Neural network robustness as a verification property: a principled case study

Casadio, Marco, Komendantskaya, Ekaterina, Daggitt, Matthew L., Kokke, Wen, Katz, Guy, Amir, Guy and Refaeli, Idan (2022) Neural network robustness as a verification property: a principled case study. Shoham, Sharon and Vizel, Yakir (eds.) In Computer Aided Verification - 34th International Conference, CAV 2022, Proceedings. vol. 13371 LNCS, Springer Cham. pp. 219-231 . (doi:10.1007/978-3-031-13185-1_11).

Abstract

Neural networks are very successful at detecting patterns in noisy data, and have become the technology of choice in many fields. However, their usefulness is hampered by their susceptibility to adversarial attacks. Recently, many methods for measuring and improving a network’s robustness to adversarial perturbations have been proposed, and this growing body of research has given rise to numerous explicit or implicit notions of robustness. Connections between these notions are often subtle, and a systematic comparison between them is missing in the literature. In this paper we begin addressing this gap, by setting up general principles for the empirical analysis and evaluation of a network’s robustness as a mathematical property—during the network’s training phase, its verification, and after its deployment. We then apply these principles and conduct a case study that showcases the practical benefits of our general approach.

This record has no associated files available for download.

Contributors

Download statistics