arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2103.03704cs.LGcs.SE
收藏

基于贝叶斯近似隐藏特征的深度神经网络的抽象和符号执行

Abstraction and Symbolic Execution of Deep Neural Networks with Bayesian Approximation of Hidden Features

University of Liverpool(利物浦大学);Defence Science and Technology Laboratory (Dstl)(国防科学与技术实验室)

Nicolas Berthier, Amany Alshareef, James Sharp, Sven Schewe, Xiaowei Huang

摘要:

深度神经网络(DNN)的验证和确认已经进行了深入的研究,旨在了解DNN是否以及如何应用于安全关键应用。然而,现有的验证和确认技术在DNN的大小和数据集的大小上都受到其可扩展性的限制。在本文中,我们提出了一种新的抽象方法,将DNN和数据集抽象为贝叶斯网络(BN)。我们利用降维技术来识别DNN的隐藏层已经学习的隐藏特征,并将每个隐藏特征与BN的节点相关联。在这个BN上,我们可以进行概率推理来理解DNN处理数据的行为。更重要的是,我们可以推导出一种运行时监控方法,以检测在操作时间罕见的输入和输入数据的协变量偏移。我们还可以调整现有的结构覆盖率引导测试技术(即,基于DNN的低级元素,例如神经元),以便生成更好地运用隐藏特征的测试用例。我们使用可在https://github.com/TrustAI/DeepConcolic上获得的DeepConcolic工具来实现和评估BN抽象技术。

英文摘要:

Intensive research has been conducted on the verification and validation of deep neural networks (DNNs), aiming to understand if, and how, DNNs can be applied to safety critical applications. However, existing verification and validation techniques are limited by their scalability, over both the size of the DNN and the size of the dataset. In this paper, we propose a novel abstraction method which abstracts a DNN and a dataset into a Bayesian network (BN). We make use of dimensionality reduction techniques to identify hidden features that have been learned by hidden layers of the DNN, and associate each hidden feature with a node of the BN. On this BN, we can conduct probabilistic inference to understand the behaviours of the DNN processing data. More importantly, we can derive a runtime monitoring approach to detect in operational time rare inputs and covariate shift of the input data. We can also adapt existing structural coverage-guided testing techniques (i.e., based on low-level elements of the DNN such as neurons), in order to generate test cases that better exercise hidden features. We implement and evaluate the BN abstraction technique using our DeepConcolic tool available at https://github.com/TrustAI/DeepConcolic.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑