Search papers, labs, and topics across Lattice.
This paper introduces TNODEV, a comprehensive toolbox for the formal verification of neural ordinary differential equations (neural ODE), addressing the limitations of existing tools that only perform single reachability calls. By integrating a falsification checker and a fast interval-based reachability backend with a verification and refinement loop, TNODEV enhances the precision of safety assessments in neural ODE applications. Evaluations demonstrate that TNODEV outperforms existing methods like NNV2.0 and CORA in both safe-set inclusion and classification-robustness properties across various benchmarks.
TNODEV achieves unprecedented precision in verifying neural ODEs, significantly improving safety assessments in critical applications.
Neural ordinary differential equations (neural ODE) have started to appear in safety critical settings such as continuous-time controllers for cyber-physical systems and classifiers integrated into automated decision pipelines, raising the question of whether their behavior can be formally verified. Existing tools dedicated to neural ODE provide only a single reachability call without iterative input set refinement, limiting the precision of their verdicts to whatever one reachability call can deliver. We present TNODEV, the first sound formal verifier for neural ODE that integrates a falsification checker, a fast interval-based reachability backend based on continuous-time mixed monotonicity, a verification and refinement loop with three input-set splitting heuristics, and a parallel scheduler in a single end-to-end pipeline. TNODEV supports safe-set inclusion verification on pure neural ODE, neural ODE in closed loop with a neural network controller and general neural ODE (GNODE), with the safe set specified either as an interval or as the half-space intersection induced by a target classification label. We evaluate TNODEV on a range of benchmarks across safe-set inclusion and classification-robustness properties, including a direct reachability comparison against NNV~2.0 and CORA and a verification comparison against NNV2.0 on MNIST general neural ODE classifiers.
