arXiv:2606.04310cs.LGcs.SE2026-06

用潜在空间锚点生成测试用例,提升深度神经网络的漏洞发现效率。

Latent Anchor-Driven Test Generation for Deep Neural Networks

论文配图:Latent Anchor-Driven Test Generation for Deep Neural Networks
图 1 · 摘自论文原文
  • 基于预训练VQ-VAE编码输入,沿类间锚点方向进行单步潜变量变异。
  • 相同测试预算下,触发更多错误且测试样本语义更丰富多样。
  • 适合安全关键场景下的模型可靠性验证,尤其关注漏洞暴露与多样性。

深度神经网络在安全关键和安全敏感应用中日益普及,严格测试对识别并缓解模型弱点至关重要。现有方法或探索输入空间,或利用学习的潜在空间。尽管潜在空间生成能更好保持合理性,但当前方法仍面临探索可控性、失败多样性与种子相关语义漂移之间的权衡。为此,我们提出Latte,一种黑盒测试框架,通过潜在空间生成语义相近、多样且能揭示故障的测试用例。具体而言,Latte使用预训练VQ-VAE编码每个输入种子,并沿来自其他类别的锚点方向执行以种子为中心的一步潜变量变异,随后量化并解码回输入空间。该方法在学习的潜在流形上探索每个种子周围的局部邻域,从而在相同预算下产生更多、更广的触发预言机的预测差异。我们在5个数据集和10个DNN模型上评估了Latte,在单模型与多模型测试场景中均提升了故障暴露率和行为多样性。在单模型设置下,还保持了与源种子低的语义漂移。

原文摘要 · Abstract (English)

Deep Neural Networks (DNNs) are increasingly being deployed in security-critical and safety-sensitive applications, which makes rigorous testing essential to identify and mitigate model weaknesses. Existing DNN testing approaches explore either the input space or a learned latent space. While latent-space generation can better maintain plausibility than direct input-space mutation, current methods still face a trade-off among exploration controllability, failure diversity, and seed-relative semantic drift. To overcome these limitations, we propose Latte, a black-box testing framework that generates semantically proximate, diverse, and fault-revealing test cases by leveraging the latent space. Specifically, Latte encodes each input seed with a pre-trained VQ-VAE and performs a seed-centered, one-step latent mutation along directions defined by anchors sampled from alternative classes, followed by quantization and decoding back to the input space. This explores local neighborhoods around each seed within the learned latent manifold, resulting in a larger number and broader diversity of oracle-triggering prediction discrepancies under the same budget. We evaluated Latte on 5 datasets and 10 DNN models in single-model and multi-model testing scenarios. Across the evaluated datasets and models, Latte improves fault exposure and behavioral diversity under matched testing budgets. Under the single-model setting, it also maintains low seed-relative semantic drift with respect to the source seeds.

神经网络测试潜在空间漏洞检测

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。