Formal Local Implication Between Two Neural Networks
Not on the map. Why?
Abstract (arXiv)
Given two neural network classifiers with the same input and output domains, our goal is to compare the two networks in relation to each other over an entire input region (e.g., within a vicinity of an input sample). To this end, we establish the foundation of formal local implication between two networks, i.e., N2 implies N1, in an entire input region D. That is, network N1 consistently makes a correct decision every time network N2 does, and it does so in an entire input region D. We further propose a sound formulation for establishing such formally-verified (provably correct) local implications. The proposed formulation is relevant in the context of several application domains, e.g., for comparing a trained network and its corresponding compact (e.g., pruned, quantized, distilled) networks. We evaluate our formulation based on the MNIST, CIFAR10, and two real-world medical datasets, to show its relevance.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 14 of its 27 references that are in the map. First posted on arXiv 25 Sep 2024.
Builds on
14 of 27 references.
References · 14
- 2015Distilling the Knowledge in a Neural Networkcited by 10,076
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2016Safety Verification of Deep Neural Networkscited by 262
- 2017Formal Verification of Piece-Wise Linear Feed-Forward Neural Networkscited by 241
- 2021Beta-CROWN: Efficient Bound Propagation with Per-neuron Split Constraints for Complete and Incomplete Neural Network Robustness Verificationcited by 224
- 2020Certified Defenses for Adversarial Patchescited by 100
- 2017Verifying Properties of Binarized Deep Neural Networkscited by 77
- 2020ReluDiff: Differential Verification of Deep Neural Networkscited by 29
- 2021On the Effect of Pruning on Adversarial Robustnesscited by 23
- 2020NeuroDiff: Scalable Differential Verification of Neural Networks using Fine-Grained Approximationcited by 22
- 2022Can pruning improve certified robustness of neural networks?cited by 14
2 more
Built on by
Not cited yet.