一句话:提出网络约简预处理方法,消除稳定 ReLU 神经元并将网络转为顺序结构,从而加速现有神经网络验证工具。
深度神经网络的安全性质验证对关键应用至关重要,但现有验证工具面对复杂架构和较大网络时仍难以扩展。本文提出一种验证前的网络约简技术:通过消除稳定的 ReLU 神经元,将原网络变换为由 ReLU 与 Affine 层组成的顺序神经网络,使其可被多数验证工具处理。作者将该技术实例化到 α,β-crown、VeriNet 和 PRIMA 等先进完备/不完备验证工具上,并在大量基准上实验。结果表明,网络约简能显著缩小网络规模、加速现有验证工具,并通过将网络化为顺序网络提升工具对多种网络的可用性。
A wide range of verification methods have been proposed to verify the safety properties of deep neural networks ensuring that the networks function correctly in critical applications. However, many well-known verification tools still struggle with complicated network architectures and large network sizes. In this work, we propose a network reduction technique as a pre-processing method prior to verification. The proposed method reduces neural networks via eliminating stable ReLU neurons, and transforming them into a sequential neural network consisting of ReLU and Affine layers which can be handled by most verification tools. We instantiate the reduction technique on the state-of-the-art complete and incomplete verification tools, including $\alpha,\beta$ -crown, VeriNet and PRIMA. Our experiments on a large set of benchmarks indicate that the proposed technique can significantly reduce neural networks and speed up existing verification tools. Furthermore, the experiment results also show that network reduction can improve the availability of existing verification tools on many networks by reducing them into sequential neural networks.