Verification of Geometric Robustness of Neural Networks via Piecewise Linear Approximation and Lipschitz Optimisation
Not on the map. Why?
Abstract (arXiv)
We address the problem of verifying neural networks against geometric transformations of the input image, including rotation, scaling, shearing, and translation. The proposed method computes provably sound piecewise linear constraints for the pixel values by using sampling and linear approximations in combination with branch-and-bound Lipschitz optimisation. The method obtains provably tighter over-approximations of the perturbation region than the present state-of-the-art. We report results from experiments on a comprehensive set of verification benchmarks on MNIST and CIFAR10. We show that our proposed implementation resolves up to 32% more verification cases than present approaches.
Key facts. Cited by 7 papers in the map (data through 7 Oct 2026). Builds on 29 of its 46 references that are in the map. First posted on arXiv 23 Aug 2024.
Builds on
29 of 46 references.
References · 29
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2015Spatial Transformer Networkscited by 1,423
- 2017Provable defenses against adversarial examples via the convex outer adversarial polytopecited by 564
- 2018Efficient Neural Network Robustness Certification with General Activation Functionscited by 439
- 2017Formal Verification of Piece-Wise Linear Feed-Forward Neural Networkscited by 241
- 2019Algorithms for Verifying Deep Neural Networkscited by 221
- 2018Spatially Transformed Adversarial Examplescited by 195
- 2020Fast and Complete: Enabling Complete Neural Network Verification with Rapid and Massively Parallel Incomplete Verifierscited by 183
- 2018Semidefinite relaxations for certifying robustness to adversarial examplescited by 178
- 2019Branch and Bound for Piecewise Linear Neural Network Verificationcited by 138
- 2018A Dual Approach to Scalable Verification of Deep Networkscited by 125
- 2019A Convex Relaxation Barrier to Tight Robustness Verification of Neural Networkscited by 124
17 more
- 2020Exactly Computing the Local Lipschitz Constant of ReLU Networkscited by 102
- 2022General Cutting Planes for Bound-Propagation-Based Neural Network Verificationcited by 102
- 2019Safety Verification and Robustness Analysis of Neural Networks via Quadratic Constraints and Semidefinite Programmingcited by 100
- 2022Complete Verification via Multi-Neuron Relaxation Guided Branch-and-Boundcited by 92
- 2020Verification of Deep Convolutional Neural Networks Using ImageStarscited by 75
- 2020Enabling certification of verification-agnostic networks via memory-efficient semidefinite programmingcited by 65
- 2020Certified Defense to Image Transformations via Randomized Smoothingcited by 51
- 2020The Convex Relaxation Barrier, Revisited: Tightened Single-Neuron Relaxations for Neural Network Verificationcited by 50
- 2020TSS: Transformation-Specific Smoothing for Robustness Certificationcited by 49
- 2017Geometric robustness of deep networks: analysis and improvementcited by 45
- 2020Lagrangian Decomposition for Neural Network Verificationcited by 35
- 2021Scalable Certified Segmentation via Randomized Smoothingcited by 35
- 2017Towards Practical Verification of Machine Learning: The Case of Computer Vision Systemscited by 19
- 2019Invariance-inducing regularization using worst-case transformations suffices to boost accuracy and spatial robustnesscited by 18
- 2020On the Tightness of Semidefinite Relaxations for Certifying Robustness to Adversarial Examplescited by 14
- 2022Provable Defense Against Geometric Transformationscited by 14
- 2018Formal Verification of CNN-based Perception Systemscited by 13
Built on by
Citing papers per year: 2024: 1; 2025: 0; 2026: 6.
7 papers.
- 2026MKA: Memory-Keyed Attention for Efficient Long-Context Reasoningcited by 6
- 2024Verification of Neural Networks against Convolutional Perturbations via Parameterised Kernelscited by 2
- 2026IoUCert: Robustness Verification for Anchor-based Object Detectorscited by 1
- 2026Talking with Verifiers: Automatic Specification Generation for Neural Network Verificationcited by 0
- 2026Certified geometric robustness -- Super-DeepGcited by 0
- 2026Lipschitz Optimization for Formal Verification of Homographiescited by 0
- 2026Certified Training for Convolutional Perturbationscited by 0
- 2026Certified Training for Convolutional Perturbations20 Jul 2026
- 2026Lipschitz Optimization for Formal Verification of Homographies22 May 2026
- 2026Certified geometric robustness -- Super-DeepG27 Apr 2026
- 2026MKA: Memory-Keyed Attention for Efficient Long-Context Reasoning21 Mar 2026
- 2026IoUCert: Robustness Verification for Anchor-based Object Detectors3 Mar 2026
- 2026Talking with Verifiers: Automatic Specification Generation for Neural Network Verification13 Feb 2026
- 2024Verification of Neural Networks against Convolutional Perturbations via Parameterised Kernels7 Nov 2024