Abstract:Over the past few years, deep neural networks (DNNs) have achieved tremendous success and have been continuously applied in many application domains. However, during the practical deployment in industrial tasks, DNNs are found to be erroneous-prone due to various reasons such as overfitting and lacking of robustness to real-world corruptions during practical usage. To address these challenges, many recent attempts have been made to repair DNNs for version updates under practical operational contexts by updating weights (i.e., network parameters) through retraining, fine-tuning, or direct weight fixing at a neural level. Nevertheless, existing solutions often neglect the effects of neural network architecture and weight relationships across neurons and layers. In this work, as the first attempt, we initiate to repair DNNs by jointly optimizing the architecture and weights at a higher (i.e., block level). We first perform empirical studies to investigate the limitation of whole network-level and layer-level repairing, which motivates us to explore a novel repairing direction for DNN repair at the block level. To this end, we need to further consider techniques to address two key technical challenges, i.e., block localization , where we should localize the targeted block that we need to fix; and how to perform joint architecture and weight repairing . Specifically, we first propose adversarial-aware spectrum analysis for vulnerable block localization that considers the neurons’ status and weights’ gradients in blocks during the forward and backward processes, which enables more accurate candidate block localization for repairing even under a few examples. Then, we further propose the architecture-oriented search-based repairing that relaxes the targeted block to a continuous repairing search space at higher deep feature levels. By jointly optimizing the architecture and weights in that space, we can identify a much better block architecture. We implement our proposed repairing techniques as a tool, named ArchRepair , and conduct extensive experiments to validate the proposed method. The results show that our method can not only repair but also enhance accuracy and robustness, outperforming the state-of-the-art DNN repair techniques.

VeRe: Verification Guided Synthesis for Repairing Deep Neural Networks.

Interpretability Based Neural Network Repair

Improving Neural Network Verification through Spurious Region Guided Refinement.

ADVREPAIR:Provable Repair of Adversarial Attack

Towards Repairing Neural Networks Correctly

Causality-based Neural Network Repair

Repairing Deep Neural Networks Based on Behavior Imitation

Architecture-Preserving Provable Repair of Deep Neural Networks

Neural Network Repair with Reachability Analysis

NeVer 2.0: Learning, Verification and Repair of Deep Neural Networks

Sound and Complete Neural Network Repair with Minimality and Locality Guarantees

A Robust Optimisation Perspective on Counterexample-Guided Repair of Neural Networks

SpecRepair: Counter-Example Guided Safety Repair of Deep Neural Networks

NNrepair: Constraint-based Repair of Neural Network Classifiers

Repairing Deep Neural Networks: Fix Patterns and Challenges

DelBugV: Delta-Debugging Neural Network Verifiers

Neural Transfer Learning for Repairing Security Vulnerabilities in C Code

Automated Repair of AI Code with Large Language Models and Formal Verification

AIREPAIR: A Repair Platform for Neural Networks

CLEVEREST: Accelerating CEGAR-based Neural Network Verification via Adversarial Attacks

ArchRepair : Block-Level Architecture-Oriented Repairing for Deep Neural Networks