arXiv:2605.07451cs.LG2026-05被引 2

为神经网络验证构建可信赖的严格理论基础,解决旧标准兼容性差问题。

VNN-LIB 2.0: Rigorous Foundations for Neural Network Verification

  • 提出'网络理论'抽象接口,使标准独立于具体模型格式
  • 定义更强大查询语言的语法、类型系统与形式语义
  • 在Agda证明器中机械化验证,确保内部一致性

神经网络验证领域发展迅速,工具生态日益丰富。现有VNN-LIB 1.0存在严重缺陷:缺乏精确语法、语义和类型系统,表达能力有限,且依赖外部定义的ONNX模型(其语义非正式且持续演进)。这与SMT-LIB等成熟标准不同,后者查询自包含且语义固定。本文提出VNN-LIB 2.0的理论基础,引入'网络理论'抽象,刻画神经网络模型格式所需的最小语义接口。该抽象使标准脱离特定ONNX版本,同时兼容模型表示的演进。基于此,我们构建了更具表达力的查询语言形式语法、基于网络理论提供的数值域的类型系统,以及完整形式语义。为保证内部一致性,整个标准在Agda定理证明器中机械化实现。因此,VNN-LIB 2.0为可信神经网络验证提供了坚实严谨的理论基础。

原文摘要 · Abstract (English)

Neural network verification is an active and rapidly maturing research area, with a growing ecosystem of solvers and tools. The VNN-LIB standard was introduced to support interoperability in this ecosystem, but Version~1.0 has several serious short-comings as a formal foundation: it lacks a precise syntax, semantics, and type system, offers limited expressivity, and relies on externally defined ONNX models whose semantics are informal and constantly evolving. The latter distinguishes VNN-LIB from established standards such as SMT-LIB, where queries are self-contained and have fixed semantics. In this paper we address these challenges by developing the theoretical foundations of VNN-LIB~2.0. Our key contribution is the introduction of the notion of a \emph{network theory}, which abstractly characterises the minimal semantic interface required from a neural network model format. This abstraction enables VNN-LIB to be defined independently of any specific ONNX version while remaining compatible with evolving model representations. Building on this foundation, we present a formal syntax for a more expressive query language, a type system for it over the numeric domains provided by the network theory, and finally a formal semantics. To ensure internal consistency, the standard is mechanised in the Agda theorem prover. VNN-LIB~2.0 therefore provides robust and rigorous foundations for trustworthy neural network verification.

神经网络验证形式化方法逻辑系统

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。