liu.seSearch for publications in DiVA
Change search
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • oxford
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf
SafeDeep: A Scalable Robustness Verification Framework for Deep Neural Networks
Department of Electrical and Information Technology, Lund University, Lund, Sweden.
Linköping University, Department of Computer and Information Science, Software and Systems. Linköping University, Faculty of Science & Engineering.ORCID iD: 0000-0001-8548-1250
Linköping University, Department of Computer and Information Science, Software and Systems. Linköping University, Faculty of Science & Engineering.ORCID iD: 0000-0002-0440-4753
Department of Electrical and Information Technology, Lund University, Lund, Sweden.
2023 (English)In: ICASSP 2023: 2023 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP), IEEE, 2023Conference paper, Published paper (Refereed)
Abstract [en]

The state-of-the-art machine learning techniques come with limited, if at all any, formal correctness guarantees. This has been demonstrated by adversarial examples in the deep learning domain. To address this challenge, here, we propose a scalable robustness verification framework for Deep Neural Networks (DNNs). The framework relies on Linear Programming (LP) engines and builds on decades of advances in the field for analyzing convex approximations of the original network. The key insight is in the on-demand incremental refinement of these convex approximations. This refinement can be parallelized, making the framework even more scalable. We have implemented a prototype tool to verify the robustness of a large number of DNNs in epileptic seizure detection. We have compared the results with those obtained by two state-of-the-art tools for the verification of DNNs. We show that our framework is consistently more precise than the over-approximation-based tool ERAN and more scalable than the SMT-based tool Reluplex.

Place, publisher, year, edition, pages
IEEE, 2023.
Series
International Conference on Acoustics, Speech, and Signal Processing (ICASSP), ISSN 1520-6149, E-ISSN 2379-190X
Keywords [en]
DNNs, verification, approximation, refinement, linear programming, robustness
National Category
Computer Sciences
Identifiers
URN: urn:nbn:se:liu:diva-207758DOI: 10.1109/ICASSP49357.2023.10097028ISI: 001630046900428Scopus ID: 2-s2.0-86000388130ISBN: 978-1-7281-6327-7 (electronic)ISBN: 978-1-7281-6328-4 (print)OAI: oai:DiVA.org:liu-207758DiVA, id: diva2:1899776
Conference
ICASSP 2023 - 2023 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)
Note

Funding Agencies|Wallenberg AI, Autonomous Systems and Software Program (WASP) - Knut and Alice Wallenberg Foundation; European Union (EU) Interreg Program

Available from: 2024-09-20 Created: 2024-09-20 Last updated: 2026-02-05

Open Access in DiVA

No full text in DiVA

Other links

Publisher's full textScopushttps://ieeexplore.ieee.org/document/10097028

Authority records

Hosseini, KamranRezine, Ahmed

Search in DiVA

By author/editor
Hosseini, KamranRezine, Ahmed
By organisation
Software and SystemsFaculty of Science & Engineering
Computer Sciences

Search outside of DiVA

GoogleGoogle Scholar

doi
isbn
urn-nbn

Altmetric score

doi
isbn
urn-nbn
Total: 71 hits
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • oxford
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf