Reachable Polyhedral Marching (RPM): An Exact Analysis Tool for Deep-Learned Control Systems
Not on the map. Why?
Abstract (arXiv)
Neural networks are increasingly used in robotics as policies, state transition models, state estimation models, or all of the above. With these components being learned from data, it is important to be able to analyze what behaviors were learned and how this affects closed-loop performance. In this paper we take steps toward this goal by developing methods for computing control invariant sets and regions of attraction (ROAs) of dynamical systems represented as neural networks. We focus our attention on feedforward neural networks with the rectified linear unit (ReLU) activation, which are known to implement continuous piecewise-affine (PWA) functions. We describe the Reachable Polyhedral Marching (RPM) algorithm for enumerating the affine pieces of a neural network through an incremental connected walk. We then use this algorithm to compute exact forward and backward reachable sets, from which we provide methods for computing control invariant sets and ROAs. Our approach is unique in that we find these sets incrementally, without Lyapunov-based tools. In our examples we demonstrate the ability of our approach to find non-convex control invariant sets and ROAs on tasks with learned van der Pol oscillator and pendulum models. Further, we provide an accelerated algorithm for computing ROAs that leverages the incremental and connected enumeration of affine regions that RPM provides. We show this acceleration to lead to a 15x speedup in our examples. Finally, we apply our methods to find a set of states that are stabilized by an image-based controller for an aircraft runway control problem.
Key facts. Cited by 6 papers in the map (data through 7 Oct 2026). Builds on 46 of its 89 references that are in the map. First posted on arXiv 15 Oct 2022.
Builds on
46 of 89 references.
References · 46
- 2019Normalizing Flows for Probabilistic Modeling and Inferencecited by 1,315
- 2017Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networkscited by 739
- 2018Efficient Neural Network Robustness Certification with General Activation Functionscited by 439
- 2014On the Number of Linear Regions of Deep Neural Networkscited by 378
- 2018Towards Fast Computation of Certified Robustness for ReLU Networkscited by 254
- 2016Understanding Deep Neural Networks with Rectified Linear Unitscited by 253
- 2019Algorithms for Verifying Deep Neural Networkscited by 221
- 2018Formal Security Analysis of Neural Networks using Symbolic Intervalscited by 185
- 2019Complexity of Linear Regions in Deep Networkscited by 166
- 2018Efficient Formal Safety Analysis of Neural Networkscited by 165
- 2019Deep ReLU Networks Have Surprisingly Few Activation Patternscited by 160
- 2017An approach to reachability analysis for feed-forward ReLU neural networkscited by 126
34 more
- 2020Topology of deep neural networkscited by 111
- 2020Learning Stable Deep Dynamics Modelscited by 110
- 2017Universal Function Approximation by Deep Neural Nets with Bounded Width and ReLU Activationscited by 104
- 2018Reachability Analysis of Deep Neural Networks with Provable Guaranteescited by 93
- 2018The Lyapunov Neural Network: Adaptive Stability Certification for Safe Learning of Dynamical Systemscited by 87
- 2018Verisig: verifying safety properties of hybrid systems with neural network controllerscited by 83
- 2019Reverse-Engineering Deep ReLU Networkscited by 81
- 2017Output Reachable Set Estimation and Verification for Multi-Layer Neural Networkscited by 79
- 2021Lyapunov-stable neural-network controlcited by 66
- 2015JuMP: A Modeling Language for Mathematical Optimizationcited by 49
- 2020Stability Analysis using Quadratic Constraints for Systems with Neural Network Controllerscited by 42
- 2021OVERT: An Algorithm for Safety Verification of Neural Network Control Policies for Nonlinear Systemscited by 37
- 2020Reachable Set Estimation for Neural Network Control Systems: A Simulation-Guided Approachcited by 36
- 2020Reachable Polyhedral Marching (RPM): A Safety Verification Algorithm for Robotic Systems with Deep Neural Network Componentscited by 36
- 2020Neural Certificates for Safe Control Policiescited by 35
- 2017Output Range Analysis for Deep Neural Networkscited by 30
- 2021Verification of Image-based Neural Network Controllers Using Generative Modelscited by 27
- 2013Fast Marching Tree: a Fast Marching Sampling-Based Method for Optimal Motion Planning in Many Dimensionscited by 25
- 2022Open- and Closed-Loop Neural Network Verification using Polynomial Zonotopescited by 24
- 2017Reachable Set Computation and Safety Verification for Neural Networks with ReLU Activationscited by 22
- 2021Safe Control with Neural Network Dynamic Modelscited by 21
- 2022Backward Reachability Analysis of Neural Feedback Loops: Techniques for Linear and Nonlinear Systemscited by 18
- 2020Analytic Marching: An Analytic Meshing Solution from Deep Implicit Surface Networkscited by 16
- 2021Learning Region of Attraction for Nonlinear Systemscited by 16
- 2019ART: Abstraction Refinement-Guided Training for Provably Correct Neural Networkscited by 14
- 2018Formal Verification of CNN-based Perception Systemscited by 13
- 2021Traversing the Local Polytopes of ReLU Neural Networks: A Unified Approach for Network Verificationcited by 13
- 2019A Reachability Method for Verifying Dynamical Systems with Deep Neural Network Controllerscited by 11
- 2020Reachability Analysis for Feed-Forward Neural Networks using Face Latticescited by 11
- 2021Learning Density Distribution of Reachable States for Autonomous Systemscited by 11
- 2022Backward Reachability Analysis for Neural Feedback Loopscited by 9
- 2019Dissecting Deep Neural Networkscited by 7
- 2020Safe Predictors for Enforcing Input-Output Specificationscited by 3
- 2017A note on surjectivity of piecewise affine mappingscited by 1
Built on by
Citing papers per year: 2024: 3; 2025: 0; 2026: 3.
6 papers.
- 2024Lyapunov-stable Neural Control for State and Output Feedback: A Novel Formulationcited by 23
- 2024How Generalizable Is My Behavior Cloning Policy? A Statistical Approach to Trustworthy Performance Evaluationcited by 14
- 2024Defining Neural Network Architecture through Polytope Structures of Datasetcited by 2
- 2026Causal Explanations from the Geometric Properties of ReLU Neural Networkscited by 0
- 2026MLSkip: Data Skipping for ML Filters via Lightweight Metadatacited by 0
- 2026ShardNet: Training Neural Controllers with Hard, Non-Convex Constraintscited by 0
- 2026ShardNet: Training Neural Controllers with Hard, Non-Convex Constraints29 Jun 2026
- 2026MLSkip: Data Skipping for ML Filters via Lightweight Metadata2 Jun 2026
- 2026Causal Explanations from the Geometric Properties of ReLU Neural Networks11 May 2026
- 2024How Generalizable Is My Behavior Cloning Policy? A Statistical Approach to Trustworthy Performance Evaluation8 May 2024
- 2024Lyapunov-stable Neural Control for State and Output Feedback: A Novel Formulation11 Apr 2024
- 2024Defining Neural Network Architecture through Polytope Structures of Dataset4 Feb 2024