Portfolio solver for verifying Binarized Neural Networks

Kovásznai, Gergely and Gajdár, Krisztián and Narodytska, Nina (2021) Portfolio solver for verifying Binarized Neural Networks. Annales Mathematicae et Informaticae, 53. pp. 183-200. ISSN 1787-6117

Preview

Text AMI_53_from183to200.pdf - Published Version Download (1MB) | Preview

Abstract

Although deep learning is a very successful AI technology, many concerns have been raised about to what extent the decisions making process of deep neural networks can be trusted. Verifying of properties of neural networks such as adversarial robustness and network equivalence sheds light on the trustiness of such systems. We focus on an important family of deep neural networks, the Binarized Neural Networks (BNNs) that are useful in resourceconstrained environments, like embedded devices. We introduce our portfolio solver that is able to encode BNN properties for SAT, SMT, and MIP solvers and run them in parallel, in a portfolio setting. In the paper we propose all the corresponding encodings of different types of BNN layers as well as BNN properties into SAT, SMT, cardinality constrains, and pseudo-Boolean constraints. Our experimental results demonstrate that our solver is capable of verifying adversarial robustness of medium-sized BNNs in reasonable time and seems to scale for larger BNNs. We also report on experiments on network equivalence with promising results.

Actions (login required)

Edit Item