Abstract:Deep Learning (DL) has recently achieved tremendous success. A variety of DL frameworks and platforms play a key role to catalyze such progress. However, the differences in architecture designs and implementations of existing frameworks and platforms bring new challenges for DL software development and deployment. Till now, there is no study on how various mainstream frameworks and platforms influence both DL software development and deployment in practice. To fill this gap, we take the first step towards understanding how the most widely-used DL frameworks and platforms support the DL software development and deployment. We conduct a systematic study on these frameworks and platforms by using two types of DNN architectures and three popular datasets. (1) For development process, we investigate the prediction accuracy under the same runtime training configuration or same model weights/biases. We also study the adversarial robustness of trained models by leveraging the existing adversarial attack techniques. The experimental results show that the computing differences across frameworks could result in an obvious prediction accuracy decline, which should draw the attention of DL developers. (2) For deployment process, we investigate the prediction accuracy and performance (refers to time cost and memory consumption) when the trained models are migrated/quantized from PC to real mobile devices and web browsers. The DL platform study unveils that the migration and quantization still suffer from compatibility and reliability issues. Meanwhile, we find several DL software bugs by using the results as a benchmark. We further validate the results through bug confirmation from stakeholders and industrial positive feedback to highlight the implications of our study. Through our study, we summarize practical guidelines, identify challenges and pinpoint new research directions, such as understanding the characteristics of DL frameworks and platforms, avoiding compatibility and reliability issues, detecting DL software bugs, and reducing time cost and memory consumption towards developing and deploying high quality DL systems effectively.

TIM: Enabling Large-scale White-box Testing on In-App Deep Learning Models

Automation Slicing and Testing for in-App Deep Learning Models

DeepXplore: Automated Whitebox Testing of Deep Learning Systems

Towards Black-box Attacks on Deep Learning Apps

Cheating Your Apps: Black‐box Adversarial Attacks on Deep Learning Apps

Investigating White-Box Attacks for On-Device Models

DevMuT: Testing Deep Learning Framework Via Developer Expertise-Based Mutation

TeDA: A Testing Framework for Data Usage Auditing in Deep Learning Model Development

DeepMutation: Mutation Testing of Deep Learning Systems

Safety and Performance, Why Not Both? Bi-Objective Optimized Model Compression against Heterogeneous Attacks Toward AI Software Deployment

DeepIA: An Interpretability Analysis based Test Data Generation Method for DNN

Testing Deep Learning Models: A First Comparative Study of Multiple Testing Techniques

DEEPJUDGE: A Testing Framework for Copyright Protection of Deep Learning Models.

Deep Learning based Intelligent Coin-tap Test for Defect Recognition

ModelDiff: Testing-Based DNN Similarity Comparison for Model Reuse Detection

Safety and Performance, Why not Both? Bi-Objective Optimized Model Compression toward AI Software Deployment

A First Look at Deep Learning Apps on Smartphones

An Empirical Study Towards Characterizing Deep Learning Development and Deployment Across Different Frameworks and Platforms

ModelObfuscator: Obfuscating Model Information to Protect Deployed ML-based Systems

Smart App Attack: Hacking Deep Learning Models in Android Apps