Wed 23 Oct 2024 17:20 - 17:40 at IBR West - Performance Analysis and Optimisation 2 Chair(s): Matthew Flatt

Neural networks are successful in various applications but are also susceptible to adversarial attacks. To show the safety of network classifiers, many verifiers have been introduced to reason about the local robustness of a given input to a given perturbation. While successful, local robustness cannot generalize to unseen inputs. Several works analyze global robustness properties, however, neither can provide a precise guarantee about the cases where a network classifier does not change its classification. In this work, we propose a new global robustness property for classifiers aiming at finding the minimal globally robust bound, which naturally extends the popular local robustness property for classifiers. We introduce VHAGaR, an anytime verifier for computing this bound. VHAGaR relies on three main ideas: encoding the problem as a mixed-integer programming and pruning the search space by identifying dependencies stemming from the perturbation or network computation and generalizing adversarial attacks to unknown inputs. We evaluate VHAGaR on several datasets and classifiers and show that, given a 3 hour timeout, the average gap between the lower and upper bound on the minimal globally robust bound computed by VHAGaR is 1.9, while the gap of an existing global robustness verifier is 154.7. Moreover, VHAGaR is 130.6x faster than this verifier. Our results further indicate that leveraging dependencies and adversarial attacks makes VHAGaR 78.6x faster.

Wed 23 Oct

Displayed time zone: Pacific Time (US & Canada) change

16:00 - 17:40
Performance Analysis and Optimisation 2OOPSLA 2024 at IBR West
Chair(s): Matthew Flatt University of Utah
16:00
20m
Talk
Jmvx: Fast Multi-threaded Multi-Version eXecution and Record-Replay for Managed Languages
OOPSLA 2024
David Schwartz University of Illinois at Chicago, Ankith Kowshik University of Illinois Chicago, Luís Pina University of Illinois at Chicago
DOI
16:20
20m
Talk
libLISA: Instruction Discovery and Analysis on x86-64
OOPSLA 2024
Jos Craaijo Open Universiteit, Freek Verbeek Open Universiteit & Virginia Tech, Binoy Ravindran Virginia Tech
DOI
16:40
20m
Talk
Extending the C/C++ Memory Model with Inline Assembly
OOPSLA 2024
Paulo Emílio de Vilhena Imperial College London, Ori Lahav Tel Aviv University, Viktor Vafeiadis MPI-SWS, Azalea Raad Imperial College London
DOI
17:00
20m
Talk
TorchQL: A Programming Framework for Integrity Constraints in Machine Learning
OOPSLA 2024
Aaditya Naik University of Pennsylvania, Adam Stein University of Pennsylvania, Yinjun Wu University of Pennsylvania, Mayur Naik University of Pennsylvania, Eric Wong
DOI
17:20
20m
Talk
Verification of Neural Networks' Global RobustnessRemote
OOPSLA 2024
Anan Kabaha Technion, Israel Institute of Technology, Dana Drachsler Cohen Technion
DOI