Verification of Binarized Neural Networks via Inter-Neuron Factoring
Chih-Hong Cheng, Georg N\"uhrenberg, Chung-Hao Huang, Harald Ruess

TL;DR
This paper presents a scalable verification framework for Binarized Neural Networks (BNNs) by introducing neuron factoring techniques, enabling formal verification of moderately-sized BNNs on embedded devices.
Contribution
It introduces a novel neuron factoring approach for BNN verification, proves its computational hardness, and develops heuristics for practical verification.
Findings
Factoring computations among neurons improves verification scalability.
NP-hardness of optimal factoring is established.
Heuristics enable verification of BNNs with thousands of neurons.
Abstract
We study the problem of formal verification of Binarized Neural Networks (BNN), which have recently been proposed as a energy-efficient alternative to traditional learning networks. The verification of BNNs, using the reduction to hardware verification, can be even more scalable by factoring computations among neurons within the same layer. By proving the NP-hardness of finding optimal factoring as well as the hardness of PTAS approximability, we design polynomial-time search heuristics to generate factoring solutions. The overall framework allows applying verification techniques to moderately-sized BNNs for embedded devices with thousands of neurons and inputs.
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsAdversarial Robustness in Machine Learning · Advanced Neural Network Applications · Physical Unclonable Functions (PUFs) and Hardware Security
