A Dual Approach to Scalable Verification of Deep Networks

This paper addresses the problem of formally verifying desirable properties of neural networks, i.e., obtaining provable guarantees that neural networks satisfy specifications relating their inputs and outputs (robustness to bounded norm adversarial perturbations, for example). Most previous work on this topic was limited in its applicability by the size of the network, network architecture and th

[elu_18]

NNの入力に対する出力の保障（敵対的摂動に対する保障など）を制約式で表し、最も制約を破っている制約式を探す最適化問題を作り、その最適化問題の最大値を双対問題の下界によって抑えることで、全ての制約式を守る