Clip-and-Verify: Linear Constraint-Driven Domain Clipping for Accelerating Neural Network Verification
Not on the map. Why?
Abstract (arXiv)
State-of-the-art neural network (NN) verifiers demonstrate that applying the branch-and-bound (BaB) procedure with fast bounding techniques plays a key role in tackling many challenging verification properties. In this work, we introduce the linear constraint-driven clipping framework, a class of scalable and efficient methods designed to enhance the efficacy of NN verifiers. Under this framework, we develop two novel algorithms that efficiently utilize linear constraints to 1) reduce portions of the input space that are either verified or irrelevant to a subproblem in the context of branch-and-bound, and 2) directly improve intermediate bounds throughout the network. The process novelly leverages linear constraints that often arise from bound propagation methods and is general enough to also incorporate constraints from other sources. It efficiently handles linear constraints using a specialized GPU procedure that can scale to large neural networks without the use of expensive external solvers. Our verification procedure, Clip-and-Verify, consistently tightens bounds across multiple benchmarks and can significantly reduce the number of subproblems handled during BaB. We show that our clipping algorithms can be integrated with BaB-based verifiers such as α,β-CROWN, utilizing either the split constraints in activation-space BaB or the output constraints that denote the unverified input space. We demonstrate the effectiveness of our procedure on a broad range of benchmarks where, in some instances, we witness a 96% reduction in the number of subproblems during branch-and-bound, and also achieve state-of-the-art verified accuracy across multiple benchmarks. Clip-and-Verify is part of the α,β-CROWN verifier (http://abcrown.org), the VNN-COMP 2025 winner. Code available at https://github.com/Verified-Intelligence/ClipandVerify.
Key facts. Cited by 9 papers in the map (data through 7 Oct 2026). Builds on 49 of its 83 references that are in the map. First posted on arXiv 11 Dec 2025.
Builds on
49 of 83 references.
References · 49
- 2017Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networkscited by 739
- 2017Provable defenses against adversarial examples via the convex outer adversarial polytopecited by 564
- 2018Efficient Neural Network Robustness Certification with General Activation Functionscited by 439
- 2018Towards Fast Computation of Certified Robustness for ReLU Networkscited by 254
- 2017Formal Verification of Piece-Wise Linear Feed-Forward Neural Networkscited by 241
- 2021Beta-CROWN: Efficient Bound Propagation with Per-neuron Split Constraints for Complete and Incomplete Neural Network Robustness Verificationcited by 224
- 2018Formal Security Analysis of Neural Networks using Symbolic Intervalscited by 185
- 2020Fast and Complete: Enabling Complete Neural Network Verification with Rapid and Massively Parallel Incomplete Verifierscited by 183
- 2018Semidefinite relaxations for certifying robustness to adversarial examplescited by 178
- 2018Efficient Formal Safety Analysis of Neural Networkscited by 165
- 2019Branch and Bound for Piecewise Linear Neural Network Verificationcited by 138
- 2020NNV: The Neural Network Verification Tool for Deep Neural Networks and Learning-Enabled Cyber-Physical Systemscited by 128
37 more
- 2017An approach to reachability analysis for feed-forward ReLU neural networkscited by 126
- 2018A Dual Approach to Scalable Verification of Deep Networkscited by 125
- 2019A Convex Relaxation Barrier to Tight Robustness Verification of Neural Networkscited by 124
- 2018Strong mixed-integer programming formulations for trained neural networkscited by 115
- 2022General Cutting Planes for Bound-Propagation-Based Neural Network Verificationcited by 102
- 2019Safety Verification and Robustness Analysis of Neural Networks via Quadratic Constraints and Semidefinite Programmingcited by 100
- 2017Maximum Resilience of Artificial Neural Networkscited by 97
- 2022Complete Verification via Multi-Neuron Relaxation Guided Branch-and-Boundcited by 92
- 2024Marabou 2.0: A Versatile Formal Analyzer of Neural Networkscited by 81
- 2021PRIMA: General and Precise Neural Network Certification via Scalable Convex Hull Approximationscited by 77
- 2021The Second International Verification of Neural Networks Competition (VNN-COMP 2021): Summary and Resultscited by 71
- 2018Training for Faster Adversarial Robustness Verification via Inducing ReLU Stabilitycited by 67
- 2020Enabling certification of verification-agnostic networks via memory-efficient semidefinite programmingcited by 65
- 2020The Convex Relaxation Barrier, Revisited: Tightened Single-Neuron Relaxations for Neural Network Verificationcited by 50
- 2024Neural Network Verification with Branch-and-Bound for General Nonlinearitiescited by 47
- 2021Improved Branch and Bound for Neural Network Verification via Lagrangian Decompositioncited by 44
- 2020Scaling Polyhedral Neural Network Verification on GPUscited by 43
- 2024The Fifth International Verification of Neural Networks Competition (VNN-COMP 2024): Summary and Resultscited by 42
- 2023The Fourth International Verification of Neural Networks Competition (VNN-COMP 2023): Summary and Resultscited by 38
- 2024Scalable Neural Network Verification with Branch-and-bound Inferred Cutting Planescited by 33
- 2021Practical Large-Scale Linear Programming using Primal-Dual Hybrid Gradientcited by 31
- 2019Verification of Neural Network Behaviour: Formal Guarantees for Power System Applicationscited by 26
- 2017Deep Neural Networks as 0-1 Mixed Integer Linear Programs: A Feasibility Studycited by 25
- 2023A DPLL(T) Framework for Verifying Deep Neural Networkscited by 23
- 2024Lyapunov-stable Neural Control for State and Output Feedback: A Novel Formulationcited by 23
- 2023Neural Lyapunov Control for Discrete-Time Systemscited by 21
- 2021ROMAX: Certifiably Robust Deep Multiagent Reinforcement Learning via Convex Relaxationcited by 17
- 2017Provably Minimally-Distorted Adversarial Examplescited by 12
- 2022A Unified View of SDP-based Neural Network Verification through Completely Positive Programmingcited by 12
- 2025SDP-CROWN: Efficient Bound Propagation for Neural Network Verification with Tightness of Semidefinite Programmingcited by 10
- 2022CAISAR: A platform for Characterizing Artificial Intelligence Safety and Robustnesscited by 9
- 2024Verification-Aided Learning of Neural Network Barrier Functions with Termination Guaranteescited by 7
- 2024Bound Tightening using Rolling-Horizon Decomposition for Neural Network Verificationcited by 6
- 2025Two-Stage Learning of Stabilizing Neural Controllers via Zubov Sampling and Iterative Domain Expansioncited by 6
- 2025Neural Contraction Metrics with Formal Guarantees for Discrete-Time Nonlinear Dynamical Systemscited by 5
- 2020Neural Network Virtual Sensors for Fuel Injection Quantities with Provable Performance Specificationscited by 4
- 2025PDLP: A Practical First-Order Method for Large-Scale Linear Programmingcited by 4
Built on by
Citing papers per year: 2026: 9.
9 papers.
- 2026IoUCert: Robustness Verification for Anchor-based Object Detectorscited by 1
- 2026Bridging Control with Neural Network Verifier alpha-beta-CROWN: A Tutorialcited by 1
- 2026Lookahead Branching for Neural Network Verificationcited by 1
- 2026ZonoGPT: Towards An Abstract Domain for Verifying Large GPT Modelscited by 1
- 2026On the Extreme Variance of Certified Local Robustness Across Model Seedscited by 0
- 2026Verified SHAP: Provable Bounds for Exact Shapley Values of Neural Networkscited by 0
- 2026Rethinking Evaluation Paradigms in IBP-based Certified Trainingcited by 0
- 2026Learning Lookahead Lemmas for Neural Network Verificationcited by 0
- 2026CLAD: Constrained Abstract Domain for Neural Network Verificationcited by 0
- 2026CLAD: Constrained Abstract Domain for Neural Network Verification28 Sep 2026
- 2026ZonoGPT: Towards An Abstract Domain for Verifying Large GPT Models28 Sep 2026
- 2026Learning Lookahead Lemmas for Neural Network Verification31 Jul 2026
- 2026Lookahead Branching for Neural Network Verification19 Jul 2026
- 2026Rethinking Evaluation Paradigms in IBP-based Certified Training1 Jun 2026
- 2026Bridging Control with Neural Network Verifier alpha-beta-CROWN: A Tutorial26 May 2026
- 2026Verified SHAP: Provable Bounds for Exact Shapley Values of Neural Networks22 May 2026
- 2026IoUCert: Robustness Verification for Anchor-based Object Detectors3 Mar 2026
- 2026On the Extreme Variance of Certified Local Robustness Across Model Seeds19 Jan 2026