论文标题
朝着正确修复神经网络
Towards Repairing Neural Networks Correctly
论文作者
论文摘要
神经网络越来越多地用于支持关键安全应用中的决策(例如自动驾驶汽车,无人驾驶汽车和基于面部识别的身份验证)。尽管已经提出了许多令人印象深刻的静态验证技术来解决神经网络的正确性问题,但静态验证可能永远不足以进行现实世界的神经网络。在这项工作中,我们提出了一种运行时验证方法,以确保神经网络的正确性。鉴于神经网络和理想的安全性,我们采用最先进的静态验证技术来识别战略性的位置,以引入其他门,这些门在运行时“纠正”神经网络行为。实验结果表明,我们的方法有效地产生了可以保证满足这些特性的神经网络,同时大部分时间都与原始神经网络保持一致。
Neural networks are increasingly applied to support decision making in safety-critical applications (like autonomous cars, unmanned aerial vehicles and face recognition based authentication). While many impressive static verification techniques have been proposed to tackle the correctness problem of neural networks, it is possible that static verification may never be sufficiently scalable to handle real-world neural networks. In this work, we propose a runtime verification method to ensure the correctness of neural networks. Given a neural network and a desirable safety property, we adopt state-of-the-art static verification techniques to identify strategically locations to introduce additional gates which "correct" neural network behaviors at runtime. Experiment results show that our approach effectively generates neural networks which are guaranteed to satisfy the properties, whilst being consistent with the original neural network most of the time.