REVIEW 3 cited by
Input Validation for Neural Networks via Runtime Local Robustness Verification
Not yet reviewed by Pith; the record is open.
This paper has not been read by Pith yet. Machine review is queued; the pith claim, tier, and objections will appear here once it completes.
SPECIMEN: schema-true, not a live event
T0 review · schema-true
One-sentence machine reading of the paper's core claim.
pith:XXXXXXXX · record.json · timestamp
Signed reviews
read the original abstract
Local robustness verification can verify that a neural network is robust wrt. any perturbation to a specific input within a certain distance. We call this distance Robustness Radius. We observe that the robustness radii of correctly classified inputs are much larger than that of misclassified inputs which include adversarial examples, especially those from strong adversarial attacks. Another observation is that the robustness radii of correctly classified inputs often follow a normal distribution. Based on these two observations, we propose to validate inputs for neural networks via runtime local robustness verification. Experiments show that our approach can protect neural networks from adversarial examples and improve their accuracies.
Forward citations
Cited by 3 Pith papers
-
A New Perspective On AI Safety Through Control Theory Methodologies
This paper outlines a new conceptual paradigm, data control, which transfers control-theoretic system analysis and properties to AI systems to support generic AI safety assurance.
-
Enhancing System Self-Awareness and Trust of AI: A Case Study in Trajectory Prediction and Planning
TrustMHE monitors AI prediction errors online and blends AI-based planning costs with a constant-velocity fallback, significantly reducing crashes in closed-loop simulation.
-
Safety Monitoring of Machine Learning Perception Functions: a Survey
A survey that organizes research on runtime safety monitors for ML perception into threat identification, requirements, detection, reaction, and evaluation, and lists open challenges.
Discussion (0). Continue with ORCID to comment.