Efficiently Computing Local Lipschitz Constants of Neural Networks via Bound Propagation
Not on the map. Why?
Abstract (arXiv)
Lipschitz constants are connected to many properties of neural networks, such as robustness, fairness, and generalization. Existing methods for computing Lipschitz constants either produce relatively loose upper bounds or are limited to small networks. In this paper, we develop an efficient framework for computing the ℓ_∞ local Lipschitz constant of a neural network by tightly upper bounding the norm of Clarke Jacobian via linear bound propagation. We formulate the computation of local Lipschitz constants with a linear bound propagation process on a high-order backward graph induced by the chain rule of Clarke Jacobian. To enable linear bound propagation, we derive tight linear relaxations for specific nonlinearities in Clarke Jacobian. This formulate unifies existing ad-hoc approaches such as RecurJac, which can be seen as a special case of ours with weaker relaxations. The bound propagation framework also allows us to easily borrow the popular Branch-and-Bound (BaB) approach from neural network verification to further tighten Lipschitz constants. Experiments show that on tiny models, our method produces comparable bounds compared to exact methods that cannot scale to slightly larger models; on larger models, our method efficiently produces tighter results than existing relaxed or naive methods, and our method scales to much larger practical models that previous works could not handle. We also demonstrate an application on provable monotonicity analysis. Code is available at https://github.com/shizhouxing/Local-Lipschitz-Constants.
Key facts. Cited by 45 papers in the map (data through 7 Oct 2026). Builds on 43 of its 78 references that are in the map. First posted on arXiv 13 Oct 2022.
Builds on
43 of 78 references.
References · 43
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2013Intriguing properties of neural networkscited by 5,114
- 2017Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networkscited by 739
- 2017Spectrally-normalized margin bounds for neural networkscited by 681
- 2017Provable defenses against adversarial examples via the convex outer adversarial polytopecited by 564
- 2018Efficient Neural Network Robustness Certification with General Activation Functionscited by 439
- 2018Lipschitz regularity of deep neural networks: analysis and efficient estimationcited by 413
- 2018On the Effectiveness of Interval Bound Propagation for Training Verifiably Robust Modelscited by 322
- 2018Regularisation of Neural Networks by Enforcing Lipschitz Continuitycited by 311
- 2019Efficient and Accurate Estimation of Lipschitz Constants for Deep Neural Networkscited by 290
- 2018Towards Fast Computation of Certified Robustness for ReLU Networkscited by 254
- 2021Beta-CROWN: Efficient Bound Propagation with Per-neuron Split Constraints for Complete and Incomplete Neural Network Robustness Verificationcited by 224
31 more
- 2018Sorting out Lipschitz function approximationcited by 211
- 2019Towards Stable and Efficient Training of Verifiably Robust Neural Networkscited by 204
- 2018Lipschitz-Margin Training: Scalable Certification of Perturbation Invariance for Deep Neural Networkscited by 193
- 2018Formal Security Analysis of Neural Networks using Symbolic Intervalscited by 185
- 2020Fast and Complete: Enabling Complete Neural Network Verification with Rapid and Massively Parallel Incomplete Verifierscited by 183
- 2017Formal Guarantees on the Robustness of a Classifier against Adversarial Manipulationcited by 182
- 2018Efficient Formal Safety Analysis of Neural Networkscited by 165
- 2019Branch and Bound for Piecewise Linear Neural Network Verificationcited by 138
- 2018A Dual Approach to Scalable Verification of Deep Networkscited by 125
- 2021Globally-Robust Neural Networkscited by 106
- 2020Exactly Computing the Local Lipschitz Constant of ReLU Networkscited by 102
- 2022General Cutting Planes for Bound-Propagation-Based Neural Network Verificationcited by 102
- 2020Lipschitz constant estimation of Neural Networks via sparse polynomial optimizationcited by 87
- 2019Preventing Gradient Attenuation in Lipschitz Constrained Convolutional Networkscited by 86
- 2020Robustness Verification for Transformerscited by 76
- 2021Skew Orthogonal Convolutionscited by 67
- 2021Training Certifiably Robust Neural Networks with Efficient Local Lipschitz Boundscited by 64
- 2020Certified Monotonic Neural Networkscited by 51
- 2022Rethinking Lipschitz Neural Networks and Certified Robustness: A Boolean Function Perspectivecited by 48
- 2021Fast Certified Robust Training with Short Warmupcited by 45
- 2021Towards Certifying L-infinity Robustness using Neural Networks with L-inf-dist Neuronscited by 40
- 2019Fastened CROWN: Tightened Neural Network Robustness Certificatescited by 39
- 2020Counterexample-Guided Learning of Monotonic Neural Networkscited by 34
- 2018RecurJac: An Efficient Recursive Algorithm for Bounding Jacobian Matrix of Neural Networks and Its Applicationscited by 27
- 2020How Good is your Explanation? Algorithmic Stability Measures to Assess the Quality of Explanations for Deep Neural Networkscited by 27
- 2021Boosting the Certified Robustness of L-infinity Distance Netscited by 24
- 2020Scalable Polyhedral Verification of Recurrent Neural Networkscited by 20
- 2021LipBaB: Computing exact Lipschitz constant of ReLU networkscited by 16
- 2021Analytical bounds on the local Lipschitz constants of ReLU networkscited by 12
- 2021Provable Lipschitz Certification for Generative Modelscited by 7
- 2022On the Convergence of Certified Robust Training with Interval Bound Propagationcited by 5
Built on by
Citing papers per year: 2023: 9; 2024: 13; 2025: 12; 2026: 11.
45 papers.
Sort:
- 2024Neural Network Verification with Branch-and-Bound for General Nonlinearitiescited by 47
- 2023Efficient Bound of Lipschitz Constant for Convolutional Layers by Gram Iterationcited by 19
- 2023Certified Robustness via Dynamic Margin Maximization and Improved Lipschitz Regularizationcited by 19
- 2023Improving the Accuracy-Robustness Trade-Off of Classifiers via Adaptive Smoothingcited by 18
- 2023Performance Scaling via Optimal Transport: Enabling Data Selection from Partially Revealed Sourcescited by 16
- 2024Verification of Neural Control Barrier Functions with Symbolic Derivative Bounds Propagationcited by 12
- 2024ECLipsE: Efficient Compositional Lipschitz Constant Estimation for Deep Neural Networkscited by 10
- 2024Lipschitz constant estimation for general neural network architectures using control toolscited by 8
- 2024Novel Quadratic Constraints for Extending LipSDP beyond Slope-Restricted Activationscited by 6
- 2024Stability and Generalization in Free Adversarial Trainingcited by 5
- 2025Enhancing Certified Robustness via Block Reflector Orthogonal Layers and Logit Annealing Losscited by 5
- 2023Hybrid Zonotopes Exactly Represent ReLU Neural Networkscited by 4
33 more
- 2024Policy Verification in Stochastic Dynamical Systems Using Logarithmic Neural Certificatescited by 3
- 2023Upper and lower bounds for the Lipschitz constant of random neural networkscited by 2
- 2023A Variational Perspective on High-Resolution ODEscited by 2
- 2024Provable Bounds on the Hessian of Neural Networks: Derivative-Preserving Reachability Analysiscited by 2
- 2024Learning conditional distributions on continuous spacescited by 2
- 2024Estimating Neural Network Robustness via Lipschitz Constant and Architecture Sensitivitycited by 2
- 2025Distance-Aware Error for Spline Networks: A Bottom-Up Approach to Uncertaintycited by 2
- 2025Adaptive Branch-and-Bound Tree Exploration for Neural Network Verificationcited by 2
- 2025TAROT: Towards Essentially Domain-Invariant Robustness with Theoretical Justificationcited by 2
- 2025Local Stability and Region of Attraction Analysis for Neural Network Feedback Systems under Positivity Constraintscited by 2
- 2025Scalable Verification of Neural Control Barrier Functions Using Linear Bound Propagationcited by 2
- 2024A mathematical certification for positivity conditions in Neural Networks with applications to partial monotonicity and Trustworthy AIcited by 1
- 2025Provably Safeguarding a Classifier from OOD and Adversarial Samples: an Extreme Value Theory Approachcited by 1
- 2025ECLipsE-Gen-Local: Efficient Compositional Local Lipschitz Estimates for Deep Neural Networkscited by 1
- 2026ExLipBaB: Exact Lipschitz Constant Computation for Piecewise Linear Neural Networkscited by 1
- 2026Fitting Is Not Enough: Smoothness in Extremely Quantized LLMscited by 1
- 2026Measuring Model Robustness via Fisher Information: Spectral Bounds, Theoretical Guarantees, and Practical Algorithmscited by 1
- 2023CQnet: convex-geometric interpretation and constraining neural-network trajectoriescited by 0
- 2023Differentially Private Optimization for Non-Decomposable Objective Functionscited by 0
- 2024Lipschitz-Regularized Critics Lead to Policy Robustness Against Transition Dynamics Uncertaintycited by 0
- 2024Unlock the Power of Algorithm Features: A Generalization Analysis for Algorithm Selectioncited by 0
- 2025A Scalable Approach for Safe and Robust Learning via Lipschitz-Constrained Networkscited by 0
- 2025Efficient Neural Network Verification via Order Leading Exploration of Branch-and-Bound Treescited by 0
- 2025Tight Robustness Certificates and Wasserstein Distributional Attacks for Deep Neural Networkscited by 0
- 2025Lipschitz-aware Linearity Grafting for Certified Robustnesscited by 0
- 2026Certified and accurate computation of function space norms of deep neural networkscited by 0
- 2026Optimizing Reinforcement Learning Training over Digital Twin Enabled Multi-fidelity Networkscited by 0
- 2026Demystifying Lipschitz verification: positive matrices, negative resultscited by 0
- 2026On the Robustness of LLM-Based Dense Retrievers: A Systematic Analysis of Generalizability and Stabilitycited by 0
- 2026Beyond Coefficients: Forecast-Necessity Testing for Interpretable Causal Discovery in Nonlinear Time-Series Modelscited by 0
- 2026Prior-aware and Context-guided Group Sampling for Active Probabilistic Subsamplingcited by 0
- 2026Mining Verdict Boundaries for Neural Network Verificationcited by 0
- 2026Branch and Bound for Relational Verification of Neural Networkscited by 0
- 2026Branch and Bound for Relational Verification of Neural Networks13 Aug 2026
- 2026Mining Verdict Boundaries for Neural Network Verification31 Jul 2026
- 2026Prior-aware and Context-guided Group Sampling for Active Probabilistic Subsampling8 Jul 2026
- 2026Measuring Model Robustness via Fisher Information: Spectral Bounds, Theoretical Guarantees, and Practical Algorithms3 Jun 2026
- 2026Fitting Is Not Enough: Smoothness in Extremely Quantized LLMs9 May 2026
- 2026Beyond Coefficients: Forecast-Necessity Testing for Interpretable Causal Discovery in Nonlinear Time-Series Models20 Apr 2026
- 2026On the Robustness of LLM-Based Dense Retrievers: A Systematic Analysis of Generalizability and Stability17 Apr 2026
- 2026Demystifying Lipschitz verification: positive matrices, negative results30 Mar 2026
- 2026Optimizing Reinforcement Learning Training over Digital Twin Enabled Multi-fidelity Networks9 Mar 2026
- 2026Certified and accurate computation of function space norms of deep neural networks6 Mar 2026
- 2026ExLipBaB: Exact Lipschitz Constant Computation for Piecewise Linear Neural Networks17 Feb 2026
- 2025Scalable Verification of Neural Control Barrier Functions Using Linear Bound Propagation9 Nov 2025
33 more
- 2025Lipschitz-aware Linearity Grafting for Certified Robustness29 Oct 2025
- 2025Tight Robustness Certificates and Wasserstein Distributional Attacks for Deep Neural Networks11 Oct 2025
- 2025ECLipsE-Gen-Local: Efficient Compositional Local Lipschitz Estimates for Deep Neural Networks6 Oct 2025
- 2025Efficient Neural Network Verification via Order Leading Exploration of Branch-and-Bound Trees23 Jul 2025
- 2025A Scalable Approach for Safe and Robust Learning via Lipschitz-Constrained Networks30 Jun 2025
- 2025Local Stability and Region of Attraction Analysis for Neural Network Feedback Systems under Positivity Constraints28 May 2025
- 2025Enhancing Certified Robustness via Block Reflector Orthogonal Layers and Logit Annealing Loss21 May 2025
- 2025TAROT: Towards Essentially Domain-Invariant Robustness with Theoretical Justification10 May 2025
- 2025Adaptive Branch-and-Bound Tree Exploration for Neural Network Verification2 May 2025
- 2025Provably Safeguarding a Classifier from OOD and Adversarial Samples: an Extreme Value Theory Approach17 Jan 2025
- 2025Distance-Aware Error for Spline Networks: A Bottom-Up Approach to Uncertainty8 Jan 2025
- 2024Estimating Neural Network Robustness via Lipschitz Constant and Architecture Sensitivity30 Oct 2024
- 2024Verification of Neural Control Barrier Functions with Symbolic Derivative Bounds Propagation4 Oct 2024
- 2024Learning conditional distributions on continuous spaces13 Jun 2024
- 2024A mathematical certification for positivity conditions in Neural Networks with applications to partial monotonicity and Trustworthy AI12 Jun 2024
- 2024Provable Bounds on the Hessian of Neural Networks: Derivative-Preserving Reachability Analysis6 Jun 2024
- 2024Policy Verification in Stochastic Dynamical Systems Using Logarithmic Neural Certificates2 Jun 2024
- 2024Neural Network Verification with Branch-and-Bound for General Nonlinearities31 May 2024
- 2024Unlock the Power of Algorithm Features: A Generalization Analysis for Algorithm Selection18 May 2024
- 2024Lipschitz constant estimation for general neural network architectures using control tools2 May 2024
- 2024Lipschitz-Regularized Critics Lead to Policy Robustness Against Transition Dynamics Uncertainty22 Apr 2024
- 2024Stability and Generalization in Free Adversarial Training13 Apr 2024
- 2024ECLipsE: Efficient Compositional Lipschitz Constant Estimation for Deep Neural Networks5 Apr 2024
- 2024Novel Quadratic Constraints for Extending LipSDP beyond Slope-Restricted Activations25 Jan 2024
- 2023A Variational Perspective on High-Resolution ODEs3 Nov 2023
- 2023Upper and lower bounds for the Lipschitz constant of random neural networks2 Nov 2023
- 2023Differentially Private Optimization for Non-Decomposable Objective Functions4 Oct 2023
- 2023Certified Robustness via Dynamic Margin Maximization and Improved Lipschitz Regularization29 Sep 2023
- 2023Performance Scaling via Optimal Transport: Enabling Data Selection from Partially Revealed Sources5 Jul 2023
- 2023Efficient Bound of Lipschitz Constant for Convolutional Layers by Gram Iteration25 May 2023
- 2023Hybrid Zonotopes Exactly Represent ReLU Neural Networks5 Apr 2023
- 2023CQnet: convex-geometric interpretation and constraining neural-network trajectories9 Feb 2023
- 2023Improving the Accuracy-Robustness Trade-Off of Classifiers via Adaptive Smoothing29 Jan 2023
- 2024Neural Network Verification with Branch-and-Bound for General Nonlinearitiescited by 47
- 2023Efficient Bound of Lipschitz Constant for Convolutional Layers by Gram Iterationcited by 19
- 2023Certified Robustness via Dynamic Margin Maximization and Improved Lipschitz Regularizationcited by 19
- 2023Improving the Accuracy-Robustness Trade-Off of Classifiers via Adaptive Smoothingcited by 18
- 2023Performance Scaling via Optimal Transport: Enabling Data Selection from Partially Revealed Sourcescited by 16
- 2024Verification of Neural Control Barrier Functions with Symbolic Derivative Bounds Propagationcited by 12
- 2024ECLipsE: Efficient Compositional Lipschitz Constant Estimation for Deep Neural Networkscited by 10
- 2024Lipschitz constant estimation for general neural network architectures using control toolscited by 8
- 2024Novel Quadratic Constraints for Extending LipSDP beyond Slope-Restricted Activationscited by 6
- 2024Stability and Generalization in Free Adversarial Trainingcited by 5
- 2025Enhancing Certified Robustness via Block Reflector Orthogonal Layers and Logit Annealing Losscited by 5
- 2023Hybrid Zonotopes Exactly Represent ReLU Neural Networkscited by 4
12 most cited of 45 All 45 (JSON)
- 2026Branch and Bound for Relational Verification of Neural Networks13 Aug 2026
- 2026Mining Verdict Boundaries for Neural Network Verification31 Jul 2026
- 2026Prior-aware and Context-guided Group Sampling for Active Probabilistic Subsampling8 Jul 2026
- 2026Measuring Model Robustness via Fisher Information: Spectral Bounds, Theoretical Guarantees, and Practical Algorithms3 Jun 2026
- 2026Fitting Is Not Enough: Smoothness in Extremely Quantized LLMs9 May 2026
- 2026Beyond Coefficients: Forecast-Necessity Testing for Interpretable Causal Discovery in Nonlinear Time-Series Models20 Apr 2026
- 2026On the Robustness of LLM-Based Dense Retrievers: A Systematic Analysis of Generalizability and Stability17 Apr 2026
- 2026Demystifying Lipschitz verification: positive matrices, negative results30 Mar 2026
- 2026Optimizing Reinforcement Learning Training over Digital Twin Enabled Multi-fidelity Networks9 Mar 2026
- 2026Certified and accurate computation of function space norms of deep neural networks6 Mar 2026
- 2026ExLipBaB: Exact Lipschitz Constant Computation for Piecewise Linear Neural Networks17 Feb 2026
- 2025Scalable Verification of Neural Control Barrier Functions Using Linear Bound Propagation9 Nov 2025
12 newest of 45 All 45 (JSON)