Tightening the Evaluation of PAC Bounds Using Formal Verification Results
Not on the map. Why?
Abstract (arXiv)
Probably Approximately Correct (PAC) bounds are widely used to derive probabilistic guarantees for the generalisation of machine learning models. They highlight the components of the model which contribute to its generalisation capacity. However, current state-of-the-art results are loose in approximating the generalisation capacity of deployed machine learning models. Consequently, while PAC bounds are theoretically useful, their applicability for evaluating a model's generalisation property in a given operational design domain is limited. The underlying classical theory is supported by the idea that bounds can be tightened when the number of test points available to the user to evaluate the model increases. Yet, in the case of neural networks, the number of test points required to obtain bounds of interest is often impractical even for small problems. In this paper, we take the novel approach of using the formal verification of neural systems to inform the evaluation of PAC bounds. Rather than using pointwise information obtained from repeated tests, we use verification results on regions around test points. We show that conditioning existing bounds on verification results leads to a tightening proportional to the underlying probability mass of the verified region.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 8 of its 18 references that are in the map. First posted on arXiv 29 Jul 2024.
Builds on
8 of 18 references.
References · 8
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2017Computing Nonvacuous Generalization Bounds for Deep (Stochastic) Neural Networks with Many More Parameters than Training Datacited by 527
- 2018Stronger generalization bounds for deep nets via a compression approachcited by 306
- 2018Non-Vacuous Generalization Bounds at the ImageNet Scale: A PAC-Bayesian Compression Approachcited by 125
- 2022Enhancing Adversarial Training with Second-Order Statistics of Weightscited by 42
- 2021A PAC-Bayes Analysis of Adversarial Robustnesscited by 13
- 2018PROVEN: Certifying Robustness of Neural Networks with a Probabilistic Approachcited by 10
- 2022Improving Robust Generalization by Direct PAC-Bayesian Bound Minimizationcited by 6
Built on by
Not cited yet.