{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,9,20]],"date-time":"2024-09-20T04:31:42Z","timestamp":1726806702140},"reference-count":32,"publisher":"Springer Science and Business Media LLC","issue":"18","license":[{"start":{"date-parts":[[2024,8,15]],"date-time":"2024-08-15T00:00:00Z","timestamp":1723680000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,8,15]],"date-time":"2024-08-15T00:00:00Z","timestamp":1723680000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Supercomput"],"published-print":{"date-parts":[[2024,12]]},"DOI":"10.1007\/s11227-024-06402-4","type":"journal-article","created":{"date-parts":[[2024,8,15]],"date-time":"2024-08-15T03:26:51Z","timestamp":1723692411000},"page":"25792-25817","update-policy":"http:\/\/dx.doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["A dual boundary robust verification method for neural networks"],"prefix":"10.1007","volume":"80","author":[{"given":"Yueyue","family":"Yang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Qun","family":"Fang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yajing","family":"Tang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yuchen","family":"Feng","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yihui","family":"Yan","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yong","family":"Xu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2024,8,15]]},"reference":[{"key":"6402_CR1","unstructured":"Bojarski M, Testa DD, Dworakowski D, Firner B, Flepp B, Goyal P, Jackel LD, Monfort M, Muller U, Zhang J, Zhang X, Zhao J, Zieba K (2016) End to end learning for self-driving cars. CoRR abs\/1604.07316"},{"key":"6402_CR2","doi-asserted-by":"publisher","unstructured":"Scheiner N, Appenrodt N, Dickmann J, Sick B (2019) Radar-based road user classification and novelty detection with recurrent neural network ensembles. In: 2019 IEEE Intelligent Vehicles Symposium, IV 2019, Paris, France, pp 722\u2013729. https:\/\/doi.org\/10.1109\/IVS.2019.8813773","DOI":"10.1109\/IVS.2019.8813773"},{"key":"6402_CR3","unstructured":"Zhang H, Weng T, Chen P, Hsieh C, Daniel L (2018) Efficient neural network robustness certification with general activation functions. In: Bengio, S., Wallach, H.M., Larochelle, H., Grauman, K., Cesa-Bianchi, N., Garnett, R. (eds.) Advances in Neural Information Processing Systems 31: Annual Conference on Neural Information Processing Systems, NeurIPS 2018, Montr\u00e9al, Canada, pp 4944\u20134953. https:\/\/proceedings.neurips.cc\/paper\/2018\/hash\/d04863f100d59b3eb688a11f95b0ae60-Abstract.html"},{"key":"6402_CR4","unstructured":"Lipton ZC, Kale DC, Elkan C, Wetzel RC (2016) Learning to diagnose with LSTM recurrent neural networks. In: Bengio, Y, LeCun, Y (eds) 4th International Conference Track Proceedings on Learning Representations, ICLR 2016, San Juan, Puerto Rico. http:\/\/arxiv.org\/abs\/1511.03677"},{"key":"6402_CR5","doi-asserted-by":"publisher","unstructured":"Zhou Z, Liu G (2022) RoMFAC: a robust mean-field actor-critic reinforcement learning against adversarial perturbations on states. CoRR abs\/2205.07229 https:\/\/doi.org\/10.48550\/ARXIV.2205.07229 2205.07229","DOI":"10.48550\/ARXIV.2205.07229"},{"key":"6402_CR6","unstructured":"Hein M, Andriushchenko M (2017) Formal guarantees on the robustness of a classifier against adversarial manipulation. In: Guyon I, Luxburg U, Bengio S, Wallach HM, Fergus R, Vishwanathan SVN, Garnett R (eds) Advances in Neural Information Processing Systems 30: Annual Conference on Neural Information Processing Systems 2017, Long Beach, CA, USA, pp 2266\u20132276. https:\/\/proceedings.neurips.cc\/paper\/2017\/hash\/e077e1a544eec4f0307cf5c3c721d944-Abstract.html"},{"key":"6402_CR7","unstructured":"Weng T, Zhang H, Chen H, Song Z, Hsieh C, Daniel L, Boning DS, Dhillon IS (2018) Towards fast computation of certified robustness for ReLU networks. In: Dy JG, Krause A (eds) Proceedings of the 35th International Conference on Machine Learning, ICML 2018, Stockholmsm\u00e4ssan, Stockholm, Sweden, vol 80, pp 5273\u20135282. http:\/\/proceedings.mlr.press\/v80\/weng18a.html"},{"key":"6402_CR8","doi-asserted-by":"publisher","unstructured":"Carlini N, Wagner DA (2017) Towards evaluating the robustness of neural networks. In: 2017 IEEE Symposium on Security and Privacy, SP 2017, San Jose, CA, USA, pp 39\u201357. https:\/\/doi.org\/10.1109\/SP.2017.49","DOI":"10.1109\/SP.2017.49"},{"key":"6402_CR9","unstructured":"Cohen J, Rosenfeld E, Kolter JZ (2019) Certified adversarial robustness via randomized smoothing. In: Chaudhuri K, Salakhutdinov R (eds) Proceedings of the 36th International Conference on Machine Learning, ICML 2019, Long Beach, California, USA, vol 97, pp 1310\u20131320. http:\/\/proceedings.mlr.press\/v97\/cohen19c.html"},{"key":"6402_CR10","doi-asserted-by":"publisher","unstructured":"L\u00e9cuyer M, Atlidakis V, Geambasu R, Hsu D, Jana S (2019) Certified Robustness to Adversarial Examples with Differential Privacy. In: 2019 IEEE Symposium on Security and Privacy, SP 2019, San Francisco, CA, USA, pp 656\u2013672. https:\/\/doi.org\/10.1109\/SP.2019.00044","DOI":"10.1109\/SP.2019.00044"},{"key":"6402_CR11","unstructured":"Salman H, Yang G, Zhang H, Hsieh C, Zhang P (2019) A convex relaxation barrier to tight robustness verification of neural networks. In: Wallach HM, Larochelle H, Beygelzimer A, d\u2019Alch\u00e9-Buc F, Fox EB, Garnett R (eds) Advances in Neural Information Processing Systems 32: Annual Conference on Neural Information Processing Systems 2019, NeurIPS 2019, Vancouver, BC, Canada, pp 9832\u20139842. https:\/\/proceedings.neurips.cc\/paper\/2019\/hash\/246a3c5544feb054f3ea718f61adfa16-Abstract.html"},{"issue":"1","key":"6402_CR12","doi-asserted-by":"publisher","first-page":"3","DOI":"10.1007\/S10107-020-01474-5","volume":"183","author":"R Anderson","year":"2020","unstructured":"Anderson R, Huchette J, Ma W, Tjandraatmadja C, Vielma JP (2020) Strong mixed-integer programming formulations for trained neural networks. Math. Program. 183(1):3\u201339. https:\/\/doi.org\/10.1007\/S10107-020-01474-5","journal-title":"Math. Program."},{"key":"6402_CR13","doi-asserted-by":"publisher","unstructured":"Zhang Y, Zhao Z, Chen G, Song F, Zhang M, Chen T, Sun J (2022) QVIP: an ILP-based formal verification approach for quantized neural networks. In: 37th IEEE\/ACM International Conference on Automated Software Engineering, ASE 2022, Rochester, MI, USA, pp 82\u201318213. https:\/\/doi.org\/10.1145\/3551349.3556916","DOI":"10.1145\/3551349.3556916"},{"key":"6402_CR14","first-page":"42","volume":"21","author":"R Bunel","year":"2020","unstructured":"Bunel R, Lu J, Turkaslan I, Torr PHS, Kohli P, Kumar MP (2020) Branch and bound for piecewise linear neural network verification. J. Mach. Learn. Res. 21:42\u201314239","journal-title":"J. Mach. Learn. Res."},{"key":"6402_CR15","unstructured":"Lu J, Kumar MP (2020) Neural network branching for neural network verification. In: 8th International Conference on Learning Representations, ICLR 2020, Addis Ababa, Ethiopia. https:\/\/openreview.net\/forum?id=B1evfa4tPB"},{"key":"6402_CR16","unstructured":"Palma AD, Behl HS, Bunel R, Torr PHS, Kumar MP (2021) Scaling the convex barrier with active sets. In: 9th International Conference on Learning Representations, ICLR 2021, Virtual Event, Austria. https:\/\/openreview.net\/forum?id=uQfOy7LrlTR"},{"key":"6402_CR17","unstructured":"Tjeng V, Xiao KY, Tedrake R (2019) Evaluating robustness of neural networks with mixed integer programming. In: 7th International Conference on Learning Representations, ICLR 2019, New Orleans, LA, USA. https:\/\/openreview.net\/forum?id=HyGIdiRqtm"},{"key":"6402_CR18","unstructured":"Wang S, Zhang H, Xu K, Lin X, Jana S, Hsieh C, Kolter JZ (2021) Beta-CROWN: efficient bound propagation with per-neuron split constraints for neural network robustness verification. In: Ranzato M, Beygelzimer A, Dauphin YN, Liang P, Vaughan JW (eds) Advances in Neural Information Processing Systems 34: Annual Conference on Neural Information Processing Systems 2021, NeurIPS 2021, Virtual, pp 29909\u201329921. https:\/\/proceedings.neurips.cc\/paper\/2021\/hash\/fac7fead96dafceaf80c1daffeae82a4-Abstract.html"},{"key":"6402_CR19","unstructured":"Xu K, Zhang H, Wang S, Wang Y, Jana S, Lin X, Hsieh C (2021) Fast and complete: enabling complete neural network verification with rapid and massively parallel incomplete verifiers. In: 9th International Conference on Learning Representations, ICLR 2021, Virtual Event, Austria. https:\/\/openreview.net\/forum?id=nVZtXBI6LNn"},{"key":"6402_CR20","doi-asserted-by":"publisher","unstructured":"Gowal S, Dvijotham K, Stanforth R, Bunel R, Qin C, Uesato J, Arandjelovic R, Mann TA, Kohli P (2019) Scalable verified training for provably robust image classification. In: 2019 IEEE\/CVF International Conference on Computer Vision, ICCV 2019, Seoul, Korea (South), pp 4841\u20134850. https:\/\/doi.org\/10.1109\/ICCV.2019.00494","DOI":"10.1109\/ICCV.2019.00494"},{"key":"6402_CR21","unstructured":"Mirman M, Gehr T, Vechev MT (2018) Differentiable abstract interpretation for provably robust neural networks. In: Dy JG, Krause A (eds) Proceedings of the 35th International Conference on Machine Learning, ICML 2018, Stockholmsm\u00e4ssan, Stockholm, Sweden, vol 80, pp 3575\u20133583. http:\/\/proceedings.mlr.press\/v80\/mirman18b.html"},{"key":"6402_CR22","unstructured":"M\u00fcller C, Singh G, P\u00fcschel M, Vechev MT (2020) Neural network robustness verification on GPUs. CoRR abs\/2007.10868"},{"key":"6402_CR23","unstructured":"Singh G, Gehr T, Mirman M, P\u00fcschel M, Vechev MT (2018) Fast and effective robustness certification. In: Bengio S, Wallach HM, Larochelle H, Grauman K, Cesa-Bianchi N, Garnett R (eds) Advances in Neural Information Processing Systems 31: Annual Conference on Neural Information Processing Systems 2018, NeurIPS 2018, Montr\u00e9al, Canada, pp 10825\u201310836. https:\/\/proceedings.neurips.cc\/paper\/2018\/hash\/f2f446980d8e971ef3da97af089481c3-Abstract.html"},{"key":"6402_CR24","doi-asserted-by":"publisher","unstructured":"Singh G, Gehr T, P\u00fcschel M, Vechev MT (2019) An abstract domain for certifying neural networks. In: Proceedings on ACM Programing Language 3(POPL), pp 41\u201314130 https:\/\/doi.org\/10.1145\/3290354","DOI":"10.1145\/3290354"},{"key":"6402_CR25","unstructured":"Wang S, Pei K, Whitehouse J, Yang J, Jana S (2018) Efficient formal safety analysis of neural networks. In: Bengio S, Wallach HM, Larochelle H, Grauman K, Cesa-Bianchi N, Garnett R (eds) Advances in Neural Information Processing Systems 31: Annual Conference on Neural Information Processing Systems 2018, NeurIPS 2018, Montr\u00e9al, Canada, pp 6369\u20136379. https:\/\/proceedings.neurips.cc\/paper\/2018\/hash\/2ecd2bd94734e5dd392d8678bc64cdab-Abstract.html"},{"key":"6402_CR26","unstructured":"Zhang H, Weng T, Chen P, Hsieh C, Daniel L (2018) Efficient neural network robustness certification with general activation functions. In: Bengio S, Wallach HM, Larochelle H, Grauman K, Cesa-Bianchi N, Garnett R (eds) Advances in Neural Information Processing Systems 31: Annual Conference on Neural Information Processing Systems 2018, NeurIPS 2018, Montr\u00e9al, Canada, pp 4944\u20134953. https:\/\/proceedings.neurips.cc\/paper\/2018\/hash\/d04863f100d59b3eb688a11f95b0ae60-Abstract.html"},{"key":"6402_CR27","first-page":"190","volume":"45","author":"S Ji","year":"2022","unstructured":"Ji S, Du T, Deng S, Cheng P, Shi J, Yang M, Li B (2022) Robustness certification research on deep learning models: a survey. Chin J Comput 45:190\u2013206","journal-title":"Chin J Comput"},{"key":"6402_CR28","first-page":"1727","volume":"58","author":"H Zheng","year":"2021","unstructured":"Zheng H, Chen J, Zhang Y, Zhang X, Ge C, Liu Z, Ouyang Y, Ji S (2021) Survey of adversarial attack defense and robustness analysis for natural language processing. J Comput Res Develop 58:1727\u20131750","journal-title":"J Comput Res Develop"},{"key":"6402_CR29","unstructured":"Zhang H, Chen H, Xiao C, Gowal S, Stanforth R, Li B, Boning DS, Hsieh C (2020) Towards stable and efficient training of verifiably robust neural networks"},{"key":"6402_CR30","first-page":"5283","volume":"80","author":"E Wong","year":"2018","unstructured":"Wong E, Kolter JZ (2018) Provable defenses against adversarial examples via the convex outer adversarial polytope. Int Conf Mach Learn 80:5283\u20135292","journal-title":"Int Conf Mach Learn"},{"key":"6402_CR31","doi-asserted-by":"publisher","unstructured":"Bator M (2015) Dataset for sensorless drive diagnosis. https:\/\/doi.org\/10.24432\/C5VP5F","DOI":"10.24432\/C5VP5F"},{"issue":"11","key":"6402_CR32","doi-asserted-by":"publisher","first-page":"2278","DOI":"10.1109\/5.726791","volume":"86","author":"Yann LeCun","year":"1998","unstructured":"LeCun Yann (1998) Bottou, L\u00e9on, Bengio, Yoshua, Haffner, Patrick: Gradient-based learning applied to document recognition. Proc IEEE 86(11):2278\u20132324","journal-title":"Proc IEEE"}],"container-title":["The Journal of Supercomputing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11227-024-06402-4.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s11227-024-06402-4\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11227-024-06402-4.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,9,19]],"date-time":"2024-09-19T20:40:31Z","timestamp":1726778431000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s11227-024-06402-4"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,8,15]]},"references-count":32,"journal-issue":{"issue":"18","published-print":{"date-parts":[[2024,12]]}},"alternative-id":["6402"],"URL":"https:\/\/doi.org\/10.1007\/s11227-024-06402-4","relation":{},"ISSN":["0920-8542","1573-0484"],"issn-type":[{"type":"print","value":"0920-8542"},{"type":"electronic","value":"1573-0484"}],"subject":[],"published":{"date-parts":[[2024,8,15]]},"assertion":[{"value":"30 July 2024","order":1,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"15 August 2024","order":2,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}]}}