COLEP: Certifiably Robust Learning-Reasoning Conformal Prediction via Probabilistic Circuits
Not on the map. Why?
Abstract (arXiv)
Conformal prediction has shown spurring performance in constructing statistically rigorous prediction sets for arbitrary black-box machine learning models, assuming the data is exchangeable. However, even small adversarial perturbations during the inference can violate the exchangeability assumption, challenge the coverage guarantees, and result in a subsequent decline in empirical coverage. In this work, we propose a certifiably robust learning-reasoning conformal prediction framework (COLEP) via probabilistic circuits, which comprise a data-driven learning component that trains statistical models to learn different semantic concepts, and a reasoning component that encodes knowledge and characterizes the relationships among the trained models for logic reasoning. To achieve exact and efficient reasoning, we employ probabilistic circuits (PCs) within the reasoning component. Theoretically, we provide end-to-end certification of prediction coverage for COLEP in the presence of bounded adversarial perturbations. We also provide certified coverage considering the finite size of the calibration set. Furthermore, we prove that COLEP achieves higher prediction coverage and accuracy over a single model as long as the utilities of knowledge models are non-trivial. Empirically, we show the validity and tightness of our certified coverage, demonstrating the robust conformal prediction of COLEP on various datasets, including GTSRB, CIFAR10, and AwA2. We show that COLEP achieves up to 12% improvement in certified coverage on GTSRB, 9% on CIFAR-10, and 14% on AwA2.
Key facts. Cited by 9 papers in the map (data through 7 Oct 2026). Builds on 53 of its 80 references that are in the map. First posted on arXiv 17 Mar 2024.
Builds on
53 of 80 references.
References · 53
- 2017Attention Is All You Needcited by 59,932
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2013Intriguing properties of neural networkscited by 5,114
- 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,442
- 2022Competition-Level Code Generation with AlphaCodecited by 1,427
- 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,324
- 2016Distribution-Free Predictive Inference For Regressioncited by 657
- 2017Provable defenses against adversarial examples via the convex outer adversarial polytopecited by 564
- 2017Zero-Shot Learning -- A Comprehensive Evaluation of the Good, the Bad and the Uglycited by 536
- 2023DecodingTrust: A Comprehensive Assessment of Trustworthiness in GPT Modelscited by 505
38 more
- 2018Certified Robustness to Adversarial Examples with Differential Privacycited by 462
- 2018Efficient Neural Network Robustness Certification with General Activation Functionscited by 439
- 2020Classification with Valid and Adaptive Coveragecited by 390
- 2019Neural Probabilistic Logic Programming in DeepProbLogcited by 389
- 2022Conformal prediction beyond exchangeabilitycited by 348
- 2019Provably Robust Deep Learning via Adversarially Trained Smoothed Classifierscited by 328
- 2018On the Effectiveness of Interval Bound Propagation for Training Verifiably Robust Modelscited by 322
- 2018Neural-Symbolic VQA: Disentangling Reasoning from Vision and Language Understandingcited by 304
- 2017A Semantic Loss Function for Deep Learning with Symbolic Knowledgecited by 267
- 2017Neural-Symbolic Learning and Reasoning: A Survey and Interpretationcited by 195
- 2018Spatially Transformed Adversarial Examplescited by 195
- 2018Lipschitz-Margin Training: Scalable Certification of Perturbation Invariance for Deep Neural Networkscited by 193
- 2022Semantic Probabilistic Layers for Neuro-Symbolic Learningcited by 103
- 2021Invisible for both Camera and LiDAR: Security of Multi-Sensor Fusion based Perception in Autonomous Driving Under Physical-World Attackscited by 101
- 2013A Differential Approach to Inference in Bayesian Networkscited by 93
- 2021CRFL: Certifiably Robust Federated Learning against Backdoor Attackscited by 91
- 2022SafeBench: A Benchmarking Platform for Safety Evaluation of Autonomous Vehiclescited by 65
- 2021Sensitivity Analysis of Individual Treatment Effects: A Robust Conformal Inference Approachcited by 62
- 2020TSS: Transformation-Specific Smoothing for Robustness Certificationcited by 49
- 2021Improved deterministic l2 robustness on CIFAR-10 and CIFAR-100cited by 47
- 2021Selection and Aggregation of Conformal Prediction Setscited by 46
- 2021CROP: Certifying Robust Policies for Reinforcement Learning through Functional Smoothingcited by 41
- 2021Policy Smoothing for Provably Robust Reinforcement Learningcited by 39
- 2023DiffAttack: Evasion Attacks Against Diffusion-Based Adversarial Purificationcited by 36
- 2018Differentially Private Data Generative Modelscited by 33
- 2022LOT: Layer-wise Orthogonal Training on Improving ℓ2 Certified Robustnesscited by 32
- 2019Characterizing Attacks on Deep Reinforcement Learningcited by 31
- 2024C-RAG: Certified Generation Risks for Retrieval-Augmented Language Modelscited by 27
- 2022COPA: Certifying Robust Policies for Offline Reinforcement Learning against Poisoning Attackscited by 25
- 2023Probabilistically robust conformal predictioncited by 25
- 2021Knowledge Enhanced Machine Learning Pipeline against Diverse Adversarial Attackscited by 24
- 2022Double Sampling Randomized Smoothingcited by 22
- 2022Fairness in Federated Learning via Core-Stabilitycited by 22
- 2021Multi Split Conformal Predictioncited by 21
- 2021Label-Assemble: Leveraging Multiple Datasets with Partial Labelscited by 20
- 2017On Relaxing Determinism in Arithmetic Circuitscited by 14
- 2020Improving Certified Robustness via Statistical Learning with Logical Reasoningcited by 12
- 2022Certifying Some Distributional Fairness with Subpopulation Decompositioncited by 11
50 most cited of 53 All 53 (JSON)
Built on by
Citing papers per year: 2024: 3; 2025: 4; 2026: 2.
9 papers.
- 2024R2-Guard: Robust Reasoning Enabled LLM Guardrail via Knowledge-Enhanced Logical Reasoningcited by 41
- 2024Robust Yet Efficient Conformal Prediction Setscited by 16
- 2024Certifiably Byzantine-Robust Federated Conformal Predictioncited by 8
- 2025Neural Probabilistic Circuits: Enabling Compositional and Interpretable Predictions through Logical Reasoningcited by 6
- 2025Understanding and Improving Adversarial Robustness of Neural Probabilistic Circuitscited by 1
- 2025Hardware-efficient tractable probabilistic inference for TinyML Neurosymbolic AI applicationscited by 0
- 2025Ensuring Calibration Robustness in Split Conformal Prediction Under Adversarial Attackscited by 0
- 2026Softmax is not Enough (for Adaptive Conformal Classification)cited by 0
- 2026Conformal Prediction for Offensive Securitycited by 0
- 2026Conformal Prediction for Offensive Security4 Sep 2026
- 2026Softmax is not Enough (for Adaptive Conformal Classification)23 Feb 2026
- 2025Ensuring Calibration Robustness in Split Conformal Prediction Under Adversarial Attacks23 Nov 2025
- 2025Understanding and Improving Adversarial Robustness of Neural Probabilistic Circuits24 Sep 2025
- 2025Hardware-efficient tractable probabilistic inference for TinyML Neurosymbolic AI applications7 Jul 2025
- 2025Neural Probabilistic Circuits: Enabling Compositional and Interpretable Predictions through Logical Reasoning13 Jan 2025
- 2024Robust Yet Efficient Conformal Prediction Sets12 Jul 2024
- 2024R2-Guard: Robust Reasoning Enabled LLM Guardrail via Knowledge-Enhanced Logical Reasoning8 Jul 2024
- 2024Certifiably Byzantine-Robust Federated Conformal Prediction4 Jun 2024