下载中心
会议室预定
电子邮箱
【05-28】知行融创论坛：Patch Synthesis for Property Repair of Deep Neural Networks
| 知行融创论坛-实验室月度学术交流 | |
| Speaker: | 迟智名 |
| Time: | 2025年5月28日 |
| Venue: | 中国科学院软件园区5号楼三层 334报告厅 |
| Abstract: | Deep neural networks (DNNs) are prone to various dependability issues, such as adversarial attacks, which hinder their adoption in safety-critical domains. Recently, NN repair techniques have been proposed to address these issues while preserving original performance by locating and modifying guilty neurons and their parameters. However, existing repair approaches are often limited to specific data sets and do not provide theoretical guarantees for the effectiveness of the repairs. To address these limitations, we introduce PATCHPRO, a novel patch-based approach for property-level repair of DNNs, focusing on local robustness. The key idea behind PATCHPRO is to construct patch modules that, when integrated with the original network, provide specialized repairs for all samples within the robustness neighborhood while maintaining the network’s original performance. Our method incorporates formal verification and a heuristic mechanism for allocating patch modules, enabling it to defend against adversarial attacks and generalize to other inputs. PATCHPRO demonstrates superior efficiency, scalability,and repair success rates compared to existing DNN repair methods, i.e., realizing provable property-level repair for 100% cases across multiple high-dimensional datasets. |
| Download | Patch Synthesis for Property Repair of Deep Neural Networks |