{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,21]],"date-time":"2026-02-21T18:14:19Z","timestamp":1771697659794,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":89,"publisher":"ACM","license":[{"start":{"date-parts":[[2022,10,10]],"date-time":"2022-10-10T00:00:00Z","timestamp":1665360000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc\/4.0\/"}],"funder":[{"name":"An oversea grant from the State Key Laboratory of Novel Software Technology, Nanjing University","award":["KFKT2018A16"],"award-info":[{"award-number":["KFKT2018A16"]}]},{"name":"Ministry of Education, Singapore under its Academic Research Fund Tier 3","award":["MOET32020-0004"],"award-info":[{"award-number":["MOET32020-0004"]}]},{"name":"National Key Research Program","award":["2020AAA0107800"],"award-info":[{"award-number":["2020AAA0107800"]}]},{"name":"Birkbeck BEI School Project","award":["EFFECT"],"award-info":[{"award-number":["EFFECT"]}]},{"name":"National Natural Science Foundation of China (NSFC)","award":["No.62072309 and No.61872340"],"award-info":[{"award-number":["No.62072309 and No.61872340"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2022,10,10]]},"DOI":"10.1145\/3551349.3556916","type":"proceedings-article","created":{"date-parts":[[2023,1,5]],"date-time":"2023-01-05T20:43:54Z","timestamp":1672951434000},"page":"1-13","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":20,"title":["QVIP: An ILP-based Formal Verification Approach for Quantized Neural Networks"],"prefix":"10.1145","author":[{"given":"Yedi","family":"Zhang","sequence":"first","affiliation":[{"name":"ShanghaiTech University, China and Singapore Management University, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhe","family":"Zhao","sequence":"additional","affiliation":[{"name":"ShanghaiTech University, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Guangke","family":"Chen","sequence":"additional","affiliation":[{"name":"ShanghaiTech University, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Fu","family":"Song","sequence":"additional","affiliation":[{"name":"ShanghaiTech University, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Min","family":"Zhang","sequence":"additional","affiliation":[{"name":"East China Normal University, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Taolue","family":"Chen","sequence":"additional","affiliation":[{"name":"Birkbeck, University of London, United Kingdom"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jun","family":"Sun","sequence":"additional","affiliation":[{"name":"Singapore Management University, Singapore"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2023,1,5]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"crossref","unstructured":"Guy Amir Haoze Wu Clark\u00a0W. Barrett and Guy Katz. 2020. An SMT-Based Approach for Verifying Binarized Neural Networks. CoRR abs\/2011.02948(2020).","DOI":"10.26226\/morressier.604907f41a80aac83ca25cda"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/3314221.3314614"},{"key":"e_1_3_2_1_3_1","unstructured":"Apollo. 2018. An open reliable and secure software platform for autonomous driving systems. http:\/\/apollo.auto."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-59152-6_5"},{"key":"e_1_3_2_1_5_1","volume-title":"2021 IEEE\/ACM 43rd International Conference on Software Engineering. IEEE, 312\u2013323","author":"Baluta Teodora","year":"2021","unstructured":"Teodora Baluta, Zheng\u00a0Leong Chua, Kuldeep\u00a0S Meel, and Prateek Saxena. 2021. Scalable quantitative verification for deep neural networks. In 2021 IEEE\/ACM 43rd International Conference on Software Engineering. IEEE, 312\u2013323."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354245"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-51074-9_2"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2021.3088661"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00004"},{"key":"e_1_3_2_1_11_1","unstructured":"Guangke Chen Zhe Zhao Fu Song Sen Chen Lingling Fan and Yang Liu. 2021. SEC4SR: a security analysis platform for speaker recognition. arXiv preprint arXiv:2109.01766(2021)."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2022.3189397"},{"key":"e_1_3_2_1_13_1","unstructured":"Guangke Chen Zhe Zhao Fu Song Sen Chen Lingling Fan Feng Wang and Jiashui Wang. 2022. Towards Understanding and Mitigating Audio Adversarial Examples for Speaker Recognition. arXiv preprint arXiv:2206.03393(2022)."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-68167-2_18"},{"key":"e_1_3_2_1_15_1","volume-title":"Proceedings of the AAAI Spring Symposium on Verification of Neural Networks.","author":"Choi Arthur","year":"2019","unstructured":"Arthur Choi, Weijia Shi, Andy Shih, and Adnan Darwiche. 2019. Compiling Neural Networks into Tractable Boolean Circuits. In Proceedings of the AAAI Spring Symposium on Verification of Neural Networks."},{"key":"e_1_3_2_1_16_1","volume-title":"Proceedings of Annual Conference on Neural Information Processing Systems. 2852\u20132860","author":"Ciresan C.","year":"2012","unstructured":"Dan\u00a0C. Ciresan, Alessandro Giusti, Luca\u00a0Maria Gambardella, and J\u00fcrgen Schmidhuber. 2012. Deep Neural Networks Segment Neuronal Membranes in Electron Microscopy Images. In Proceedings of Annual Conference on Neural Information Processing Systems. 2852\u20132860."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/512950.512973"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"crossref","unstructured":"Souradeep Dutta Susmit Jha Sriram Sanakaranarayanan and Ashish Tiwari. 2017. Output range analysis for deep neural networks. arXiv preprint arXiv:1709.09130(2017).","DOI":"10.1007\/978-3-319-77935-5_9"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-68167-2_19"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-53288-8_3"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00175"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10601-018-9285-6"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00058"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-45237-7_5"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-55754-6_5"},{"key":"e_1_3_2_1_26_1","volume-title":"Proceedings of the 3th International Conference on Learning Representations.","author":"Goodfellow Ian","year":"2015","unstructured":"Ian Goodfellow, Jonathon Shlens, and Christian Szegedy. 2015. Explaining and harnessing adversarial examples. In Proceedings of the 3th International Conference on Learning Representations."},{"key":"e_1_3_2_1_27_1","unstructured":"Google. 2022. Tensorflow Lite.https:\/\/www.tensorflow.org\/lite."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/ISSRE52982.2021.00044"},{"key":"e_1_3_2_1_29_1","unstructured":"Gurobi. 2018. A most powerful mathematical optimization solver. https:\/\/www.gurobi.com\/."},{"key":"e_1_3_2_1_30_1","volume-title":"Proceedings of the 4th International Conference on Learning Representations.","author":"Han Song","year":"2016","unstructured":"Song Han, Huizi Mao, and William\u00a0J. Dally. 2016. Deep Compression: Compressing Deep Neural Network with Pruning, Trained Quantization and Huffman Coding. In Proceedings of the 4th International Conference on Learning Representations."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"crossref","unstructured":"Thomas\u00a0A. Henzinger Mathias Lechner and Dorde Zikelic. 2021. Scalable Verification of Quantized Neural Networks. In Proceedings of the 35th Conference on Artificial Intelligence the 33th Conference on Innovative Applications of Artificial Intelligence the 11th Symposium on Educational Advances in Artificial Intelligence. 3787\u20133795.","DOI":"10.1609\/aaai.v35i5.16496"},{"key":"e_1_3_2_1_32_1","unstructured":"Thomas\u00a0A. Henzinger Mathias Lechner and Dorde Zikelic. 2021. Scalable Verification of Quantized Neural Networks. https:\/\/github.com\/mlech26l\/qnn_robustness_benchmarks."},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2012.2205597"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-63387-9_1"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00286"},{"key":"e_1_3_2_1_36_1","volume-title":"Proceedings of the Annual Conference on Neural Information Processing Systems.","author":"Jia Kai","year":"2020","unstructured":"Kai Jia and Martin Rinard. 2020. Efficient Exact Verification of Binarized Neural Networks. In Proceedings of the Annual Conference on Neural Information Processing Systems."},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2014.223"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-63387-9_5"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-25540-4_26"},{"key":"e_1_3_2_1_40_1","volume-title":"Proceedings of International Conference on Learning Representations.","author":"Kurakin Alexey","year":"2017","unstructured":"Alexey Kurakin, Ian Goodfellow, and Samy Bengio. 2017. Adversarial examples in the physical world. In Proceedings of International Conference on Learning Representations."},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/2491411.2491452"},{"key":"e_1_3_2_1_42_1","unstructured":"Yann LeCun and Corinna Cortes. 2010. MNIST handwritten digit database."},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-32304-2_15"},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1145\/3368089.3417918"},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1145\/3510003.3510143"},{"key":"e_1_3_2_1_46_1","unstructured":"Jiaxiang Liu Yunhan Xing Xiaomu Shi Fu Song Zhiwu Xu and Zhong Ming. 2022. Abstraction and Refinement: Towards Scalable and Exact Verification of Neural Networks. CoRR abs\/2207.00759(2022)."},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1007\/s11390-020-0546-7"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1145\/3238147.3238202"},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1145\/3236024.3236082"},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-85037-1_8"},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"crossref","unstructured":"Ramon\u00a0E Moore R\u00a0Baker Kearfott and Michael\u00a0J Cloud. 2009. Introduction to interval analysis. Vol.\u00a0110. Siam.","DOI":"10.1137\/1.9780898717716"},{"key":"e_1_3_2_1_52_1","unstructured":"Markus Nagel Marios Fournarakis Rana\u00a0Ali Amjad Yelysei Bondarenko Mart van Baalen and Tijmen Blankevoort. 2021. A white paper on neural network quantization. arXiv preprint arXiv:2106.08295(2021)."},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.5555\/1103348.1709476"},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v32i1.12206"},{"key":"e_1_3_2_1_55_1","volume-title":"Proceedings of the 8th International Conference on Learning Representations.","author":"Narodytska Nina","year":"2020","unstructured":"Nina Narodytska, Hongce Zhang, Aarti Gupta, and Toby Walsh. 2020. In Search for a SAT-friendly Binarized Neural Network Architecture. In Proceedings of the 8th International Conference on Learning Representations."},{"key":"e_1_3_2_1_56_1","volume-title":"Proceedings of the 36th International Conference on Machine Learning. 4901\u20134911","author":"Odena Augustus","year":"2019","unstructured":"Augustus Odena, Catherine Olsson, David\u00a0G. Andersen, and Ian\u00a0J. Goodfellow. 2019. TensorFuzz: Debugging Neural Networks with Coverage-Guided Fuzzing. In Proceedings of the 36th International Conference on Machine Learning. 4901\u20134911."},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"crossref","unstructured":"Matan Ostrovsky Clark\u00a0W. Barrett and Guy Katz. 2022. An Abstraction-Refinement Approach to Verifying Convolutional Neural Networks. CoRR abs\/2201.01978(2022).","DOI":"10.1007\/978-3-031-19992-9_25"},{"key":"e_1_3_2_1_58_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.36"},{"key":"e_1_3_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.1145\/3377811.3380337"},{"key":"e_1_3_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.1145\/3324884.3416560"},{"key":"e_1_3_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.1145\/3132747.3132785"},{"key":"e_1_3_2_1_62_1","doi-asserted-by":"publisher","DOI":"10.3115\/v1\/D14-1162"},{"key":"e_1_3_2_1_63_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-14295-6_24"},{"key":"e_1_3_2_1_64_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-24258-9_25"},{"key":"e_1_3_2_1_65_1","volume-title":"Proceedings of the AAAI Spring Symposium on Verification of Neural Networks.","author":"Shih Andy","year":"2019","unstructured":"Andy Shih, Adnan Darwiche, and Arthur Choi. 2019. Verifying binarized neural networks by local automaton learning. In Proceedings of the AAAI Spring Symposium on Verification of Neural Networks."},{"key":"e_1_3_2_1_66_1","first-page":"230","article-title":"To compress or not to compress: Understanding the interactions between adversarial attacks and neural network compression","volume":"1","author":"Shumailov Ilia","year":"2019","unstructured":"Ilia Shumailov, Yiren Zhao, Robert Mullins, and Ross Anderson. 2019. To compress or not to compress: Understanding the interactions between adversarial attacks and neural network compression. Proceedings of Machine Learning and Systems 1 (2019), 230\u2013240.","journal-title":"Proceedings of Machine Learning and Systems"},{"key":"e_1_3_2_1_67_1","volume-title":"Proceedings of the Annual Conference on Neural Information Processing Systems. 15072\u201315083","author":"Singh Gagandeep","year":"2019","unstructured":"Gagandeep Singh, Rupanshu Ganvir, Markus P\u00fcschel, and Martin\u00a0T. Vechev. 2019. Beyond the Single Neuron Convex Barrier for Neural Network Certification. In Proceedings of the Annual Conference on Neural Information Processing Systems. 15072\u201315083."},{"key":"e_1_3_2_1_68_1","volume-title":"Proceedings of the Annual Conference on Neural Information Processing Systems. 10825\u201310836","author":"Singh Gagandeep","year":"2018","unstructured":"Gagandeep Singh, Timon Gehr, Matthew Mirman, Markus P\u00fcschel, and Martin\u00a0T. Vechev. 2018. Fast and Effective Robustness Certification. In Proceedings of the Annual Conference on Neural Information Processing Systems. 10825\u201310836."},{"key":"e_1_3_2_1_69_1","doi-asserted-by":"publisher","DOI":"10.1145\/3290354"},{"key":"e_1_3_2_1_70_1","doi-asserted-by":"publisher","DOI":"10.1002\/int.22510"},{"key":"e_1_3_2_1_71_1","doi-asserted-by":"publisher","DOI":"10.1145\/3238147.3238172"},{"key":"e_1_3_2_1_72_1","volume-title":"Proceedings of International Conference on Learning Representations.","author":"Szegedy Christian","year":"2014","unstructured":"Christian Szegedy, Wojciech Zaremba, Ilya Sutskever, Joan Bruna, Dumitru Erhan, Ian Goodfellow, and Rob Fergus. 2014. Intriguing properties of neural networks. In Proceedings of International Conference on Learning Representations."},{"key":"e_1_3_2_1_73_1","volume-title":"Proceedings of the 36th International Conference on Machine Learning. 6105\u20136114","author":"Tan Mingxing","year":"2019","unstructured":"Mingxing Tan and Quoc\u00a0V. Le. 2019. EfficientNet: Rethinking Model Scaling for Convolutional Neural Networks. In Proceedings of the 36th International Conference on Machine Learning. 6105\u20136114."},{"key":"e_1_3_2_1_74_1","doi-asserted-by":"publisher","DOI":"10.1145\/3180155.3180220"},{"key":"e_1_3_2_1_75_1","volume-title":"Proceedings of the 7th International Conference on Learning Representations.","author":"Tjeng Vincent","year":"2019","unstructured":"Vincent Tjeng, Kai Xiao, and Russ Tedrake. 2019. Evaluating Robustness Of Neural Networks With Mixed Integer Programming. In Proceedings of the 7th International Conference on Learning Representations."},{"key":"e_1_3_2_1_76_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-53288-8_2"},{"key":"e_1_3_2_1_77_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-30942-8_39"},{"key":"e_1_3_2_1_78_1","volume-title":"Proceedings of the 27th USENIX Security Symposium. 1599\u20131614","author":"Wang Shiqi","year":"2018","unstructured":"Shiqi Wang, Kexin Pei, Justin Whitehouse, Junfeng Yang, and Suman Jana. 2018. Formal Security Analysis of Neural Networks using Symbolic Intervals. In Proceedings of the 27th USENIX Security Symposium. 1599\u20131614."},{"key":"e_1_3_2_1_79_1","volume-title":"Proceedings of the 7th International Conference on Learning Representations.","author":"Webb Stefan","year":"2019","unstructured":"Stefan Webb, Tom Rainforth, Yee\u00a0Whye Teh, and M.\u00a0Pawan Kumar. 2019. A Statistical Approach to Assessing Neural Network Robustness. In Proceedings of the 7th International Conference on Learning Representations."},{"key":"e_1_3_2_1_80_1","unstructured":"WikiChip. Accessed April 30 2022. FSD Chip - Tesla. https:\/\/en.wikichip.org\/wiki\/tesla_(car_company)\/fsd_chip."},{"key":"e_1_3_2_1_81_1","unstructured":"Han Xiao Kashif Rasul and Roland Vollgraf. 2017. Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithms. CoRR abs\/1708.07747(2017)."},{"key":"e_1_3_2_1_82_1","doi-asserted-by":"publisher","DOI":"10.1145\/3293882.3330579"},{"key":"e_1_3_2_1_83_1","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2019\/800"},{"key":"e_1_3_2_1_84_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-72016-2_21"},{"key":"e_1_3_2_1_85_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2019.2962027"},{"key":"e_1_3_2_1_86_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-81685-8_8"},{"key":"e_1_3_2_1_87_1","unstructured":"Yedi Zhang Zhe Zhao Guangke Chen Fu Song Min Zhang Taolue Chen and Jun Sun. 2022. QVIP Data. https:\/\/github.com\/QVIP22\/Data."},{"key":"e_1_3_2_1_88_1","doi-asserted-by":"publisher","DOI":"10.1145\/3460319.3464822"},{"key":"e_1_3_2_1_89_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-22308-2_20"}],"event":{"name":"ASE '22: 37th IEEE\/ACM International Conference on Automated Software Engineering","location":"Rochester MI USA","acronym":"ASE '22"},"container-title":["Proceedings of the 37th IEEE\/ACM International Conference on Automated Software Engineering"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3551349.3556916","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3551349.3556916","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T08:37:13Z","timestamp":1755851833000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3551349.3556916"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,10,10]]},"references-count":89,"alternative-id":["10.1145\/3551349.3556916","10.1145\/3551349"],"URL":"https:\/\/doi.org\/10.1145\/3551349.3556916","relation":{},"subject":[],"published":{"date-parts":[[2022,10,10]]},"assertion":[{"value":"2023-01-05","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}