Set-Based Training for Neural Network Verification

arXiv:2401.14961v2 Announce Type: replace
Abstract: Neural networks are vulnerable to adversarial attacks, i.e., small input perturbations can significantly affect the outputs of a neural network. In safety-critical environments, the inputs often contain noisy sensor data; hence, in this case, neural networks that are robust against input perturbations are required. To ensure safety, the robustness of a neural network must be formally verified. However, training and formally verifying robust neural networks is challenging. We address both of these challenges by employing, …

abstract adversarial adversarial attacks arxiv attacks case cs.cr cs.lg cs.lo data environments inputs network networks neural network neural networks robust robustness safety safety-critical sensor set small training type verification vulnerable