Expediting Neural Network Verification via Network Reduction
Not on the map. Why?
Abstract (arXiv)
A wide range of verification methods have been proposed to verify the safety properties of deep neural networks ensuring that the networks function correctly in critical applications. However, many well-known verification tools still struggle with complicated network architectures and large network sizes. In this work, we propose a network reduction technique as a pre-processing method prior to verification. The proposed method reduces neural networks via eliminating stable ReLU neurons, and transforming them into a sequential neural network consisting of ReLU and Affine layers which can be handled by the most verification tools. We instantiate the reduction technique on the state-of-the-art complete and incomplete verification tools, including alpha-beta-crown, VeriNet and PRIMA. Our experiments on a large set of benchmarks indicate that the proposed technique can significantly reduce neural networks and speed up existing verification tools. Furthermore, the experiment results also show that network reduction can improve the availability of existing verification tools on many networks by reducing them into sequential neural networks.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Builds on 29 of its 51 references that are in the map. First posted on arXiv 7 Aug 2023.
Builds on
29 of 51 references.
References · 29
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2017Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networkscited by 739
- 2017Provable defenses against adversarial examples via the convex outer adversarial polytopecited by 564
- 2018Efficient Neural Network Robustness Certification with General Activation Functionscited by 439
- 2018On the Effectiveness of Interval Bound Propagation for Training Verifiably Robust Modelscited by 322
- 2018Towards Fast Computation of Certified Robustness for ReLU Networkscited by 254
- 2021Beta-CROWN: Efficient Bound Propagation with Per-neuron Split Constraints for Complete and Incomplete Neural Network Robustness Verificationcited by 224
- 2020Fast and Complete: Enabling Complete Neural Network Verification with Rapid and Massively Parallel Incomplete Verifierscited by 183
- 2018Semidefinite relaxations for certifying robustness to adversarial examplescited by 178
- 2018Efficient Formal Safety Analysis of Neural Networkscited by 165
- 2019Branch and Bound for Piecewise Linear Neural Network Verificationcited by 138
- 2018A Dual Approach to Scalable Verification of Deep Networkscited by 125
17 more
- 2022General Cutting Planes for Bound-Propagation-Based Neural Network Verificationcited by 102
- 2022Complete Verification via Multi-Neuron Relaxation Guided Branch-and-Boundcited by 92
- 2021PRIMA: General and Precise Neural Network Certification via Scalable Convex Hull Approximationscited by 77
- 2019An Abstraction-Based Framework for Neural Network Verificationcited by 68
- 2020The Convex Relaxation Barrier, Revisited: Tightened Single-Neuron Relaxations for Neural Network Verificationcited by 50
- 2019Neural Network Branching for Neural Network Verificationcited by 45
- 2020Scaling Polyhedral Neural Network Verification on GPUscited by 43
- 2019Fastened CROWN: Tightened Neural Network Robustness Certificatescited by 39
- 2022The Third International Verification of Neural Networks Competition (VNN-COMP 2022): Summary and Resultscited by 39
- 2020Lagrangian Decomposition for Neural Network Verificationcited by 35
- 2020Abstraction based Output Range Analysis for Neural Networkscited by 34
- 2020Improving Neural Network Verification through Spurious Region Guided Refinementcited by 30
- 2022An Abstraction-Refinement Approach to Verifying Convolutional Neural Networkscited by 24
- 2021DNNV: A Framework for Deep Neural Network Verificationcited by 23
- 2020Abstract Neural Networkscited by 11
- 2020Debona: Decoupled Boundary Network Analysis for Tighter Bounds and Faster Adversarial Robustness Proofscited by 8
- 2023Fully Automatic Neural Network Reduction for Formal Verificationcited by 6
Built on by
Citing papers per year: 2026: 1.
1 paper.