Scaling #DNN-Verification Tools with Efficient Bound Propagation and Parallel Computing (2312.05890v1)
Abstract: Deep Neural Networks (DNNs) are powerful tools that have shown extraordinary results in many scenarios, ranging from pattern recognition to complex robotic problems. However, their intricate designs and lack of transparency raise safety concerns when applied in real-world applications. In this context, Formal Verification (FV) of DNNs has emerged as a valuable solution to provide provable guarantees on the safety aspect. Nonetheless, the binary answer (i.e., safe or unsafe) could be not informative enough for direct safety interventions such as safety model ranking or selection. To address this limitation, the FV problem has recently been extended to the counting version, called #DNN-Verification, for the computation of the size of the unsafe regions in a given safety property's domain. Still, due to the complexity of the problem, existing solutions struggle to scale on real-world robotic scenarios, where the DNN can be large and complex. To address this limitation, inspired by advances in FV, in this work, we propose a novel strategy based on reachability analysis combined with Symbolic Linear Relaxation and parallel computing to enhance the efficiency of existing exact and approximate FV for DNN counters. The empirical evaluation on standard FV benchmarks and realistic robotic scenarios shows a remarkable improvement in scalability and efficiency, enabling the use of such techniques even for complex robotic applications.
- K. O’Shea, R. Nash, An introduction to convolutional neural networks, arXiv preprint arXiv:1511.08458 (2015).
- Learning complex dexterous manipulation with deep reinforcement learning and demonstrations, arXiv preprint arXiv:1709.10087 (2017).
- Towards hierarchical task decomposition using deep reinforcement learning for pick and place subtasks, in: 2021 20th International Conference on Advanced Robotics (ICAR), IEEE, 2021, pp. 640–645.
- Constrained reinforcement learning and formal verification for safe colonoscopy navigation, in: 2023 IEEE/RSJ International Conference on Intelligent Robots and Systems (IROS), IEEE, 2023.
- Safe reinforcement learning using formal verification for tissue retraction in autonomous robotic-assisted surgery, in: 2021 IEEE/RSJ International Conference on Intelligent Robots and Systems (IROS), IEEE, 2021, pp. 4025–4031.
- Curriculum learning for safe mapless navigation, in: Proceedings of the 37th ACM/SIGAPP Symposium on Applied Computing, 2022, pp. 766–769.
- Virtual-to-real drl: Continuous control of mobile robots for mapless navigation, in: IROS, 2017.
- Intriguing properties of neural networks, arXiv preprint arXiv:1312.6199 (2013).
- Verifying learning-based robotic navigation systems, in: 29th International Conference, TACAS 2023, Springer, 2023, pp. 607–627.
- Algorithms for verifying deep neural networks, Foundations and Trends® in Optimization 4 (2021) 244–404.
- Formal security analysis of neural networks using symbolic intervals, in: 27th USENIX Security Symposium (USENIX Security 18), 2018a, pp. 1599–1614.
- Efficient formal safety analysis of neural networks, Advances in Neural Information Processing Systems 31 (2018b).
- Beta-crown: Efficient bound propagation with per-neuron split constraints for neural network robustness verification, Advances in Neural Information Processing Systems 34 (2021) 29909–29921.
- Reluplex: An efficient smt solver for verifying deep neural networks, in: International conference on computer aided verification, Springer, 2017, pp. 97–117.
- The marabou framework for verification and analysis of deep neural networks, in: International Conference on Computer Aided Verification, 2019.
- Quantitative verification of neural networks and its security applications, in: Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security, 2019.
- Bdd4bnn: a bdd-based quantitative analysis framework for binarized neural networks, in: Computer Aided Verification: 33rd International Conference, CAV 2021, Virtual Event, July 20–23, 2021, Proceedings, Part I 33, Springer, 2021, pp. 175–200.
- The #dnn-verification problem: Counting unsafe inputs for deep neural networks, in: International Joint Conference on Artificial Intelligence (IJCAI), 2023, pp. 217–224.
- A unified view of piecewise linear neural network verification, Advances in Neural Information Processing Systems 31 (2018).
- P. Henriksen, et al., Deepsplit: An efficient splitting method for neural network verification via indirect effect analysis., in: IJCAI, 2021, pp. 2549–2555.
- Formal verification of neural networks for safety-critical tasks in deep reinforcement learning, in: Uncertainty in Artificial Intelligence, PMLR, 2021, pp. 333–343.
- Policy compression for aircraft collision avoidance systems, in: 2016 IEEE/AIAA 35th Digital Avionics Systems Conference (DASC), IEEE, 2016, pp. 1–10.
- The second international verification of neural networks competition (vnn-comp 2021): Summary and results, arXiv:2109.00498 (2021).
- Safe deep reinforcement learning by verifying task-level properties, in: nternational Conference on Autonomous Agents and Multiagent Systems (AAMAS), 2023.
- Online safety property collection and refinement for safe deep reinforcement learning in mapless navigation, in: 2023 IEEE International Conference on Robotics and Automation (ICRA), 2023, pp. 7133–7139.
- Enumerating safe regions in deep neural networks with provable probabilistic guarantees, Proceedings of the AAAI Conference on Artificial Intelligence (2024).
- S. S. Wilks, Statistical prediction with special reference to the problem of tolerance limits, The annals of mathematical statistics 13 (1942) 400–409.
- E. Marchesini, A. Farinelli, Enhancing deep reinforcement learning approaches for multi-robot navigation via single-robot evolutionary policy search, in: 2022 International Conference on Robotics and Automation (ICRA), 2022, pp. 5525–5531.
- E. Marchesini, A. Farinelli, Centralizing state-values in dueling networks for multi-robot reinforcement learning mapless navigation, in: 2021 IEEE/RSJ International Conference on Intelligent Robots and Systems (IROS), 2021, pp. 4583–4588.