Verifiably Safe and Correct Deep Neural Networks

ERC (European Research Council)HORIZON-ERCID: 101112713
EC Contribution
€15,000
Consortium Size
1 orgs
Start Year
2023
Summary

Deep machine learning is revolutionizing computer science. Instead of manually creating complex software, engineers now use automatically generated deep neural networks (DNNs) in critical financial, medical and transportation systems, obtaining previously unimaginable results.Despite their remarkable achievements, DNNs remain opaque. We do not understand their decision making and cannot prove their correctness - thus risking potentially devastating outcomes. For example, it has been shown that DNNs that navigate autonomous aircraft with the goal of avoiding collisions could produce incorrect turning advisories. Thus, the lack of formal guarantees regarding DNN behavior is preventing their safe deployment in critical systems, and could jeopardize human lives. Consequently, there is a crucial need to ensure that DNNs operate correctly.Recent and exciting developments in formal verification allow us to automatically reason about DNNs. However, this is a nascent technology, which currently only scales to medium-sized DNNs - whereas real-world systems are much larger. Additionally, it is unclear how to apply this technology in practice. I propose to bridge this crucial gap through the development of novel, scalable and groundbreaking techniques for verifying the correctness of large DNNs, and by applying them to real systems of interest. I will do this by (1) developing search-space pruning techniques, which will enable us to verify larger DNNs; (2) creating novel abstraction-refinement techniques, which will allow us to scale to even larger DNNs; and (3) identifying new kinds of relevant specifications and key domains where DNNs are used, demonstrating the verification of real-world DNNs.This project will result in a sound and expressive framework for automatically reasoning about DNNs, orders of magnitude larger than is possible today. This framework will ensure the safety and correctness of DNNs deployed in critical systems, greatly benefiting users and society.

Consortium (1)

Project Results (14)

Source: CORDIS, the EU research results database.

Publications (14)
A Certified Proof Checker for Deep Neural Network Verification in Imandra
Proc. 16th Int. Conf. on Interactive Theorem Proving (ITP)· 2025
R. Desmartin, O. Isac, G. Passmore, E. Komendantskaya, K. Stark and G. Katz
Abstraction-Based Proof Production in Formal Verification of Neural Networks
Proc. 8th Int. Symposium on AI Verification (SAIV)· 2025
Y. Elboher, O. Isac, G. Katz, T. Ladner and H.Wu
Analyzing Adversarial Inputs in Deep Reinforcement Learning
Proc. 3rd Int. Conf. on Bridging the Gap Between AI and Reality (AISoLA)· 2025
D. Corsi, G. Amir, G. Katz and A. Farinelli
Explaining, Fast and Slow: Abstraction and Refinement of Provable Explanations
Proc. 42nd Int. Conf. on Machine Learning (ICML)· 2025
S. Bassan, Y. Elboher, T. Ladner, M. Althoff and G. Katz
Exploring and Evaluating Interplays of BPpy with Deep Reinforcement Learning and Formal Methods
Proc. 20th Int. Conf. on Evaluation of Novel Approaches to Software Engineering (ENASE)· 2025
T. Yaacov, G. Weiss, A. Ashrov, G. Katz and H. Zisser
Neural Network Verification is a Programming Language Challenge
Proc. 34th European Symposium on Programming (ESOP)· 2025
L. Cordeiro, M. Daggitt, J. Girard-Satabin, O. Isac, T. Johnson, G. Katz, E. Komendantskaya, A. Lemesle, E. Manino, A. Sinkarovs and H. Wu
On the Computational Tractability of the (Many) Shapley Values
Proc. 28th Int. Conf. on Artificial Intelligence and Statistics (AISTATS)· 2025
R. Marzouk, S. Bassan, G. Katz and C. de la Higuera
What makes an Ensemble (Un) Interpretable?
Proc. 42nd Int. Conf. on Machine Learning (ICML)· 2025
S. Bassan, G. Amir, M. Zehavi and G. Katz
DEM: A Method for Certifying Deep Neural Network Classifier Outputs in Aerospace
Proc. 43rd Digital Avionics Systems Conf. (DASC)· 2024
G. Katz, N. Levy, I. Refaeli and R. Yerushalmi
Hard to Explain: On the Computational Hardness of In-Distribution Model Interpretation
Proc. 27th European Conf. on Artificial Intelligence (ECAI)· 2024
G. Amir, S. Bassan, and G. Katz
Local vs. Global Interpretability: A Computational Complexity Perspective
Proc. 41st Int. Conf. on Machine Learning (ICML)· 2024
S. Bassan, G. Amir and G. Katz
Marabou 2.0: A Versatile Formal Analyzer of Neural Networks
Proc. 36th Int. Conf. on Computer Aided Verification (CAV), pp. 249-264· 2024
H. Wu, O. Isac, A. Zeljic, T. Tagomori, M. Daggitt, W. Kokke, I. Refaeli, G. Amir, K. Julian, S. Bassan, P. Huang, O. Lahav, M. Wu, M. Zhang, E. Komendantskaya, G. Katz and C. Barrett
On Augmenting Scenario-Based Modeling with Generative AI
Proc. 12th Int. Conf. on Model-Driven Engineering and Software Development (MODELSWARD)· 2024
D. Harel, G. Katz, A. Marron and S. Szekely
Verification-Guided Shielding for Deep Reinforcement Learning
Proc. 1st Reinforcement Learning Conf. (RLC)· 2024
D. Corsi, G. Amir, A. Rodriguez, C. Sanchez, G. Katz and R. Fox