mlsanityData to 7 Oct 2026

Efficiently Computing Local Lipschitz Constants of Neural Networks via Bound Propagation

arXiv 2210.07394 ↗First posted 13 Oct 2022cs.LGcited by 45

Not on the map. Why?

Abstract (arXiv)

Lipschitz constants are connected to many properties of neural networks, such as robustness, fairness, and generalization. Existing methods for computing Lipschitz constants either produce relatively loose upper bounds or are limited to small networks. In this paper, we develop an efficient framework for computing the ℓ_∞ local Lipschitz constant of a neural network by tightly upper bounding the norm of Clarke Jacobian via linear bound propagation. We formulate the computation of local Lipschitz constants with a linear bound propagation process on a high-order backward graph induced by the chain rule of Clarke Jacobian. To enable linear bound propagation, we derive tight linear relaxations for specific nonlinearities in Clarke Jacobian. This formulate unifies existing ad-hoc approaches such as RecurJac, which can be seen as a special case of ours with weaker relaxations. The bound propagation framework also allows us to easily borrow the popular Branch-and-Bound (BaB) approach from neural network verification to further tighten Lipschitz constants. Experiments show that on tiny models, our method produces comparable bounds compared to exact methods that cannot scale to slightly larger models; on larger models, our method efficiently produces tighter results than existing relaxed or naive methods, and our method scales to much larger practical models that previous works could not handle. We also demonstrate an application on provable monotonicity analysis. Code is available at https://github.com/shizhouxing/Local-Lipschitz-Constants.

Key facts. Cited by 45 papers in the map (data through 7 Oct 2026). Builds on 43 of its 78 references that are in the map. First posted on arXiv 13 Oct 2022.

Builds on

43 of 78 references.

References · 43

  1. 2015Deep Residual Learning for Image Recognitioncited by 51,809
  2. 2013Intriguing properties of neural networkscited by 5,114
  3. 2017Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networkscited by 739
  4. 2017Spectrally-normalized margin bounds for neural networkscited by 681
  5. 2017Provable defenses against adversarial examples via the convex outer adversarial polytopecited by 564
  6. 2018Efficient Neural Network Robustness Certification with General Activation Functionscited by 439
  7. 2018Lipschitz regularity of deep neural networks: analysis and efficient estimationcited by 413
  8. 2018On the Effectiveness of Interval Bound Propagation for Training Verifiably Robust Modelscited by 322
  9. 2018Regularisation of Neural Networks by Enforcing Lipschitz Continuitycited by 311
  10. 2019Efficient and Accurate Estimation of Lipschitz Constants for Deep Neural Networkscited by 290
  11. 2018Towards Fast Computation of Certified Robustness for ReLU Networkscited by 254
  12. 2021Beta-CROWN: Efficient Bound Propagation with Per-neuron Split Constraints for Complete and Incomplete Neural Network Robustness Verificationcited by 224
31 more
  1. 2018Sorting out Lipschitz function approximationcited by 211
  2. 2019Towards Stable and Efficient Training of Verifiably Robust Neural Networkscited by 204
  3. 2018Lipschitz-Margin Training: Scalable Certification of Perturbation Invariance for Deep Neural Networkscited by 193
  4. 2018Formal Security Analysis of Neural Networks using Symbolic Intervalscited by 185
  5. 2020Fast and Complete: Enabling Complete Neural Network Verification with Rapid and Massively Parallel Incomplete Verifierscited by 183
  6. 2017Formal Guarantees on the Robustness of a Classifier against Adversarial Manipulationcited by 182
  7. 2018Efficient Formal Safety Analysis of Neural Networkscited by 165
  8. 2019Branch and Bound for Piecewise Linear Neural Network Verificationcited by 138
  9. 2018A Dual Approach to Scalable Verification of Deep Networkscited by 125
  10. 2021Globally-Robust Neural Networkscited by 106
  11. 2020Exactly Computing the Local Lipschitz Constant of ReLU Networkscited by 102
  12. 2022General Cutting Planes for Bound-Propagation-Based Neural Network Verificationcited by 102
  13. 2020Lipschitz constant estimation of Neural Networks via sparse polynomial optimizationcited by 87
  14. 2019Preventing Gradient Attenuation in Lipschitz Constrained Convolutional Networkscited by 86
  15. 2020Robustness Verification for Transformerscited by 76
  16. 2021Skew Orthogonal Convolutionscited by 67
  17. 2021Training Certifiably Robust Neural Networks with Efficient Local Lipschitz Boundscited by 64
  18. 2020Certified Monotonic Neural Networkscited by 51
  19. 2022Rethinking Lipschitz Neural Networks and Certified Robustness: A Boolean Function Perspectivecited by 48
  20. 2021Fast Certified Robust Training with Short Warmupcited by 45
  21. 2021Towards Certifying L-infinity Robustness using Neural Networks with L-inf-dist Neuronscited by 40
  22. 2019Fastened CROWN: Tightened Neural Network Robustness Certificatescited by 39
  23. 2020Counterexample-Guided Learning of Monotonic Neural Networkscited by 34
  24. 2018RecurJac: An Efficient Recursive Algorithm for Bounding Jacobian Matrix of Neural Networks and Its Applicationscited by 27
  25. 2020How Good is your Explanation? Algorithmic Stability Measures to Assess the Quality of Explanations for Deep Neural Networkscited by 27
  26. 2021Boosting the Certified Robustness of L-infinity Distance Netscited by 24
  27. 2020Scalable Polyhedral Verification of Recurrent Neural Networkscited by 20
  28. 2021LipBaB: Computing exact Lipschitz constant of ReLU networkscited by 16
  29. 2021Analytical bounds on the local Lipschitz constants of ReLU networkscited by 12
  30. 2021Provable Lipschitz Certification for Generative Modelscited by 7
  31. 2022On the Convergence of Certified Robust Training with Interval Bound Propagationcited by 5

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2023: 9; 2024: 13; 2025: 12; 2026: 11.

45 papers.

Sort:

  1. 2024Neural Network Verification with Branch-and-Bound for General Nonlinearitiescited by 47
  2. 2023Efficient Bound of Lipschitz Constant for Convolutional Layers by Gram Iterationcited by 19
  3. 2023Certified Robustness via Dynamic Margin Maximization and Improved Lipschitz Regularizationcited by 19
  4. 2023Improving the Accuracy-Robustness Trade-Off of Classifiers via Adaptive Smoothingcited by 18
  5. 2023Performance Scaling via Optimal Transport: Enabling Data Selection from Partially Revealed Sourcescited by 16
  6. 2024Verification of Neural Control Barrier Functions with Symbolic Derivative Bounds Propagationcited by 12
  7. 2024ECLipsE: Efficient Compositional Lipschitz Constant Estimation for Deep Neural Networkscited by 10
  8. 2024Lipschitz constant estimation for general neural network architectures using control toolscited by 8
  9. 2024Novel Quadratic Constraints for Extending LipSDP beyond Slope-Restricted Activationscited by 6
  10. 2024Stability and Generalization in Free Adversarial Trainingcited by 5
  11. 2025Enhancing Certified Robustness via Block Reflector Orthogonal Layers and Logit Annealing Losscited by 5
  12. 2023Hybrid Zonotopes Exactly Represent ReLU Neural Networkscited by 4
33 more
  1. 2024Policy Verification in Stochastic Dynamical Systems Using Logarithmic Neural Certificatescited by 3
  2. 2023Upper and lower bounds for the Lipschitz constant of random neural networkscited by 2
  3. 2023A Variational Perspective on High-Resolution ODEscited by 2
  4. 2024Provable Bounds on the Hessian of Neural Networks: Derivative-Preserving Reachability Analysiscited by 2
  5. 2024Learning conditional distributions on continuous spacescited by 2
  6. 2024Estimating Neural Network Robustness via Lipschitz Constant and Architecture Sensitivitycited by 2
  7. 2025Distance-Aware Error for Spline Networks: A Bottom-Up Approach to Uncertaintycited by 2
  8. 2025Adaptive Branch-and-Bound Tree Exploration for Neural Network Verificationcited by 2
  9. 2025TAROT: Towards Essentially Domain-Invariant Robustness with Theoretical Justificationcited by 2
  10. 2025Local Stability and Region of Attraction Analysis for Neural Network Feedback Systems under Positivity Constraintscited by 2
  11. 2025Scalable Verification of Neural Control Barrier Functions Using Linear Bound Propagationcited by 2
  12. 2024A mathematical certification for positivity conditions in Neural Networks with applications to partial monotonicity and Trustworthy AIcited by 1
  13. 2025Provably Safeguarding a Classifier from OOD and Adversarial Samples: an Extreme Value Theory Approachcited by 1
  14. 2025ECLipsE-Gen-Local: Efficient Compositional Local Lipschitz Estimates for Deep Neural Networkscited by 1
  15. 2026ExLipBaB: Exact Lipschitz Constant Computation for Piecewise Linear Neural Networkscited by 1
  16. 2026Fitting Is Not Enough: Smoothness in Extremely Quantized LLMscited by 1
  17. 2026Measuring Model Robustness via Fisher Information: Spectral Bounds, Theoretical Guarantees, and Practical Algorithmscited by 1
  18. 2023CQnet: convex-geometric interpretation and constraining neural-network trajectoriescited by 0
  19. 2023Differentially Private Optimization for Non-Decomposable Objective Functionscited by 0
  20. 2024Lipschitz-Regularized Critics Lead to Policy Robustness Against Transition Dynamics Uncertaintycited by 0
  21. 2024Unlock the Power of Algorithm Features: A Generalization Analysis for Algorithm Selectioncited by 0
  22. 2025A Scalable Approach for Safe and Robust Learning via Lipschitz-Constrained Networkscited by 0
  23. 2025Efficient Neural Network Verification via Order Leading Exploration of Branch-and-Bound Treescited by 0
  24. 2025Tight Robustness Certificates and Wasserstein Distributional Attacks for Deep Neural Networkscited by 0
  25. 2025Lipschitz-aware Linearity Grafting for Certified Robustnesscited by 0
  26. 2026Certified and accurate computation of function space norms of deep neural networkscited by 0
  27. 2026Optimizing Reinforcement Learning Training over Digital Twin Enabled Multi-fidelity Networkscited by 0
  28. 2026Demystifying Lipschitz verification: positive matrices, negative resultscited by 0
  29. 2026On the Robustness of LLM-Based Dense Retrievers: A Systematic Analysis of Generalizability and Stabilitycited by 0
  30. 2026Beyond Coefficients: Forecast-Necessity Testing for Interpretable Causal Discovery in Nonlinear Time-Series Modelscited by 0
  31. 2026Prior-aware and Context-guided Group Sampling for Active Probabilistic Subsamplingcited by 0
  32. 2026Mining Verdict Boundaries for Neural Network Verificationcited by 0
  33. 2026Branch and Bound for Relational Verification of Neural Networkscited by 0