论文标题

QVIP:一种基于ILP的正式验证方法,用于量化神经网络

QVIP: An ILP-based Formal Verification Approach for Quantized Neural Networks

论文作者

Zhang, Yedi, Zhao, Zhe, Song, Fu, Zhang, Min, Chen, Taolue, Sun, Jun

论文摘要

由于它在解决许多具有挑战性的任务方面的表现令人惊讶,深度学习已成为软件开发中有希望的编程范式。深度神经网络(DNN)越来越多地在实践中部署,但是由于其对计算能力的需求,资源受限的设备受到限制。量化已成为一种有前途的技术,可将DNN的大小与其浮点编号对应物相当。所得量化的神经网络(QNN)可以能够能够有效地实施。与它们的浮点编号对应物类似,QNN的质量保证技术(例如测试和正式验证)至关重要,但目前却少探索。在这项工作中,我们为QNN提出了一种新颖有效的形式验证方法。特别是,我们是第一个提出编码的人,将QNN的验证问题减少到解决整数线性约束的求解中,可以使用现成的求解器来解决。我们的编码既声音又完整。我们证明了我们的方法在局部鲁棒性验证和最大鲁棒性半径计算上的应用。我们在原型工具QVIP中实施方法,并进行彻底的评估。对具有不同量化位的QNN的实验结果证实了我们方法的有效性和效率,例如,两个数量级的阶数更快,并且能够在同一时间限制中求解更多的验证任务,而不是最先进的方法。

Deep learning has become a promising programming paradigm in software development, owing to its surprising performance in solving many challenging tasks. Deep neural networks (DNNs) are increasingly being deployed in practice, but are limited on resource-constrained devices owing to their demand for computational power. Quantization has emerged as a promising technique to reduce the size of DNNs with comparable accuracy as their floating-point numbered counterparts. The resulting quantized neural networks (QNNs) can be implemented energy-efficiently. Similar to their floating-point numbered counterparts, quality assurance techniques for QNNs, such as testing and formal verification, are essential but are currently less explored. In this work, we propose a novel and efficient formal verification approach for QNNs. In particular, we are the first to propose an encoding that reduces the verification problem of QNNs into the solving of integer linear constraints, which can be solved using off-the-shelf solvers. Our encoding is both sound and complete. We demonstrate the application of our approach on local robustness verification and maximum robustness radius computation. We implement our approach in a prototype tool QVIP and conduct a thorough evaluation. Experimental results on QNNs with different quantization bits confirm the effectiveness and efficiency of our approach, e.g., two orders of magnitude faster and able to solve more verification tasks in the same time limit than the state-of-the-art methods.

扫码加入交流群

加入微信交流群

微信交流群二维码

扫码加入学术交流群,获取更多资源