Neural Networks, Secure by Construction: An Exploration of Refinement Types
We present StarChild and Lazuli, two libraries which leverage refinement types to verify neural networks, implemented in F∗ and Liquid Haskell. Refinement types are types augmented, or refined, with assertions about values of that type, e.g., “integers greater than five”, which are checked by an SMT solver. Crucially, these assertions are written in the language itself. A user of our library can refine the type of neural networks, e.g., “neural networks which are robust against adversarial attacks”, and expect F∗ to handle the verification of this claim for any specific network, without having to change the representation of the network, or even having to learn about SMT solvers. Our initial experiments indicate that our approach could greatly reduce the burden of verifying neural networks. Unfortunately, they also show that SMT solvers do not scale to the sizes required for neural network verification.
Mon 30 NovDisplayed time zone: Osaka, Sapporo, Tokyo change
17:30 - 19:30 | |||
17:30 30mTalk | Syntactically Restricting Bounded Polymorphism for Decidable Subtyping Research Papers Julian Mackay Victoria University of Wellington, Alex Potanin Victoria University of Wellington, Jonathan Aldrich Carnegie Mellon University, Lindsay Groves Victoria University of Wellington | ||
18:00 30mTalk | A New Refinement Type System for Automated nu-HFLZ Validity Checking Research Papers Hiroyuki Katsura The University of Tokyo, Naoki Iwayama University of Tokyo, Japan, Naoki Kobayashi University of Tokyo, Japan, Takeshi Tsukada Chiba University, Japan | ||
18:30 30mTalk | Behavioural Types for Memory and Method Safety in a Core Object-Oriented Language Research Papers Mario Bravetti Università di Bologna, Adrian Francalanza University of Malta, Iaroslav Golovanov Department of Computer Science, Aalborg University, Hans Hüttel Department of Computer Science, Aalborg University, Mathias Steen Jakobsen Department of Computer Science, Aalborg University, Denmark, Mikkel Klinke Kettunen Department of Computer Science, Aalborg University, Denmark, António Ravara Department of Informatics, Faculty of Sciences and Technology, NOVA University of Lisbon and NOVA LINCS | ||
19:00 30mTalk | Neural Networks, Secure by Construction: An Exploration of Refinement Types Research Papers Wen Kokke University of Edinburgh, Ekaterina Komendantskaya Heriot-Watt University, UK, Daniel Kienitz Heriot-Watt University, David Aspinall University of Edinburgh, Robert Atkey University of Strathclyde |