Relational DNN Verification With Cross Executional Bound Refinement
Not on the map. Why?
Abstract (arXiv)
We focus on verifying relational properties defined over deep neural networks (DNNs) such as robustness against universal adversarial perturbations (UAP), certified worst-case hamming distance for binary string classifications, etc. Precise verification of these properties requires reasoning about multiple executions of the same DNN. However, most of the existing works in DNN verification only handle properties defined over single executions and as a result, are imprecise for relational properties. Though few recent works for relational DNN verification, capture linear dependencies between the inputs of multiple executions, they do not leverage dependencies between the outputs of hidden layers producing imprecise results. We develop a scalable relational verifier RACoon that utilizes cross-execution dependencies at all layers of the DNN gaining substantial precision over SOTA baselines on a wide range of datasets, networks, and relational properties.
Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Builds on 32 of its 48 references that are in the map. First posted on arXiv 16 May 2024.
Builds on
32 of 48 references.
References · 32
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2021Convex optimizationcited by 2,515
- 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,340
- 2016End to End Learning for Self-Driving Carscited by 1,009
- 2016Universal adversarial perturbationscited by 784
- 2017Provable defenses against adversarial examples via the convex outer adversarial polytopecited by 567
- 2018Efficient Neural Network Robustness Certification with General Activation Functionscited by 445
- 2017Formal Verification of Piece-Wise Linear Feed-Forward Neural Networkscited by 242
- 2019Towards Stable and Efficient Training of Verifiably Robust Neural Networkscited by 205
- 2020Fast and Complete: Enabling Complete Neural Network Verification with Rapid and Massively Parallel Incomplete Verifierscited by 187
- 2018Efficient Formal Safety Analysis of Neural Networkscited by 165
20 more
- 2019Branch and Bound for Piecewise Linear Neural Network Verificationcited by 138
- 2019A Convex Relaxation Barrier to Tight Robustness Verification of Neural Networkscited by 125
- 2018Strong mixed-integer programming formulations for trained neural networkscited by 115
- 2022General Cutting Planes for Bound-Propagation-Based Neural Network Verificationcited by 103
- 2022Complete Verification via Multi-Neuron Relaxation Guided Branch-and-Boundcited by 92
- 2019Adversarial camera stickers: A physical camera-based attack on deep learning systemscited by 70
- 2023First Three Years of the International Verification of Neural Networks Competition (VNN-COMP)cited by 58
- 2020ReluDiff: Differential Verification of Deep Neural Networkscited by 29
- 2020NeuroDiff: Scalable Differential Verification of Neural Networks using Fine-Grained Approximationcited by 22
- 2022Double Sampling Randomized Smoothingcited by 22
- 2020Fast Geometric Projections for Local Robustness Certificationcited by 21
- 2019Adversarial Music: Real World Audio Adversary Against Wake-word Detection Systemcited by 20
- 2022BagFlip: A Certified Defense against Data Poisoningcited by 19
- 2022CertiFair: A Framework for Certified Global Fairness of Neural Networkscited by 17
- 2022Toward Certified Robustness Against Real-World Distribution Shiftscited by 16
- 2019Verification of Non-Linear Specifications for Neural Networkscited by 14
- 2020Abstract Neural Networkscited by 11
- 2021DeepCert: Verification of Contextually Relevant Robustness for Neural Network Image Classifierscited by 11
- 2020An efficient nonconvex reformulation of stagewise convex optimization problemscited by 7
- 2019An Empirical Investigation of Randomized Defenses against Adversarial Attackscited by 2
Built on by
Citing papers per year: 2024: 1; 2025: 1; 2026: 3.
5 papers.
- 2024Revisiting Differential Verification: Equivalence Verification with Confidencecited by 4
- 2025Support is All You Need for Certified VAE Trainingcited by 0
- 2026Hybrid Robustness Verification for Spatio-Temporal Neural Networkscited by 0
- 2026Branch and Bound for Relational Verification of Neural Networkscited by 0
- 2026Exploring Solver-Level Warmstarting for Neural Network Verificationcited by 0
- 2026Exploring Solver-Level Warmstarting for Neural Network Verification22 Sep 2026
- 2026Branch and Bound for Relational Verification of Neural Networks13 Aug 2026
- 2026Hybrid Robustness Verification for Spatio-Temporal Neural Networks8 Jun 2026
- 2025Support is All You Need for Certified VAE Training16 Apr 2025
- 2024Revisiting Differential Verification: Equivalence Verification with Confidence26 Oct 2024