arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2305.03365cs.LGcs.AIcs.SE
收藏

基于行为模仿的深度神经网络修复

Repairing Deep Neural Networks Based on Behavior Imitation

National University of Defense Technology(国防科技大学);Institute of Software, Chinese Academy of Sciences(中国科学院软件研究所);University of Chinese Academy of Sciences(中国科学院大学)

Zhen Liang, Taoran Wu, Changyuan Zhao, Wanwei Liu, Bai Xue, Wenjing Yang, Ji Wang

AI总结:

提出BIRDNN框架,首次整合重训练与微调两种修复范式,通过行为模仿纠正错误预测,并识别关键神经元,高效修复缺陷DNN,兼容多种激活函数。

摘要:

深度神经网络(DNN)在安全关键系统中的日益普及引发了对其可能表现出不良行为的担忧。虽然DNN验证和测试提供了关于意外行为的后验结论,但它们并不能防止错误行为的发生。为了解决这个问题,DNN修复/修补旨在消除由缺陷DNN产生的意外预测。两种典型的DNN修复范式是重新训练和微调。然而,现有方法侧重于状态空间的高层抽象解释或推断,忽略了底层神经元的输出。这使得修补过程在计算上代价高昂,并在很大程度上仅限于分段线性(PWL)激活函数。为了解决这些缺点,我们提出了一种基于行为模仿的修复框架BIRDNN,该框架首次整合了两种修复范式。BIRDNN通过在重新训练修复过程中模仿正样本最接近的预期行为来纠正负样本的错误预测。对于微调修复过程,BIRDNN分析神经元在正样本和负样本上的行为差异,以识别对错误行为最负责的神经元。为了应对更具挑战性的领域级修复问题(DRP),我们将BIRDNN与领域行为表征技术相结合,以可能近似正确的方式修复有缺陷的DNN。我们还基于BIRDNN实现了一个原型工具,并在ACAS Xu DNN上进行了评估。我们的实验结果表明,BIRDNN能够成功修复有缺陷的DNN,其效率显著高于最先进的修复工具。此外,BIRDNN与不同的激活函数高度兼容。

英文摘要:

The increasing use of deep neural networks (DNNs) in safety-critical systems has raised concerns about their potential for exhibiting ill-behaviors. While DNN verification and testing provide post hoc conclusions regarding unexpected behaviors, they do not prevent the erroneous behaviors from occurring. To address this issue, DNN repair/patch aims to eliminate unexpected predictions generated by defective DNNs. Two typical DNN repair paradigms are retraining and fine-tuning. However, existing methods focus on the high-level abstract interpretation or inference of state spaces, ignoring the underlying neurons' outputs. This renders patch processes computationally prohibitive and limited to piecewise linear (PWL) activation functions to great extent. To address these shortcomings, we propose a behavior-imitation based repair framework, BIRDNN, which integrates the two repair paradigms for the first time. BIRDNN corrects incorrect predictions of negative samples by imitating the closest expected behaviors of positive samples during the retraining repair procedure. For the fine-tuning repair process, BIRDNN analyzes the behavior differences of neurons on positive and negative samples to identify the most responsible neurons for the erroneous behaviors. To tackle more challenging domain-wise repair problems (DRPs), we synthesize BIRDNN with a domain behavior characterization technique to repair buggy DNNs in a probably approximated correct style. We also implement a prototype tool based on BIRDNN and evaluate it on ACAS Xu DNNs. Our experimental results show that BIRDNN can successfully repair buggy DNNs with significantly higher efficiency than state-of-the-art repair tools. Additionally, BIRDNN is highly compatible with different activation functions.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑