The Third International Verification of Neural Networks Competition (VNN-COMP 2022): Summary and Results
Not on the map. Why?
Abstract (arXiv)
This report summarizes the 3rd International Verification of Neural Networks Competition (VNN-COMP 2022), held as a part of the 5th Workshop on Formal Methods for ML-Enabled Autonomous Systems (FoMLAS), which was collocated with the 34th International Conference on Computer-Aided Verification (CAV). VNN-COMP is held annually to facilitate the fair and objective comparison of state-of-the-art neural network verification tools, encourage the standardization of tool interfaces, and bring together the neural network verification community. To this end, standardized formats for networks (ONNX) and specification (VNN-LIB) were defined, tools were evaluated on equal-cost hardware (using an automatic evaluation pipeline based on AWS instances), and tool parameters were chosen by the participants before the final test sets were made public. In the 2022 iteration, 11 teams participated on a diverse set of 12 scored benchmarks. This report summarizes the rules, benchmarks, participating tools, results, and lessons learned from this iteration of this competition.
Key facts. Cited by 39 papers in the map (data through 7 Oct 2026). Builds on 29 of its 53 references that are in the map. First posted on arXiv 20 Dec 2022.
Builds on
29 of 53 references.
References · 29
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,160
- 2015U-Net: Convolutional Networks for Biomedical Image Segmentationcited by 19,604
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2017Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networkscited by 739
- 2017Provable defenses against adversarial examples via the convex outer adversarial polytopecited by 564
- 2019Towards Stable and Efficient Training of Verifiably Robust Neural Networkscited by 204
- 2017The Case for Learned Index Structurescited by 188
- 2020Fast and Complete: Enabling Complete Neural Network Verification with Rapid and Massively Parallel Incomplete Verifierscited by 183
- 2022General Cutting Planes for Bound-Propagation-Based Neural Network Verificationcited by 102
- 2022Complete Verification via Multi-Neuron Relaxation Guided Branch-and-Boundcited by 92
17 more
- 2020Verification of Deep Convolutional Neural Networks Using ImageStarscited by 75
- 2019Neural Network Branching for Neural Network Verificationcited by 45
- 2021Improved Branch and Bound for Neural Network Verification via Lagrangian Decompositioncited by 44
- 2020Parallelization Techniques for Verifying Neural Networkscited by 36
- 2020Lagrangian Decomposition for Neural Network Verificationcited by 35
- 2020Abstraction based Output Range Analysis for Neural Networkscited by 34
- 2022Efficient Neural Network Analysis with Sum-of-Infeasibilitiescited by 24
- 2021DNNV: A Framework for Deep Neural Network Verificationcited by 23
- 2022Scalable Verification of GNN-based Job Schedulerscited by 18
- 2022Toward Certified Robustness Against Real-World Distribution Shiftscited by 16
- 2021Generating Adversarial Examples with Graph Neural Networkscited by 12
- 2021Learning Density Distribution of Reachable States for Autonomous Systemscited by 11
- 2021Scaling the Convex Barrier with Sparse Dual Algorithmscited by 10
- 2020Debona: Decoupled Boundary Network Analysis for Tighter Bounds and Faster Adversarial Robustness Proofscited by 8
- 2021Fast BATLLNN: Fast Box Analysis of Two-Level Lattice Neural Networkscited by 8
- 2021Neural Network Branch-and-Bound for Neural Network Verificationcited by 6
- 2022Case Studies for Computing Density of Reachable States for Safe Autonomous Motion Planningcited by 1
Built on by
Citing papers per year: 2023: 15; 2024: 11; 2025: 7; 2026: 6.
39 papers.
Sort:
- 2023First Three Years of the International Verification of Neural Networks Competition (VNN-COMP)cited by 58
- 2024Scalable Neural Network Verification with Branch-and-bound Inferred Cutting Planescited by 33
- 2023Understanding Certified Training with Interval Bound Propagationcited by 26
- 2023A DPLL(T) Framework for Verifying Deep Neural Networkscited by 23
- 2024Harnessing Neuron Stability to Improve DNN Verificationcited by 13
- 2023TAPS: Connecting Certified and Adversarial Trainingcited by 11
- 2026Formal Mechanistic Interpretability: Automated Circuit Discovery with Provable Guaranteescited by 10
- 2023Asymmetric Certified Robustness via Feature-Convex Neural Networkscited by 8
- 2024PREMAP: A Unifying PREiMage APproximation Framework for Neural Networkscited by 8
- 2024ModelVerification.jl: a Comprehensive Toolbox for Formally Verifying Deep Neural Networkscited by 7
- 2023ANTONIO: Towards a Systematic Method of Generating NLP Benchmarks for Verificationcited by 6
- 2023DeepBern-Nets: Taming the Complexity of Certifying Neural Networks using Bernstein Polynomial Activations and Precise Bound Propagationcited by 5
27 more
- 2024SoundnessBench: A Soundness Benchmark for Neural Network Verifierscited by 5
- 2025Position: Certified Robustness Does Not (Yet) Imply Model Securitycited by 4
- 2023A Tale of Two Approximations: Tightening Over-Approximation for DNN Robustness Verification via Under-Approximationcited by 2
- 2023Robustness Verification of Deep Neural Networks using Star-Based Reachability Analysis with Variable-Length Time Series Inputcited by 2
- 2024DEM: A Method for Certifying Deep Neural Network Classifier Outputs in Aerospacecited by 2
- 2024Scalable Exact Verification of Optimization Proxies for Large-Scale Optimal Power Flowcited by 2
- 2024Monitizer: Automating Design and Evaluation of Neural Network Monitorscited by 2
- 2024Verification of Neural Networks against Convolutional Perturbations via Parameterised Kernelscited by 2
- 2025Adaptive Branch-and-Bound Tree Exploration for Neural Network Verificationcited by 2
- 2025Efficient Preimage Approximation for Neural Network Certificationcited by 2
- 2025Floating-Point Neural Network Verification at the Software Levelcited by 2
- 2023Expediting Neural Network Verification via Network Reductioncited by 1
- 2023Comparing Differentiable Logics for Learning Systems: A Research Previewcited by 1
- 2023The Pros and Cons of Adversarial Robustnesscited by 1
- 2025A General Framework for Property-Driven Machine Learningcited by 1
- 2025Fast and Flexible Robustness Certificates for Semantic Segmentationcited by 1
- 2023CGDTest: A Constrained Gradient Descent Algorithm for Testing Neural Networkscited by 0
- 2023Verifying Global Neural Network Specifications using Hyperpropertiescited by 0
- 2023Adaptive Certified Training: Towards Better Accuracy-Robustness Tradeoffscited by 0
- 2024Towards General Robustness Verification of MaxPool-based Convolutional Neural Networks via Tightening Linear Approximationcited by 0
- 2024Creating a Formally Verified Neural Network for Autonomous Navigation: An Experience Reportcited by 0
- 2025Efficient Neural Network Verification via Order Leading Exploration of Branch-and-Bound Treescited by 0
- 2026Analyzing Symbolic Properties for DRL Agents in Systems and Networkingcited by 0
- 2026Scaling Neural Network Verification with Tensor Parallelism and Fully Sharded Data Parallelismcited by 0
- 2026Shifting-based Optimizable Linear Relaxations for General Activation Functionscited by 0
- 2026Certified but Private: Scalable Zero-Knowledge Proofs for Neural Network Guaranteescited by 0
- 2026Reachability-Based Formal Verification of Graph Neural Networks with Node and Edge Featurescited by 0
- 2026Reachability-Based Formal Verification of Graph Neural Networks with Node and Edge Features24 Sep 2026
- 2026Certified but Private: Scalable Zero-Knowledge Proofs for Neural Network Guarantees17 Aug 2026
- 2026Shifting-based Optimizable Linear Relaxations for General Activation Functions18 Jun 2026
- 2026Scaling Neural Network Verification with Tensor Parallelism and Fully Sharded Data Parallelism8 Jun 2026
- 2026Analyzing Symbolic Properties for DRL Agents in Systems and Networking6 Apr 2026
- 2026Formal Mechanistic Interpretability: Automated Circuit Discovery with Provable Guarantees18 Feb 2026
- 2025Fast and Flexible Robustness Certificates for Semantic Segmentation3 Dec 2025
- 2025Floating-Point Neural Network Verification at the Software Level27 Oct 2025
- 2025Efficient Neural Network Verification via Order Leading Exploration of Branch-and-Bound Trees23 Jul 2025
- 2025Position: Certified Robustness Does Not (Yet) Imply Model Security16 Jun 2025
- 2025Efficient Preimage Approximation for Neural Network Certification28 May 2025
- 2025Adaptive Branch-and-Bound Tree Exploration for Neural Network Verification2 May 2025
27 more
- 2025A General Framework for Property-Driven Machine Learning1 May 2025
- 2024Scalable Neural Network Verification with Branch-and-bound Inferred Cutting Planes31 Dec 2024
- 2024SoundnessBench: A Soundness Benchmark for Neural Network Verifiers4 Dec 2024
- 2024Creating a Formally Verified Neural Network for Autonomous Navigation: An Experience Report21 Nov 2024
- 2024Verification of Neural Networks against Convolutional Perturbations via Parameterised Kernels7 Nov 2024
- 2024PREMAP: A Unifying PREiMage APproximation Framework for Neural Networks17 Aug 2024
- 2024ModelVerification.jl: a Comprehensive Toolbox for Formally Verifying Deep Neural Networks30 Jun 2024
- 2024Towards General Robustness Verification of MaxPool-based Convolutional Neural Networks via Tightening Linear Approximation2 Jun 2024
- 2024Monitizer: Automating Design and Evaluation of Neural Network Monitors16 May 2024
- 2024Scalable Exact Verification of Optimization Proxies for Large-Scale Optimal Power Flow9 May 2024
- 2024Harnessing Neuron Stability to Improve DNN Verification19 Jan 2024
- 2024DEM: A Method for Certifying Deep Neural Network Classifier Outputs in Aerospace4 Jan 2024
- 2023The Pros and Cons of Adversarial Robustness18 Dec 2023
- 2023Comparing Differentiable Logics for Learning Systems: A Research Preview16 Nov 2023
- 2023Expediting Neural Network Verification via Network Reduction7 Aug 2023
- 2023Robustness Verification of Deep Neural Networks using Star-Based Reachability Analysis with Variable-Length Time Series Input26 Jul 2023
- 2023Adaptive Certified Training: Towards Better Accuracy-Robustness Tradeoffs24 Jul 2023
- 2023A DPLL(T) Framework for Verifying Deep Neural Networks17 Jul 2023
- 2023Verifying Global Neural Network Specifications using Hyperproperties21 Jun 2023
- 2023Understanding Certified Training with Interval Bound Propagation17 Jun 2023
- 2023A Tale of Two Approximations: Tightening Over-Approximation for DNN Robustness Verification via Under-Approximation26 May 2023
- 2023DeepBern-Nets: Taming the Complexity of Certifying Neural Networks using Bernstein Polynomial Activations and Precise Bound Propagation22 May 2023
- 2023TAPS: Connecting Certified and Adversarial Training8 May 2023
- 2023ANTONIO: Towards a Systematic Method of Generating NLP Benchmarks for Verification6 May 2023
- 2023CGDTest: A Constrained Gradient Descent Algorithm for Testing Neural Networks4 Apr 2023
- 2023Asymmetric Certified Robustness via Feature-Convex Neural Networks3 Feb 2023
- 2023First Three Years of the International Verification of Neural Networks Competition (VNN-COMP)14 Jan 2023
- 2023First Three Years of the International Verification of Neural Networks Competition (VNN-COMP)cited by 58
- 2024Scalable Neural Network Verification with Branch-and-bound Inferred Cutting Planescited by 33
- 2023Understanding Certified Training with Interval Bound Propagationcited by 26
- 2023A DPLL(T) Framework for Verifying Deep Neural Networkscited by 23
- 2024Harnessing Neuron Stability to Improve DNN Verificationcited by 13
- 2023TAPS: Connecting Certified and Adversarial Trainingcited by 11
- 2026Formal Mechanistic Interpretability: Automated Circuit Discovery with Provable Guaranteescited by 10
- 2023Asymmetric Certified Robustness via Feature-Convex Neural Networkscited by 8
- 2024PREMAP: A Unifying PREiMage APproximation Framework for Neural Networkscited by 8
- 2024ModelVerification.jl: a Comprehensive Toolbox for Formally Verifying Deep Neural Networkscited by 7
- 2023ANTONIO: Towards a Systematic Method of Generating NLP Benchmarks for Verificationcited by 6
- 2023DeepBern-Nets: Taming the Complexity of Certifying Neural Networks using Bernstein Polynomial Activations and Precise Bound Propagationcited by 5
12 most cited of 39 All 39 (JSON)
- 2026Reachability-Based Formal Verification of Graph Neural Networks with Node and Edge Features24 Sep 2026
- 2026Certified but Private: Scalable Zero-Knowledge Proofs for Neural Network Guarantees17 Aug 2026
- 2026Shifting-based Optimizable Linear Relaxations for General Activation Functions18 Jun 2026
- 2026Scaling Neural Network Verification with Tensor Parallelism and Fully Sharded Data Parallelism8 Jun 2026
- 2026Analyzing Symbolic Properties for DRL Agents in Systems and Networking6 Apr 2026
- 2026Formal Mechanistic Interpretability: Automated Circuit Discovery with Provable Guarantees18 Feb 2026
- 2025Fast and Flexible Robustness Certificates for Semantic Segmentation3 Dec 2025
- 2025Floating-Point Neural Network Verification at the Software Level27 Oct 2025
- 2025Efficient Neural Network Verification via Order Leading Exploration of Branch-and-Bound Trees23 Jul 2025
- 2025Position: Certified Robustness Does Not (Yet) Imply Model Security16 Jun 2025
- 2025Efficient Preimage Approximation for Neural Network Certification28 May 2025
- 2025Adaptive Branch-and-Bound Tree Exploration for Neural Network Verification2 May 2025
12 newest of 39 All 39 (JSON)