Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Exploiting Verified Neural Networks via Floating Point Numerical Error   Researchers have developed neural network verification algorithms motivated
by the need to characterize the robustness of deep neural networks. The
verifiers aspire to answer whether a neural network guarantees certain
properties with respect to all inputs in a space. However, many verifiers
inaccurately model floating point arithmetic but do not thoroughly discuss the
consequences.
  We show that the negligence of floating point error leads to unsound
verification that can be systematically exploited in practice. For a pretrained
neural network, we present a method that efficiently searches inputs as
witnesses for the incorrectness of robustness claims made by a complete
verifier. We also present a method to construct neural network architectures
and weights that induce wrong results of an incomplete verifier. Our results
highlight that, to achieve practically reliable verification of neural
networks, any verification system must accurately (or conservatively) model the
effects of any floating point computations in the network inference or
verification system.

27
The categories of this paper are: comp-gas
21
The categories of this paper are: adap-org
36
The categories of this paper are: cmp-lg
10
The categories of this paper are: q-bio
4
The categories of this paper are: cond-mat
23
The categories of this paper are: solv-int
22
The categories of this paper are: chao-dyn
2
The categories of this paper are: math
6
The categories of this paper are: astro-ph
25
The categories of this paper are: patt-sol
26
The categories of this paper are: bayes-an
19
The categories of this paper are: eess
3
The categories of this paper are: physics
24
The categories of this paper are: dg-ga
5
The categories of this paper are: gr-qc
31
The categories of this paper are: ao-sci