Although neural networks (NNs) with ReLU activation functions have found success in a wide range of applications, their adoption in risk-sensitive settings has been limited by the concerns on robustness and interpretability. Previous works to examine robustness and to improve interpretability partially exploited the piecewise linear function form of ReLU NNs. In this paper, we explore the unique topological structure that ReLU NNs create in the input space, identifying the adjacency among the partitioned local polytopes and developing a traversing algorithm based on this adjacency. Our polytope traversing algorithm can be adapted to verify a wide range of network properties related to robustness and interpretability, providing an unified approach to examine the network behavior. As the traversing algorithm explicitly visits all local polytopes, it returns a clear and full picture of the network behavior within the traversed region. The time and space complexity of the traversing algorithm is determined by the number of a ReLU NN's partitioning hyperplanes passing through the traversing region.
翻译:虽然具有ReLU激活功能的神经网络(NN)在广泛的应用中取得了成功,但在风险敏感环境中的采用却因对稳健性和可解释性的关切而受到限制。先前为检查稳健性和改进可解释性而开展的工作部分地利用了RELU NN的片度线性功能形式。在本文件中,我们探讨了RELU NN在输入空间中创建的独特地形结构,查明了被分割的局部多面顶之间的相邻性,并以此相近为基础开发了一种累进算法。我们的多面穿行算法可以进行调整,以核实与稳健性和可解释性有关的广泛网络属性,为检查网络行为提供统一的方法。随着穿行算法明确访问所有本地多面,它可以追溯出跨入区域内网络行为的清晰和完整的图象。累进算法的时间和空间复杂性取决于ReLU NN的超平流经跨跨跨区域时的分区次数。