atlas

Research map / Adversarial robustness and security / Certified and empirical robustness

Verifying Properties of Binarized Deep Neural Networks

AAAI 2018 · Adversarial robustness and security › Certified and empirical robustness · approach: Neural network robustness verification · 202 citations (OpenAlex)

Read the paperCheck your idea against 108,967 papers

AI-extracted summary. Written by AI from the paper's title only (no summary yet). Numbers and claims can be wrong or missing context, so check the paper before you cite or build on it.

Measured effects reported in the paper

What was changedWhereMeasuredEffect
Replace the ILP encoding with the proposed SAT encoding4-block BNN robustness verification · MNIST, MNIST-rot, and MNIST-back-image at ε=1, 3, and 5instances solved: 180 vs 130; 179 vs 125; 191 vs 143Helped
Add counterexample-guided search to the SAT encoding4-block BNN robustness verification · MNIST, MNIST-rot, and MNIST-back-imageinstances solved: MNIST ε=1: 180 vs 171; MNIST-rot ε=1: 179 vs 197; MNIST-back-image ε=1: 191 vs 191Mixed
Add counterexample-guided search to the SAT encoding4-block BNN robustness verification · MNIST, MNIST-rot, and MNIST-back-imageaverage solving time (seconds): 77.3 -> 34.1; 57.4 -> 13.5; 18.3 -> 12.8Helped
Increase the allowed perturbation bound ε4-block BNN on MNIST-back-image · MNIST-back-imagecertifiably ε-robust images: 138 -> 20 -> 3Hurt
Add input batch normalization and binarization layersBNN input processing · MNIST, MNIST-rot, and MNIST-back-imageclassification accuracy: less than one percentHurt

Closest papers by meaning

Writing a paper in this area? scime draft is a free LaTeX editor with AI included, real-time co-authors and a check of your references and venue rules before you submit. It also imports OpenAI Prism projects.

Open scime draft

Get the next scime Dispatch and a monthly field update

Free. We send a confirmation link first; every email has a one-click unsubscribe. Privacy