Do stable neural networks exist for classification problems? -- A new view on stability in AI
Not on the map. Why?
Abstract (arXiv)
In deep learning (DL) the instability phenomenon is widespread and well documented, most commonly using the classical measure of stability, the Lipschitz constant. While a small Lipchitz constant is traditionally viewed as guarantying stability, it does not capture the instability phenomenon in DL for classification well. The reason is that a classification function -- which is the target function to be approximated -- is necessarily discontinuous, thus having an 'infinite' Lipchitz constant. As a result, the classical approach will deem every classification function unstable, yet basic classification functions a la 'is there a cat in the image?' will typically be locally very 'flat' -- and thus locally stable -- except at the decision boundary. The lack of an appropriate measure of stability hinders a rigorous theory for stability in DL, and consequently, there are no proper approximation theoretic results that can guarantee the existence of stable networks for classification functions. In this paper we introduce a novel stability measure mathscrS(f), for any classification function f, appropriate to study the stability of discontinuous functions and their approximations. We further prove two approximation theorems: First, for any ε > 0 and any classification function f on a compact set, there is a neural network (NN) psi, such that psi - f neq 0 only on a set of measure < ε, moreover, mathscrS(psi) ≥ mathscrS(f) - ε (as accurate and stable as f up to ε). Second, for any classification function f and ε > 0, there exists a NN psi such that psi = f on the set of points that are at least ε away from the decision boundary.
Key facts. Cited by 2 papers in the map (data through 7 Oct 2026). Builds on 48 of its 82 references that are in the map. First posted on arXiv 15 Jan 2024.
Builds on
48 of 82 references.
References · 48
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2013Intriguing properties of neural networkscited by 5,114
- 2013Rich feature hierarchies for accurate object detection and semantic segmentationcited by 2,160
- 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,315
- 2018Robustness May Be at Odds with Accuracycited by 873
- 2016Universal adversarial perturbationscited by 774
- 2018Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Surveycited by 459
- 2018Audio Adversarial Examples: Targeted Attacks on Speech-to-Textcited by 268
- 2019On instabilities of deep learning in image reconstruction - Does AI come at a cost?cited by 211
- 2019Universal Approximation with Deep Narrow Networkscited by 198
36 more
- 2017Optimal approximation of piecewise smooth functions using deep ReLU neural networkscited by 176
- 2018Optimal approximation of continuous functions by very deep ReLU networkscited by 165
- 2021A Universal Law of Robustness via Isoperimetrycited by 150
- 2019Adversarial Robustness through Local Linearizationcited by 146
- 2016Robust Large Margin Deep Neural Networkscited by 117
- 2019Deep Neural Network Approximation Theorycited by 92
- 2017Optimal Approximation with Sparsely Connected Deep Neural Networkscited by 90
- 2021Training Certifiably Robust Neural Networks with Efficient Local Lipschitz Boundscited by 64
- 2020The gap between theory and practice in function approximation with deep neural networkscited by 53
- 2021Can stable and accurate neural networks be computed? -- On the barriers of deep learning and Smale's 18th problemcited by 53
- 2019Approximation spaces of deep neural networkscited by 51
- 2022Rethinking Lipschitz Neural Networks and Certified Robustness: A Boolean Function Perspectivecited by 48
- 2019Nonlinear Approximation and (Deep) ReLU Networkscited by 45
- 2020The troublesome kernel -- On hallucinations, no free lunches and the accuracy-stability trade-off in inverse problemscited by 40
- 2021Towards Certifying L-infinity Robustness using Neural Networks with L-inf-dist Neuronscited by 40
- 2020Structure preserving deep learningcited by 30
- 2020Neural network approximation and estimation of classifiers with classification boundary in a Barron classcited by 28
- 2020The universal approximation theorem for complex-valued neural networkscited by 28
- 2021The CirCor DigiScope Dataset: From Murmur Detection to Murmur Classificationcited by 25
- 2020Improving Robustness of Deep-Learning-Based Image Reconstructioncited by 23
- 2022Improving Lipschitz-Constrained Neural Networks by Learning Activation Functionscited by 23
- 2020Deep Neural Networks Are Effective At Learning High-Dimensional Hilbert-Valued Functions From Limited Datacited by 22
- 2021The Geometry of Adversarial Training in Binary Classificationcited by 20
- 2023On the Foundation of Distributionally Robust Reinforcement Learningcited by 18
- 2018Correction of AI systems by linear discriminants: Probabilistic foundationscited by 17
- 2021The mathematics of adversarial attacks in AI -- Why deep learning is unstable despite the existence of stable neural networkscited by 16
- 2021Neural Network Approximation of Refinable Functionscited by 15
- 2020A Closer Look at Accuracy vs. Robustnesscited by 14
- 2021The Feasibility and Inevitability of Stealth Attackscited by 12
- 2018The universal approximation power of finite-width deep ReLU networkscited by 11
- 2021The extended Smale's 9th problem -- On computational barriers and paradoxes in estimation, regularisation, computer-assisted proofs and learningcited by 11
- 2023Adversarial Ink: Componentwise Backward Error Attacks on Deep Learningcited by 7
- 2022Generalised hardness of approximation and the SCI hierarchy -- On determining the boundaries of training algorithms in AIcited by 6
- 2022NESTANets: Stable, accurate and efficient neural networks for analysis-sparse inverse problemscited by 5
- 2023Generalization Limits of Graph Neural Networks in Identity Effects Learningcited by 3
- 2023When can you trust feature selection? -- I: A condition-based analysis of LASSO and generalised hardness of approximationcited by 2
Built on by
Citing papers per year: 2024: 1; 2025: 0; 2026: 1.
2 papers.