paperbot · PL 论文追踪

全部论文 待读 收藏

P2 CertPri: Certifiable Prioritization for Deep Neural Networks via Movement Cost in Feature Space

CertPri:通过特征空间中的移动代价对深度神经网络进行可认证优先级排序
ASE 2023 38th IEEE/ACM International Conference on Automated Software Engineering (ASE)2023匹配度 3/10 · 论文关注DNN测试输入优先级排序,虽涉及形式化鲁棒性保证并与ML系统可靠性相关,但不属于用户核心关注的静态分析、Agentic程序、浮点程序分析或贝叶斯程序分析。它也没有涉及LLM/Agent与静态分析/形式化验证的结合。引用 13 inbox
Haibin Zheng, Jinyin Chen, Haibo Jin
crossref: 2026-09-12dblp: 2026-09-12arxiv: 2026-09-12

AI 速览

一句话:提出CertPri,基于特征空间移动代价并具形式化鲁棒性保证的DNN测试输入优先级排序方法。

深度神经网络在软件系统中表现优异,但可能产生错误行为甚至导致严重后果,因此需要尽早识别其缺陷。测试输入优先级排序可在有限时间和标注成本下优先发现更多暴露缺陷的输入,但现有方法在可认证性、有效性和通用性上仍有不足。本文提出CertPri,从测试输入在DNN特征空间中的移动代价视角进行优先级排序,为移动代价提供形式化鲁棒性保证,并利用该保证识别恶意且暴露缺陷的输入。方法可适用于多种任务、数据、模型和场景。实验覆盖分类与回归2类任务、6种数据形式、4种模型结构和白盒/黑盒2种场景,平均优先级排序有效性提升53.97%,鲁棒性和通用性分别达到基线的1.41~2.00倍和1.33~3.39倍。

问题
DNN可能产生错误行为,而现有测试输入优先级排序方法在可认证性、有效性和通用性方面存在局限,难以在有限标注下尽早发现暴露缺陷的输入。
方法
CertPri从测试输入在DNN特征空间中的移动代价出发,为移动代价建立形式化鲁棒性保证,并利用该保证对输入进行优先级排序以识别恶意且暴露缺陷的样本。
评估
在分类和回归2类任务、6种数据形式、4种模型结构以及白盒和黑盒2种场景下进行广泛实验,并与基线方法比较有效性、鲁棒性和通用性。
原文摘要(Abstract)

Deep neural networks (DNNs) have demonstrated their outperformance in various software systems, but also exhibit misbehavior and even result in irreversible disasters. Therefore, it is crucial to identify the misbehavior of DNN-based software and improve DNNs' quality. Test input prioritization is one of the most appealing ways to guarantee DNNs' quality, which prioritizes test inputs so that more bug-revealing inputs can be identified earlier with limited time and manual labeling efforts. However, the existing prioritization methods are still limited from three aspects: certifiability, effectiveness, and generalizability. To overcome the challenges, we propose CertPri, a test input prioritization technique designed based on a movement cost perspective of test inputs in DNNs' feature space. CertPri differs from previous works in three key aspects: (1) certifiable - it provides a formal robustness guarantee for the movement cost; (2) effective - it leverages formally guaranteed movement costs to identify malicious bug-revealing inputs; and (3) generic - it can be applied to various tasks, data, models, and scenarios. Extensive evaluations across 2 tasks (i.e., classification and regression), 6 data forms, 4 model structures, and 2 scenarios (i.e., white-box and black-box) demonstrate CertPri's superior performance. For instance, it significantly improves 53.97 % prioritization effectiveness on average compared with baselines. Its robustness and generalizability are 1.41~2.00 times and 1.33~3.39 times that of baselines on average, respectively. The code of CertPri is open-sourced at https://github.com/haibinzheng/CertPri.

链接与引用

DOI 原文 · arXiv · PDF(开放获取) · DBLP

BibTeX
@inproceedings{ZhengCJ23,
  title = {CertPri: Certifiable Prioritization for Deep Neural Networks via Movement Cost in Feature Space},
  author = {Haibin Zheng and Jinyin Chen and Haibo Jin},
  booktitle = {ASE},
  year = {2023},
  doi = {10.1109/ase56229.2023.00126}
}