Track papers across labs, topics, and trends.
Search papers, labs, and topics across Lattice.
This paper introduces DRG-BaB, a novel Branch-and-Bound framework for neural network verification that integrates counterexample-guided abstraction refinement into the dataflow verification process. DRG-BaB uses a Directional Relaxation Gap heuristic, derived from a closed-form spurious counterexample, to prioritize branching on neurons that contribute most to falsification. The method significantly reduces search tree size and verification time compared to existing dataflow verification baselines on high-dimensional benchmarks by transforming generic search into targeted refinement.
By pinpointing the neurons most responsible for verification failures, DRG-BaB slashes search times in neural network verification, outperforming standard Branch-and-Bound techniques.
Deep Neural Networks demonstrate exceptional performance but remain vulnerable to adversarial perturbations, necessitating formal verification for safety-critical deployment. To address the computational complexity of this task, researchers often employ abstraction-refinement techniques that iteratively tighten an over-approximated model. While structural methods utilize Counterexample-Guided Abstraction Refine- ment, state-of-the-art dataflow verifiers typically rely on Branch-and-Bound to refine numerical convex relaxations. However, current dataflow approaches operate with blind refinement processes that rely on static heuristics and fail to leverage specific diagnostic information from verification failures. In this work, we argue that Branch-and-Bound should be reformulated as a Dataflow CEGAR loop where the spurious counterexample serves as a precise witness to local abstraction errors. We propose DRG-BaB, a framework that introduces the Directional Relaxation Gap heuristic to prioritize branching on neurons actively contributing to falsification in the abstract domain. By deriving a closed-form spurious counterexample directly from linear bounds, our method transforms generic search into targeted refinement. Experiments on high-dimensional benchmarks demonstrate that this approach significantly reduces search tree size and verification time compared to established baselines.