Scalable Polyhedral Verification of Recurrent Neural Networks

Wonryong Ryou,Jiayu Chen,Mislav Balunovic,Gagandeep Singh,Andrei Dan,Martin Vechev
DOI: https://doi.org/10.1007/978-3-030-81685-8_10
2020-01-01
Abstract:We present a scalable and precise verifier for recurrent neural networks,called Prover based on two novel ideas: (i) a method to compute a set ofpolyhedral abstractions for the non-convex and nonlinear recurrent updatefunctions by combining sampling, optimization, and Fermat's theorem, and (ii) agradient descent based algorithm for abstraction refinement guided by thecertification problem that combines multiple abstractions for each neuron.Using Prover, we present the first study of certifying a non-trivial use caseof recurrent neural networks, namely speech classification. To achieve this, weadditionally develop custom abstractions for the non-linear speechpreprocessing pipeline. Our evaluation shows that Prover successfully verifiesseveral challenging recurrent models in computer vision, speech, and motionsensor data classification beyond the reach of prior work.
What problem does this paper attempt to address?