一句话:提出CertPri,基于特征空间移动代价并具形式化鲁棒性保证的DNN测试输入优先级排序方法。
深度神经网络在软件系统中表现优异,但可能产生错误行为甚至导致严重后果,因此需要尽早识别其缺陷。测试输入优先级排序可在有限时间和标注成本下优先发现更多暴露缺陷的输入,但现有方法在可认证性、有效性和通用性上仍有不足。本文提出CertPri,从测试输入在DNN特征空间中的移动代价视角进行优先级排序,为移动代价提供形式化鲁棒性保证,并利用该保证识别恶意且暴露缺陷的输入。方法可适用于多种任务、数据、模型和场景。实验覆盖分类与回归2类任务、6种数据形式、4种模型结构和白盒/黑盒2种场景,平均优先级排序有效性提升53.97%,鲁棒性和通用性分别达到基线的1.41~2.00倍和1.33~3.39倍。
Deep neural networks (DNNs) have demonstrated their outperformance in various software systems, but also exhibit misbehavior and even result in irreversible disasters. Therefore, it is crucial to identify the misbehavior of DNN-based software and improve DNNs' quality. Test input prioritization is one of the most appealing ways to guarantee DNNs' quality, which prioritizes test inputs so that more bug-revealing inputs can be identified earlier with limited time and manual labeling efforts. However, the existing prioritization methods are still limited from three aspects: certifiability, effectiveness, and generalizability. To overcome the challenges, we propose CertPri, a test input prioritization technique designed based on a movement cost perspective of test inputs in DNNs' feature space. CertPri differs from previous works in three key aspects: (1) certifiable - it provides a formal robustness guarantee for the movement cost; (2) effective - it leverages formally guaranteed movement costs to identify malicious bug-revealing inputs; and (3) generic - it can be applied to various tasks, data, models, and scenarios. Extensive evaluations across 2 tasks (i.e., classification and regression), 6 data forms, 4 model structures, and 2 scenarios (i.e., white-box and black-box) demonstrate CertPri's superior performance. For instance, it significantly improves 53.97 % prioritization effectiveness on average compared with baselines. Its robustness and generalizability are 1.41~2.00 times and 1.33~3.39 times that of baselines on average, respectively. The code of CertPri is open-sourced at https://github.com/haibinzheng/CertPri.
DOI 原文 · arXiv · PDF(开放获取) · DBLP
@inproceedings{ZhengCJ23,
title = {CertPri: Certifiable Prioritization for Deep Neural Networks via Movement Cost in Feature Space},
author = {Haibin Zheng and Jinyin Chen and Haibo Jin},
booktitle = {ASE},
year = {2023},
doi = {10.1109/ase56229.2023.00126}
}