arXiv:2608.13118cs.LG2026-08中稿 · EMSOFT 2026

提出分支定界框架,高效验证神经网络的全局鲁棒性。

Branch and Bound for Relational Verification of Neural Networks

论文配图:Branch and Bound for Relational Verification of Neural Networks
图 1 · 摘自论文原文
  • 通过关系神经元分割替代传统单神经元分割,提升验证精度。
  • 在817个测试用例中解决率超基线,验证效率显著提升。
  • 适合关注安全关键系统可信验证的研究者与工程师。

针对网络安全物理系统中神经网络的全局鲁棒性等关系型规范验证问题,现有方法依赖于保真且凸的输出过近似,但存在不完全性与误报风险。本文提出一种分支定界(BaB)框架,通过迭代分割关系型神经元来细化问题,核心是基于验证问题对偶形式的关系神经元选择策略,可高效识别最能促进验证进展的分割目标。在ACAS Xu、MNIST-F、MNIST-C、CIFAR和GTSRB共817个验证任务上评估显示,SaBRe在解决实例数和验证效率上均优于多个基线方法,验证了所提技术的有效性。

原文摘要 · Abstract (English)

Verification of neural networks against relational specifications, such as global robustness, is crucial for safety-critical applications of cyber-physical systems (CPS), given their increasing adoption of AI components. Compared to simple trace properties (e.g., local robustness), verifying relational specifications requires reasoning about the relationship between multiple network inferences, which brings significant technical challenges. Existing research has explored abstraction techniques based on sound and convex over-approximation of neural network outputs; however, since these approaches are inherently incomplete and may raise false alarms, they further underscore the need of effective abstraction refinement. In this paper, we propose a branch-and-bound (BaB) framework to mitigate the issue, which iteratively splits the problem until all sub-problems are verified. Specifically, our BaB framework features splitting of relational neurons rather than individual neurons as prior works do, and as the core of our technique, we devise a relational neuron selection strategy based on the dual formulation of the verification problem, which allows us to efficiently select the (most likely) optimal relational neuron that maximizes the refinement brought by problem splitting. We evaluate SaBRe on 817 verification problems across ACAS Xu, MNIST-F, MNIST-C, CIFAR and GTSRB. The results show that SaBRe outperforms different baseline approaches, in terms of the number of solved instances and verification efficiency, which demonstrates the effectiveness of our proposed techniques.

神经网络验证分支定界全局鲁棒性

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。