First Three Years of the International Verification of Neural Networks Competition (VNN-COMP)
Not on the map. Why?
Abstract (arXiv)
This paper presents a summary and meta-analysis of the first three iterations of the annual International Verification of Neural Networks Competition (VNN-COMP) held in 2020, 2021, and 2022. In the VNN-COMP, participants submit software tools that analyze whether given neural networks satisfy specifications describing their input-output behavior. These neural networks and specifications cover a variety of problem classes and tasks, corresponding to safety and robustness properties in image classification, neural control, reinforcement learning, and autonomous systems. We summarize the key processes, rules, and results, present trends observed over the last three years, and provide an outlook into possible future developments.
Key facts. Cited by 58 papers in the map (data through 14 Oct 2026). Builds on 36 of its 70 references that are in the map. First posted on arXiv 14 Jan 2023.
Builds on
36 of 70 references.
References · 36
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2013Intriguing properties of neural networkscited by 5,155
- 2016End to End Learning for Self-Driving Carscited by 1,009
- 2017Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networkscited by 744
- 2018Efficient Neural Network Robustness Certification with General Activation Functionscited by 445
- 2018On the Effectiveness of Interval Bound Propagation for Training Verifiably Robust Modelscited by 328
- 2016Safety Verification of Deep Neural Networkscited by 263
- 2017Formal Verification of Piece-Wise Linear Feed-Forward Neural Networkscited by 242
- 2019Algorithms for Verifying Deep Neural Networkscited by 221
- 2019Towards Stable and Efficient Training of Verifiably Robust Neural Networkscited by 205
24 more
- 2020Fast and Complete: Enabling Complete Neural Network Verification with Rapid and Massively Parallel Incomplete Verifierscited by 187
- 2019Branch and Bound for Piecewise Linear Neural Network Verificationcited by 138
- 2020NNV: The Neural Network Verification Tool for Deep Neural Networks and Learning-Enabled Cyber-Physical Systemscited by 128
- 2022General Cutting Planes for Bound-Propagation-Based Neural Network Verificationcited by 103
- 2022Complete Verification via Multi-Neuron Relaxation Guided Branch-and-Boundcited by 92
- 2017Output Reachable Set Estimation and Verification for Multi-Layer Neural Networkscited by 80
- 2020Verification of Deep Convolutional Neural Networks Using ImageStarscited by 75
- 2021The Second International Verification of Neural Networks Competition (VNN-COMP 2021): Summary and Resultscited by 71
- 2022Certified Training: Small Boxes are All You Needcited by 52
- 2021Fast Certified Robust Training with Short Warmupcited by 46
- 2019Neural Network Branching for Neural Network Verificationcited by 45
- 2021Improved Branch and Bound for Neural Network Verification via Lagrangian Decompositioncited by 44
- 2020Scaling Polyhedral Neural Network Verification on GPUscited by 43
- 2022The Third International Verification of Neural Networks Competition (VNN-COMP 2022): Summary and Resultscited by 39
- 2020Reachable Polyhedral Marching (RPM): A Safety Verification Algorithm for Robotic Systems with Deep Neural Network Componentscited by 36
- 2020Lagrangian Decomposition for Neural Network Verificationcited by 35
- 2021DNNV: A Framework for Deep Neural Network Verificationcited by 23
- 2022Neural Network Verification with Proof Productioncited by 22
- 2022IBP Regularization for Verified Adversarial Robustness via Branch-and-Boundcited by 21
- 2021Scaling the Convex Barrier with Sparse Dual Algorithmscited by 10
- 2021Shared Certificates for Neural Network Verificationcited by 10
- 2019AReN: Assured ReLU NN Architecture for Model Predictive Control of LTI Systemscited by 9
- 2020Debona: Decoupled Boundary Network Analysis for Tighter Bounds and Faster Adversarial Robustness Proofscited by 8
- 2020PEREGRiNN: Penalized-Relaxation Greedy Neural Network Verifiercited by 3
Built on by
Citing papers per year: 2023: 10; 2024: 17; 2025: 14; 2026: 17.
58 papers.
Sort:
By area:
- 2023Provably Bounding Neural Network Preimagescited by 29
- 2023Understanding Certified Training with Interval Bound Propagationcited by 26
- 2023A DPLL(T) Framework for Verifying Deep Neural Networkscited by 24
- 2024Local vs. Global Interpretability: A Computational Complexity Perspectivecited by 23
- 2024NLP Verification: Towards a General Methodology for Certifying Robustnesscited by 16
- 2024Harnessing Neuron Stability to Improve DNN Verificationcited by 13
- 2025Explaining, Fast and Slow: Abstraction and Refinement of Provable Explanationscited by 13
- 2025Neural Network Verification is a Programming Language Challengecited by 12
- 2025SDP-CROWN: Efficient Bound Propagation for Neural Network Verification with Tightness of Semidefinite Programmingcited by 12
- 2023TAPS: Connecting Certified and Adversarial Trainingcited by 11
- 2026Formal Mechanistic Interpretability: Automated Circuit Discovery with Provable Guaranteescited by 11
- 2024Detecting Brittle Decisions for Free: Leveraging Margin Consistency in Deep Robust Classifierscited by 10
38 more
- 2024Robustness Assessment of a Runway Object Classifier for Safe Aircraft Taxiingcited by 8
- 2024Provably Safe Neural Network Controllers via Differential Dynamic Logiccited by 7
- 2024A Certified Proof Checker for Deep Neural Network Verification in Imandracited by 7
- 2024ModelVerification.jl: a Comprehensive Toolbox for Formally Verifying Deep Neural Networkscited by 7
- 2023When to Trust AI: Advances and Challenges for Certification of Neural Networkscited by 6
- 2024Set-Based Training for Neural Network Verificationcited by 6
- 2025Out of the Shadows: Exploring a Latent Space for Neural Network Verificationcited by 6
- 2024Relational DNN Verification With Cross Executional Bound Refinementcited by 5
- 2024SoundnessBench: A Soundness Benchmark for Neural Network Verifierscited by 5
- 2025Abstraction-Based Proof Production in Formal Verification of Neural Networkscited by 5
- 2023GPU-Accelerated Verification of Machine Learning Models for Power Systemscited by 4
- 2024Gaussian Loss Smoothing Enables Certified Training with Tight Convex Relaxationscited by 4
- 2024Revisiting Differential Verification: Equivalence Verification with Confidencecited by 4
- 2025Proof Minimization in Neural Network Verificationcited by 4
- 2025Faster Verified Explanations for Neural Networkscited by 4
- 2023DelBugV: Delta-Debugging Neural Network Verifierscited by 3
- 2024Certified Robust Invariant Polytope Training in Neural Controlled ODEscited by 3
- 2025PICID: Proof-Driven Clause Learning in Neural Network Verificationcited by 3
- 2026Robustness Verification of Polynomial Neural Networkscited by 3
- 2024Logic-Based Explainability: Past, Present & Futurecited by 2
- 2024Achieving the Tightest Relaxation of Sigmoids for Formal Verificationcited by 2
- 2024Verification of Neural Networks against Convolutional Perturbations via Parameterised Kernelscited by 2
- 2026Incremental Neural Network Verification via Learned Conflictscited by 2
- 2023Is Certifying ℓp Robustness Still Worthwhile?cited by 1
- 2023The Pros and Cons of Adversarial Robustnesscited by 1
- 2025A General Framework for Property-Driven Machine Learningcited by 1
- 2026Cascading Robustness Verification: Toward Efficient Model-Agnostic Certificationcited by 1
- 2026IoUCert: Robustness Verification for Anchor-based Object Detectorscited by 1
- 2026VNN-LIB 2.0: Rigorous Foundations for Neural Network Verificationcited by 1
- 2023Syntactic vs Semantic Linear Abstraction and Refinement of Neural Networkscited by 0
- 2025Language Models That Walk the Talk: A Framework for Formal Fairness Certificatescited by 0
- 2025The CAISAR Platform: Extending the Reach of Machine Learning Specification and Verificationcited by 0
- 2025Of Good Demons and Bad Angels: Guaranteeing Safe Control under Finite Precisioncited by 0
- 2025Rigorous Feature Importance Scores based on Shapley Value and Banzhaf Indexcited by 0
- 2025Aircraft Collision Avoidance Systems: Technological Challenges and Solutions on the Path to Regulatory Acceptancecited by 0
- 2026Certified Learning under Distribution Shift: Sound Verification and Identifiable Structurecited by 0
- 2026Adversarial Robustness of Time-Series Classification for Crystal Collimator Alignmentcited by 0
- 2026The Cost of Relaxation: Evaluating the Error in Convex Neural Network Verificationcited by 0
50 most cited of 58 All 58 (JSON)
- 2026Security Properties of Neural Networks as Decision Problems30 Sep 2026
- 2026Verifying Neural Networks with Reinforcement Learning28 Sep 2026
- 2026NNV3: Expanding Neural Network Verification to New Architectures and Domains24 Sep 2026
- 2026Repurposing CLIP to Localize at Pixel Level6 Jul 2026
- 2026Engineering Reliable Autonomous Systems: Challenges and Solutions22 Jun 2026
- 2026The Complexity of Verifying Feedforward Neural Networks in Quantised Settings28 May 2026
- 2026Provably Secure Agent Guardrail28 May 2026
- 2026Precise Verification of Transformers through ReLU-Catalyzed Abstraction Refinement14 May 2026
- 2026VNN-LIB 2.0: Rigorous Foundations for Neural Network Verification8 May 2026
- 2026The Cost of Relaxation: Evaluating the Error in Convex Neural Network Verification20 Apr 2026
- 2026Adversarial Robustness of Time-Series Classification for Crystal Collimator Alignment7 Apr 2026
- 2026Incremental Neural Network Verification via Learned Conflicts12 Mar 2026
38 more
- 2026IoUCert: Robustness Verification for Anchor-based Object Detectors3 Mar 2026
- 2026Formal Mechanistic Interpretability: Automated Circuit Discovery with Provable Guarantees18 Feb 2026
- 2026Certified Learning under Distribution Shift: Sound Verification and Identifiable Structure6 Feb 2026
- 2026Robustness Verification of Polynomial Neural Networks5 Feb 2026
- 2026Cascading Robustness Verification: Toward Efficient Model-Agnostic Certification4 Feb 2026
- 2025Faster Verified Explanations for Neural Networks28 Nov 2025
- 2025Proof Minimization in Neural Network Verification11 Nov 2025
- 2025Aircraft Collision Avoidance Systems: Technological Challenges and Solutions on the Path to Regulatory Acceptance23 Oct 2025
- 2025Rigorous Feature Importance Scores based on Shapley Value and Banzhaf Index16 Aug 2025
- 2025Of Good Demons and Bad Angels: Guaranteeing Safe Control under Finite Precision30 Jul 2025
- 2025Abstraction-Based Proof Production in Formal Verification of Neural Networks11 Jun 2025
- 2025The CAISAR Platform: Extending the Reach of Machine Learning Specification and Verification10 Jun 2025
- 2025Explaining, Fast and Slow: Abstraction and Refinement of Provable Explanations10 Jun 2025
- 2025SDP-CROWN: Efficient Bound Propagation for Neural Network Verification with Tightness of Semidefinite Programming7 Jun 2025
- 2025Out of the Shadows: Exploring a Latent Space for Neural Network Verification23 May 2025
- 2025Language Models That Walk the Talk: A Framework for Formal Fairness Certificates19 May 2025
- 2025A General Framework for Property-Driven Machine Learning1 May 2025
- 2025PICID: Proof-Driven Clause Learning in Neural Network Verification15 Mar 2025
- 2025Neural Network Verification is a Programming Language Challenge10 Jan 2025
- 2024SoundnessBench: A Soundness Benchmark for Neural Network Verifiers4 Dec 2024
- 2024Verification of Neural Networks against Convolutional Perturbations via Parameterised Kernels7 Nov 2024
- 2024Revisiting Differential Verification: Equivalence Verification with Confidence26 Oct 2024
- 2024Achieving the Tightest Relaxation of Sigmoids for Formal Verification20 Aug 2024
- 2024Certified Robust Invariant Polytope Training in Neural Controlled ODEs2 Aug 2024
- 2024ModelVerification.jl: a Comprehensive Toolbox for Formally Verifying Deep Neural Networks30 Jun 2024
- 2024Detecting Brittle Decisions for Free: Leveraging Margin Consistency in Deep Robust Classifiers26 Jun 2024
- 2024Local vs. Global Interpretability: A Computational Complexity Perspective5 Jun 2024
- 2024Logic-Based Explainability: Past, Present & Future4 Jun 2024
- 2024A Certified Proof Checker for Deep Neural Network Verification in Imandra17 May 2024
- 2024Relational DNN Verification With Cross Executional Bound Refinement16 May 2024
- 2024NLP Verification: Towards a General Methodology for Certifying Robustness15 Mar 2024
- 2024Gaussian Loss Smoothing Enables Certified Training with Tight Convex Relaxations11 Mar 2024
- 2024Provably Safe Neural Network Controllers via Differential Dynamic Logic16 Feb 2024
- 2024Set-Based Training for Neural Network Verification26 Jan 2024
- 2024Harnessing Neuron Stability to Improve DNN Verification19 Jan 2024
- 2024Robustness Assessment of a Runway Object Classifier for Safe Aircraft Taxiing8 Jan 2024
- 2023The Pros and Cons of Adversarial Robustness18 Dec 2023
- 2023Is Certifying ℓp Robustness Still Worthwhile?13 Oct 2023
50 newest of 58 All 58 (JSON)
- 2026Provably Secure Agent Guardrailcited by 0
- 2026Provably Secure Agent Guardrail28 May 2026
- 2026Verifying Neural Networks with Reinforcement Learningcited by 0
- 2026Verifying Neural Networks with Reinforcement Learning28 Sep 2026
- 2026Security Properties of Neural Networks as Decision Problems30 Sep 2026
- 2023Provably Bounding Neural Network Preimagescited by 29
- 2023Understanding Certified Training with Interval Bound Propagationcited by 26
- 2023A DPLL(T) Framework for Verifying Deep Neural Networkscited by 24
- 2024Local vs. Global Interpretability: A Computational Complexity Perspectivecited by 23
- 2024NLP Verification: Towards a General Methodology for Certifying Robustnesscited by 16
- 2024Harnessing Neuron Stability to Improve DNN Verificationcited by 13
- 2025Explaining, Fast and Slow: Abstraction and Refinement of Provable Explanationscited by 13
- 2025Neural Network Verification is a Programming Language Challengecited by 12
- 2025SDP-CROWN: Efficient Bound Propagation for Neural Network Verification with Tightness of Semidefinite Programmingcited by 12
- 2023TAPS: Connecting Certified and Adversarial Trainingcited by 11
- 2024Detecting Brittle Decisions for Free: Leveraging Margin Consistency in Deep Robust Classifierscited by 10
- 2024Robustness Assessment of a Runway Object Classifier for Safe Aircraft Taxiingcited by 8
12 most cited of 54 All 54 (JSON)
- 2026NNV3: Expanding Neural Network Verification to New Architectures and Domains24 Sep 2026
- 2026Repurposing CLIP to Localize at Pixel Level6 Jul 2026
- 2026Engineering Reliable Autonomous Systems: Challenges and Solutions22 Jun 2026
- 2026The Complexity of Verifying Feedforward Neural Networks in Quantised Settings28 May 2026
- 2026Precise Verification of Transformers through ReLU-Catalyzed Abstraction Refinement14 May 2026
- 2026VNN-LIB 2.0: Rigorous Foundations for Neural Network Verification8 May 2026
- 2026The Cost of Relaxation: Evaluating the Error in Convex Neural Network Verification20 Apr 2026
- 2026Adversarial Robustness of Time-Series Classification for Crystal Collimator Alignment7 Apr 2026
- 2026Incremental Neural Network Verification via Learned Conflicts12 Mar 2026
- 2026IoUCert: Robustness Verification for Anchor-based Object Detectors3 Mar 2026
- 2026Certified Learning under Distribution Shift: Sound Verification and Identifiable Structure6 Feb 2026
- 2026Robustness Verification of Polynomial Neural Networks5 Feb 2026
12 newest of 54 All 54 (JSON)