Sun 20 Oct 2024 16:00 - 16:30 at San Gabriel - Machine Learning and Neural networks Chair(s): Marco Campion

Neural networks have been shown to be highly successful in a wide range of applications. However, due to their black box behavior, their applicability can be restricted in safety-critical environments and additional verification techniques are required. Many state-of-the-art verification approaches use abstract interpretation based on linear overapproximation of the activation functions. Linearly approximating non-linear activation functions clearly incurs a loss of precision. One way to overcome this limitation is the utilization of polynomial approximations. A second way shown to improve the obtained bounds is to optimize the slope of the linear relaxations. Combining these insights, we propose a method to enable similar parameter optimization for polynomial relaxations. Given arbitrary values for a polynomial’s monomial coefficients, we can obtain valid polynomial overapproximations by appropriate upward or downward shifts. Since any value of monomial coefficients can be used to obtain valid overapproximations in that way, we use gradient-based methods to optimize the choice of the monomial coefficients. Our evaluation on verifying robustness against adversarial patches on the MNIST and CIFAR10 benchmarks shows that we can verify more instances and achieve tighter bounds than state of the art bound propagation methods.

Sun 20 Oct

Displayed time zone: Pacific Time (US & Canada) change

16:00 - 17:30
Machine Learning and Neural networksSAS at San Gabriel
Chair(s): Marco Campion INRIA & École Normale Supérieure | Université PSL
16:00
30m
Full-paper
Abstract Interpretation of ReLU Neural Networks with Optimizable Polynomial Relaxations
SAS
Philipp Kern Karlsruhe Institute of Technology (KIT), Carsten Sinz Karlsruhe Institute of Technology
Pre-print
16:30
30m
Short-paper
ConstraintFlow: A DSL for Specification and Verification of Neural Network Analyses (NEAT paper)
SAS
Avaljot Singh UIUC, Yasmin Sarita Cornell University, Charith Mendis University of Illinois at Urbana-Champaign, Gagandeep Singh University of Illinois at Urbana-Champaign; VMware Research
Pre-print