Safe Deep Reinforcement Learning by Verifying Task-Level Properties20 Feb 2023
- 2023Online Safety Property Collection and Refinement for Safe Deep Reinforcement Learning in Mapless Navigation13 Feb 2023
- 2023Verifying Generalization in Deep Learning11 Feb 2023
- 2023The #DNN-Verification Problem: Counting Unsafe Inputs for Deep Neural Networks17 Jan 2023
- 2022veriFIRE: Verifying an Industrial, Learning-Based Wildfire Detection System6 Dec 2022
- 2022Towards Formal XAI: Formally Approximate Minimal Explanations of Neural Networks25 Oct 2022
- 2022Tighter Abstract Queries in Neural Network Verification23 Oct 2022
- 2022Constrained Reinforcement Learning for Robotics via Scenario-Based Programming20 Jun 2022
- 2022Neural Network Verification with Proof Production1 Jun 2022
- 2024Formally Verifying Deep Reinforcement Learning Controllers with Lyapunov Barrier Certificatescited by 16
- 2024Verification-Guided Shielding for Deep Reinforcement Learningcited by 13
- 2024Analyzing Adversarial Inputs in Deep Reinforcement Learningcited by 7
- 2024Safe and Reliable Training of Learning-Based Aerospace Controllerscited by 4
- 2024Realizable Continuous-Space Shields for Safe Reinforcement Learningcited by 3
- 2025Designing Control Barrier Function via Probabilistic Enumeration for Safe Reinforcement Learning Navigationcited by 3
- 2024Aquatic Navigation: A Challenging Benchmark for Deep Reinforcement Learningcited by 1
- 2024Reinfier and Reintrainer: Verification and Interpretation-Driven Safe Deep Reinforcement Learning Frameworkscited by 0
- 2025Designing Control Barrier Function via Probabilistic Enumeration for Safe Reinforcement Learning Navigation30 Apr 2025
- 2024Reinfier and Reintrainer: Verification and Interpretation-Driven Safe Deep Reinforcement Learning Frameworks19 Oct 2024
- 2024Realizable Continuous-Space Shields for Safe Reinforcement Learning2 Oct 2024
- 2024Safe and Reliable Training of Learning-Based Aerospace Controllers9 Jul 2024
- 2024Verification-Guided Shielding for Deep Reinforcement Learning10 Jun 2024
- 2024Aquatic Navigation: A Challenging Benchmark for Deep Reinforcement Learning30 May 2024
- 2024Formally Verifying Deep Reinforcement Learning Controllers with Lyapunov Barrier Certificates22 May 2024
- 2024Analyzing Adversarial Inputs in Deep Reinforcement Learning7 Feb 2024
- 2024Marabou 2.0: A Versatile Formal Analyzer of Neural Networkscited by 81
- 2022Towards Formal XAI: Formally Approximate Minimal Explanations of Neural Networkscited by 42
- 2023Formally Explaining Neural Networks within Reactive Systemscited by 24
- 2024Local vs. Global Interpretability: A Computational Complexity Perspectivecited by 23
- 2022Neural Network Verification with Proof Productioncited by 22
- 2023The #DNN-Verification Problem: Counting Unsafe Inputs for Deep Neural Networkscited by 19
- 2023Enumerating Safe Regions in Deep Neural Networks with Provable Probabilistic Guaranteescited by 19
- 2022veriFIRE: Verifying an Industrial, Learning-Based Wildfire Detection Systemcited by 12
- 2024Shield Synthesis for LTL Modulo Theoriescited by 12
- 2022Constrained Reinforcement Learning for Robotics via Scenario-Based Programmingcited by 11
- 2023Verifying Generalization in Deep Learningcited by 11
- 2024Hard to Explain: On the Computational Hardness of In-Distribution Model Interpretationcited by 11
12 most cited of 25 All 25 (JSON)
- 2026veriFIRE: an Industrial Case Study in Verifying Consistency Properties for a DNN-Based Wildfire Detection System2 Jun 2026
- 2025On Improving Deep Active Learning with Formal Verification16 Dec 2025
- 2025Proof Minimization in Neural Network Verification11 Nov 2025
- 2025Probabilistically Tightened Linear Relaxation-based Perturbation Analysis for Neural Network Verification7 Jul 2025
- 2025Advancing Neural Network Verification through Hierarchical Safety Abstract Interpretation8 May 2025
- 2025PICID: Proof-Driven Clause Learning in Neural Network Verification15 Mar 2025
- 2024Hard to Explain: On the Computational Hardness of In-Distribution Model Interpretation7 Aug 2024
- 2024Towards Formal Verification of Deep Neural Networks for Object Detection1 Jul 2024
- 2024ModelVerification.jl: a Comprehensive Toolbox for Formally Verifying Deep Neural Networks30 Jun 2024
- 2024Shield Synthesis for LTL Modulo Theories6 Jun 2024
- 2024Local vs. Global Interpretability: A Computational Complexity Perspective5 Jun 2024
- 2024A Certified Proof Checker for Deep Neural Network Verification in Imandra17 May 2024
12 newest of 25 All 25 (JSON)