Local Lipschitz Constant Computation of ReLU-FNNs: Upper Bound Computation with Exactness Verification (2310.11104v2)
Abstract: This paper is concerned with the computation of the local Lipschitz constant of feedforward neural networks (FNNs) with activation functions being rectified linear units (ReLUs). The local Lipschitz constant of an FNN for a target input is a reasonable measure for its quantitative evaluation of the reliability. By following a standard procedure using multipliers that capture the behavior of ReLUs,we first reduce the upper bound computation problem of the local Lipschitz constant into a semidefinite programming problem (SDP). Here we newly introduce copositive multipliers to capture the ReLU behavior accurately. Then, by considering the dual of the SDP for the upper bound computation, we second derive a viable test to conclude the exactness of the computed upper bound. However, these SDPs are intractable for practical FNNs with hundreds of ReLUs. To address this issue, we further propose a method to construct a reduced order model whose input-output property is identical to the original FNN over a neighborhood of the target input. We finally illustrate the effectiveness of the model reduction and exactness verification methods with numerical examples of practical FNNs.
- https://www.mosek.com/.
- Zames–Falb multipliers for absolute stability: From O’shea’s contribution to convex searches. European Journal of Control, 28:1–19, 2016.
- Semialgebraic optimization for lipschitz constants of relu networks. Advances in Neural Information Processing Systems, 33:19189–19200, 2020.
- M. Dür. Copositive programming - a survey. In M. Diehl, F. Glineur, E. Jarlebring, and W. Michiels, editors, Recent Advances in Optimization and Its Applications in Engineering, pages 3–20. Springer, 2010.
- Robust performance analysis of uncertain LTI systems: Dual LMI approach and verifications for exactness. IEEE Transactions on Automatic Control, 54(5):938–951, 2009.
- l2subscript𝑙2\displaystyle l_{2}italic_l start_POSTSUBSCRIPT 2 end_POSTSUBSCRIPT induced norm analysis of discrete-time LTI systems for nonnegative input signals and its application to stability analysis of recurrent neural networks. The 2021 ECC Special Issue of the European Journal of Control, 62:99–104, 2021.
- Stability analysis of recurrent neural networks by IQC with copositive mutipliers. In Proc. of the 60th Conference on Decision and Control, 2021.
- Robust physical-world attacks on deep learning models. In arxiv:1707.08945 [cs.CR].
- Safety verification and robustness analysis of neural networks via quadratic constraints and semidefinite programming. IEEE Transactions on Automatic Control, 67(1):1–15, 2022.
- Efficient and accurate estimation of Lipschitz constants for deep neural networks. In arxiv:1906.04893v2 [cs.LG].
- M. Fetzer and C. W. Scherer. Absolute stability analysis of discrete time feedback interconnections. IFAC PapersOnline, 50(1):8447–8453, 2017.
- Stability analysis of piecewise affine discrete-time systems. In Proc. Conference on Decision and Control, pages 8172–8177, 2019.
- E. Klerk. Aspects of Semidefinite Programming. Kluwer Academic Publishers, 2002.
- J. Löfberg. YALMIP: A toolbox for modeling and optimization in MATLAB. In Proc. IEEE Computer Aided Control System Design, pages 284–289, 2004.
- A. Megretski and A. Rantzer. System analysis via integral quadratic constraints. IEEE Transactions on Automatic Control, 42(6):819–830, 1997.
- R. O’Shea. An improved frequency time domain stability criterion for autonomous continuous systems. IEEE Transactions on Automatic Control, 12(6):725–731, 1967.
- Certified defenses against adversarial examples. In Proc. the International Conference on Learning Representations, 2018.
- Semidefinite relaxations for certifying robustness to adversarial examples. Advances in Neural Information Processing Systems, pages 10900–10910, 2018.
- A convex parameterization of robust recurrent neural networks. IEEE Control Systems Letters, 5(4):1363–1368, 2021.
- C. W. Scherer. Relaxations for robust linear matrix inequality problems with verifications for exactness. SIAM Journal on Matrix Analysis and Applications, 27(2):365–395, 2005.
- C. W. Scherer. LMI relaxations in robust control. European Journal of Control, 12(1):3–29, 2006.
- C. W. Scherer. Dissipativity and integral quadratic constraints: Tailored computational robustness tests for complex interconnections. IEEE Control Systems Magazine, 42(3):115–139, 2022.
- C. W. Scherer. Dissipativity, convexity and tight O’shea-Zames-Falb multipliers for safety guarantees. In arxiv: 2207.01363 [math.OC], 2022.
- Stability analysis using quadratic constraints for systems with neural network controllers. IEEE Transactions on Automatic Control, 67(4):1980–1987, 2022.
- G. Zames and P. Falb. Stability conditions for systems with monotone and slope-restricted nonlinearities. SIAM Journal on Control, 6(1):89–108, 1968.
- R. Y. Zhang. On the tightness of semidefinite relaxations for certifying robustness to adversarial examples. In arXiv:2006.06759v2 [math.OC].