一句话:提出通用可扩展的 RNN 定量分析框架 DeepStellar,支持测试生成与对抗样本检测。
循环神经网络(RNN)在语音识别、自然语言处理和机器翻译等序列任务上表现优异,但其质量与可靠性问题使其易受对抗攻击,阻碍实际部署。本文提出定量分析框架 DeepStellar,用于支持由 RNN 驱动的软件系统的质量与安全分析。该框架通用,可处理 LSTM、GRU 等多种 RNN 架构,可扩展至工业级模型,并允许用户定制分析器与工具。作者展示了基于 DeepStellar 设计高效测试生成工具和有效对抗样本检测器。在语音识别和图像分类等三个真实 RNN 模型上评估,生成触发缺陷测试的效率较现有方法提升三百倍,对抗攻击检测准确率达 97%。
Recurrent neural network (RNN) has achieved great success in processing sequential inputs for applications such as automatic speech recognition, natural language processing and machine translation. However, quality and reliability issues of RNNs make them vulnerable to adversarial attacks and hinder their deployment in real-world applications. In this paper, we propose a quantitative analysis framework - DeepStellar - to pave the way for effective quality and security analysis of software systems powered by RNNs. DeepStellar is generic to handle various RNN architectures, including LSTM and GRU, scalable to work on industrial-grade RNN models, and extensible to develop customized analyzers and tools. We demonstrated that, with DeepStellar, users are able to design efficient test generation tools, and develop effective adversarial sample detectors. We tested the developed applications on three real RNN models, including speech recognition and image classification. DeepStellar outperforms existing approaches three hundred times in generating defect-triggering tests and achieves 97% accuracy in detecting adversarial attacks. A video demonstration which shows the main features of DeepStellar is available at: https://sites.google.com/view/deepstellar/tool-demo.