Towards Formal Verification of Deep Neural Networks for Object Detection
Not on the map. Why?
Abstract (arXiv)
Deep neural networks (DNNs) are widely used in real-world computer vision applications, yet they remain vulnerable to errors and adversarial attacks. Formal verification offers a systematic approach to identify and mitigate these vulnerabilities, enhancing model robustness and reliability. While most existing verification methods focus on image classification models, this work extends formal verification to the more complex domain of object detection models. We propose a formulation for verifying the robustness of such models and demonstrate how state-of-the-art verification tools, originally developed for classification, can be adapted for this purpose. Through a comprehensive evaluation, we highlight the ability of formal verification to uncover vulnerabilities in object detection models, and derive formal robustness guarantees, underscoring the potential and need to further extend verification efforts in this domain. This work lays the foundation for further research into formal verification of object detection models across a broader range of computer vision applications. Our source code is publicly available online.
Key facts. Cited by 4 papers in the map (data through 14 Oct 2026). Builds on 42 of its 74 references that are in the map. First posted on arXiv 1 Jul 2024.
Builds on
42 of 74 references.
References · 42
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
- 2015Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networkscited by 9,639
- 2015You Only Look Once: Unified, Real-Time Object Detectioncited by 4,852
- 2020wav2vec 2.0: A Framework for Self-Supervised Learning of Speech Representationscited by 3,905
- 2015SSD: Single Shot MultiBox Detectorcited by 3,130
- 2013Rich feature hierarchies for accurate object detection and semantic segmentationcited by 2,162
- 2020Conformer: Convolution-augmented Transformer for Speech Recognitioncited by 1,863
- 2021ViViT: A Video Vision Transformercited by 1,620
- 2021Video Swin Transformercited by 1,091
- 2016Adversarial Machine Learning at Scalecited by 936
30 more
- 2017Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networkscited by 744
- 2017Adversarial Patchcited by 517
- 2018Efficient Neural Network Robustness Certification with General Activation Functionscited by 445
- 2019Algorithms for Verifying Deep Neural Networkscited by 221
- 2019Towards Stable and Efficient Training of Verifiably Robust Neural Networkscited by 205
- 2019Branch and Bound for Piecewise Linear Neural Network Verificationcited by 138
- 2017An approach to reachability analysis for feed-forward ReLU neural networkscited by 127
- 2022Complete Verification via Multi-Neuron Relaxation Guided Branch-and-Boundcited by 92
- 2019Universal Physical Camouflage Attacks on Object Detectorscited by 91
- 2024Marabou 2.0: A Versatile Formal Analyzer of Neural Networkscited by 81
- 2021PRIMA: General and Precise Neural Network Certification via Scalable Convex Hull Approximationscited by 77
- 2019An Abstraction-Based Framework for Neural Network Verificationcited by 68
- 2020Detection as Regression: Certified Object Detection by Median Smoothingcited by 47
- 2022Towards Formal XAI: Formally Approximate Minimal Explanations of Neural Networkscited by 42
- 2021Towards Scalable Verification of Deep Reinforcement Learningcited by 33
- 2022Verifying Learning-Based Robotic Navigation Systemscited by 33
- 2017Output Range Analysis for Deep Neural Networkscited by 30
- 2023Formally Explaining Neural Networks within Reactive Systemscited by 24
- 2022Neural Network Verification with Proof Productioncited by 22
- 2022Neural Network Verification using Residual Reasoningcited by 18
- 2022Adversarial Patch Attacks and Defences in Vision-Based Tasks: A Surveycited by 17
- 2024NLP Verification: Towards a General Methodology for Certifying Robustnesscited by 16
- 2023Verifying Generalization in Deep Learningcited by 11
- 2022Scenario-Assisted Deep Reinforcement Learningcited by 8
- 2022Tighter Abstract Queries in Neural Network Verificationcited by 8
- 2023DNN Verification, Reachability, and the Exponential Function Problemcited by 8
- 2024Robustness Assessment of a Runway Object Classifier for Safe Aircraft Taxiingcited by 8
- 2022Runtime Monitoring for Out-of-Distribution Detection in Object Detection Neural Networkscited by 7
- 2023DelBugV: Delta-Debugging Neural Network Verifierscited by 3
- 2024Verifying the Generalization of Deep Learning to Out-of-Distribution Domainscited by 2
Built on by
Citing papers per year: 2026: 4.
4 papers.
- 2026SETA: Statistical Fault Attribution for Compound AI Systemscited by 1
- 2026Talking with Verifiers: Automatic Specification Generation for Neural Network Verificationcited by 0
- 2026Information Coordination as a Bridge: A Neuro-Symbolic Architecture for Reliable Autonomous Driving Scene Understandingcited by 0
- 2026SoK: Formal Methods for Fact-Checking and Information Integritycited by 0
- 2026SoK: Formal Methods for Fact-Checking and Information Integrity19 Sep 2026
- 2026Information Coordination as a Bridge: A Neuro-Symbolic Architecture for Reliable Autonomous Driving Scene Understanding6 May 2026
- 2026Talking with Verifiers: Automatic Specification Generation for Neural Network Verification13 Feb 2026
- 2026SETA: Statistical Fault Attribution for Compound AI Systems27 Jan 2026