Abstract:While neural networks (NNs) have potential as autonomous controllers for Cyber-Physical Systems, verifying the safety of NN based control systems (NNCSs) poses significant challenges for the practical use of NNs, especially when safety is needed for unbounded time horizons. One reason is the intractability of analyzing NNs, ODEs and hybrid systems. To this end, we introduce VerSAILLE (Verifiably Safe AI via Logically Linked Envelopes): The first general approach that allows reusing control theory results for NNCS verification. By joining forces, we exploit the efficiency of NN verification tools while retaining the rigor of differential dynamic logic (dL). Based on provably safe control envelopes in dL, we derive specifications for the NN which is proven via NN verification. We show that a proof of the NN adhering to the specification is mirrored by a dL proof on the infinite-time safety of the NNCS. The NN verification properties resulting from hybrid systems typically contain nonlinear arithmetic and arbitrary logical structures while efficient NN verification merely supports linear constraints. To overcome this divide, we present Mosaic: An efficient, sound and complete verification approach for polynomial real arithmetic properties on piece-wise linear NNs. Mosaic partitions complex verification queries into simple queries and lifts off-the-shelf linear constraint tools to the nonlinear setting in a completeness-preserving manner by combining approximation with exact reasoning for counterexample regions. Our evaluation demonstrates the versatility of VerSAILLE and Mosaic: We prove infinite-time safety on the classical Vertical Airborne Collision Avoidance NNCS verification benchmark for two scenarios while (exhaustively) enumerating counterexample regions in unsafe scenarios. We also show that our approach significantly outperforms State-of-the-Art tools in closed-loop NNV.

Configuring Safe Spiking Neural Controllers for Cyber-Physical Systems through Formal Verification

Towards Efficient Formal Verification of Spiking Neural Network

Provably Safe Neural Network Controllers via Differential Dynamic Logic

Reachability Analysis and Safety Verification for Neural Network Control Systems

Efficient Verification of Control Systems with Neural Network Controllers.

Model-Free Verification for Neural Network Controlled Systems

Scalable Synthesis of Verified Controllers in Deep Reinforcement Learning

Simultaneous Synthesis and Verification of Neural Control Barrier Functions through Branch-and-Bound Verification-in-the-loop Training

Safety Filter Design for Neural Network Systems via Convex Optimization

Safety Verification of Nonlinear Systems with Bayesian Neural Network Controllers

Scalable Synthesis of Formally Verified Neural Value Function for Hamilton-Jacobi Reachability Analysis

Learning a Formally Verified Control Barrier Function in Stochastic Environment

Verifying Neural Network Controlled Systems Using Neural Networks

Verisig: verifying safety properties of hybrid systems with neural network controllers

Safety verification of Neural-Network-based controllers: a set invariance approach

Verified Safe Reinforcement Learning for Neural Network Dynamic Models

Verification of Neural Network Control Systems in Continuous Time

NNV: The Neural Network Verification Tool for Deep Neural Networks and Learning-Enabled Cyber-Physical Systems

Case Study: Runtime Safety Verification of Neural Network Controlled System

Verification of Neural Network Behaviour: Formal Guarantees for Power System Applications