mlsanityData to 7 Oct 2026

Clip-and-Verify: Linear Constraint-Driven Domain Clipping for Accelerating Neural Network Verification

arXiv 2512.11087 ↗First posted 11 Dec 2025cs.LG cs.AI cs.CRcited by 9

Not on the map. Why?

Abstract (arXiv)

State-of-the-art neural network (NN) verifiers demonstrate that applying the branch-and-bound (BaB) procedure with fast bounding techniques plays a key role in tackling many challenging verification properties. In this work, we introduce the linear constraint-driven clipping framework, a class of scalable and efficient methods designed to enhance the efficacy of NN verifiers. Under this framework, we develop two novel algorithms that efficiently utilize linear constraints to 1) reduce portions of the input space that are either verified or irrelevant to a subproblem in the context of branch-and-bound, and 2) directly improve intermediate bounds throughout the network. The process novelly leverages linear constraints that often arise from bound propagation methods and is general enough to also incorporate constraints from other sources. It efficiently handles linear constraints using a specialized GPU procedure that can scale to large neural networks without the use of expensive external solvers. Our verification procedure, Clip-and-Verify, consistently tightens bounds across multiple benchmarks and can significantly reduce the number of subproblems handled during BaB. We show that our clipping algorithms can be integrated with BaB-based verifiers such as α,β-CROWN, utilizing either the split constraints in activation-space BaB or the output constraints that denote the unverified input space. We demonstrate the effectiveness of our procedure on a broad range of benchmarks where, in some instances, we witness a 96% reduction in the number of subproblems during branch-and-bound, and also achieve state-of-the-art verified accuracy across multiple benchmarks. Clip-and-Verify is part of the α,β-CROWN verifier (http://abcrown.org), the VNN-COMP 2025 winner. Code available at https://github.com/Verified-Intelligence/ClipandVerify.

Key facts. Cited by 9 papers in the map (data through 7 Oct 2026). Builds on 49 of its 83 references that are in the map. First posted on arXiv 11 Dec 2025.

Builds on

49 of 83 references.

References · 49

  1. 2017Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networkscited by 739
  2. 2017Provable defenses against adversarial examples via the convex outer adversarial polytopecited by 564
  3. 2018Efficient Neural Network Robustness Certification with General Activation Functionscited by 439
  4. 2018Towards Fast Computation of Certified Robustness for ReLU Networkscited by 254
  5. 2017Formal Verification of Piece-Wise Linear Feed-Forward Neural Networkscited by 241
  6. 2021Beta-CROWN: Efficient Bound Propagation with Per-neuron Split Constraints for Complete and Incomplete Neural Network Robustness Verificationcited by 224
  7. 2018Formal Security Analysis of Neural Networks using Symbolic Intervalscited by 185
  8. 2020Fast and Complete: Enabling Complete Neural Network Verification with Rapid and Massively Parallel Incomplete Verifierscited by 183
  9. 2018Semidefinite relaxations for certifying robustness to adversarial examplescited by 178
  10. 2018Efficient Formal Safety Analysis of Neural Networkscited by 165
  11. 2019Branch and Bound for Piecewise Linear Neural Network Verificationcited by 138
  12. 2020NNV: The Neural Network Verification Tool for Deep Neural Networks and Learning-Enabled Cyber-Physical Systemscited by 128
37 more
  1. 2017An approach to reachability analysis for feed-forward ReLU neural networkscited by 126
  2. 2018A Dual Approach to Scalable Verification of Deep Networkscited by 125
  3. 2019A Convex Relaxation Barrier to Tight Robustness Verification of Neural Networkscited by 124
  4. 2018Strong mixed-integer programming formulations for trained neural networkscited by 115
  5. 2022General Cutting Planes for Bound-Propagation-Based Neural Network Verificationcited by 102
  6. 2019Safety Verification and Robustness Analysis of Neural Networks via Quadratic Constraints and Semidefinite Programmingcited by 100
  7. 2017Maximum Resilience of Artificial Neural Networkscited by 97
  8. 2022Complete Verification via Multi-Neuron Relaxation Guided Branch-and-Boundcited by 92
  9. 2024Marabou 2.0: A Versatile Formal Analyzer of Neural Networkscited by 81
  10. 2021PRIMA: General and Precise Neural Network Certification via Scalable Convex Hull Approximationscited by 77
  11. 2021The Second International Verification of Neural Networks Competition (VNN-COMP 2021): Summary and Resultscited by 71
  12. 2018Training for Faster Adversarial Robustness Verification via Inducing ReLU Stabilitycited by 67
  13. 2020Enabling certification of verification-agnostic networks via memory-efficient semidefinite programmingcited by 65
  14. 2020The Convex Relaxation Barrier, Revisited: Tightened Single-Neuron Relaxations for Neural Network Verificationcited by 50
  15. 2024Neural Network Verification with Branch-and-Bound for General Nonlinearitiescited by 47
  16. 2021Improved Branch and Bound for Neural Network Verification via Lagrangian Decompositioncited by 44
  17. 2020Scaling Polyhedral Neural Network Verification on GPUscited by 43
  18. 2024The Fifth International Verification of Neural Networks Competition (VNN-COMP 2024): Summary and Resultscited by 42
  19. 2023The Fourth International Verification of Neural Networks Competition (VNN-COMP 2023): Summary and Resultscited by 38
  20. 2024Scalable Neural Network Verification with Branch-and-bound Inferred Cutting Planescited by 33
  21. 2021Practical Large-Scale Linear Programming using Primal-Dual Hybrid Gradientcited by 31
  22. 2019Verification of Neural Network Behaviour: Formal Guarantees for Power System Applicationscited by 26
  23. 2017Deep Neural Networks as 0-1 Mixed Integer Linear Programs: A Feasibility Studycited by 25
  24. 2023A DPLL(T) Framework for Verifying Deep Neural Networkscited by 23
  25. 2024Lyapunov-stable Neural Control for State and Output Feedback: A Novel Formulationcited by 23
  26. 2023Neural Lyapunov Control for Discrete-Time Systemscited by 21
  27. 2021ROMAX: Certifiably Robust Deep Multiagent Reinforcement Learning via Convex Relaxationcited by 17
  28. 2017Provably Minimally-Distorted Adversarial Examplescited by 12
  29. 2022A Unified View of SDP-based Neural Network Verification through Completely Positive Programmingcited by 12
  30. 2025SDP-CROWN: Efficient Bound Propagation for Neural Network Verification with Tightness of Semidefinite Programmingcited by 10
  31. 2022CAISAR: A platform for Characterizing Artificial Intelligence Safety and Robustnesscited by 9
  32. 2024Verification-Aided Learning of Neural Network Barrier Functions with Termination Guaranteescited by 7
  33. 2024Bound Tightening using Rolling-Horizon Decomposition for Neural Network Verificationcited by 6
  34. 2025Two-Stage Learning of Stabilizing Neural Controllers via Zubov Sampling and Iterative Domain Expansioncited by 6
  35. 2025Neural Contraction Metrics with Formal Guarantees for Discrete-Time Nonlinear Dynamical Systemscited by 5
  36. 2020Neural Network Virtual Sensors for Fuel Injection Quantities with Provable Performance Specificationscited by 4
  37. 2025PDLP: A Practical First-Order Method for Large-Scale Linear Programmingcited by 4

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 9.

9 papers.