Neural Networks (NNs) can provide major empirical performance improvements for closed-loop systems, but they also introduce challenges in formally analyzing those systems' safety properties. In particular, this work focuses on estimating the forward reachable set of \textit{neural feedback loops} (closed-loop systems with NN controllers). Recent work provides bounds on these reachable sets, but the computationally tractable approaches yield overly conservative bounds (thus cannot be used to verify useful properties), and the methods that yield tighter bounds are too intensive for online computation. This work bridges the gap by formulating a convex optimization problem for the reachability analysis of closed-loop systems with NN controllers. While the solutions are less tight than previous (semidefinite program-based) methods, they are substantially faster to compute, and some of those computational time savings can be used to refine the bounds through new input set partitioning techniques, which is shown to dramatically reduce the tightness gap. The new framework is developed for systems with uncertainty (e.g., measurement and process noise) and nonlinearities (e.g., polynomial dynamics), and thus is shown to be applicable to real-world systems. To inform the design of an initial state set when only the target state set is known/specified, a novel algorithm for backward reachability analysis is also provided, which computes the set of states that are guaranteed to lead to the target set. The numerical experiments show that our approach (based on linear relaxations and partitioning) gives a $5\times$ reduction in conservatism in $150\times$ less computation time compared to the state-of-the-art. Furthermore, experiments on quadrotor, 270-state, and polynomial systems demonstrate the method's ability to handle uncertainty sources, high dimensionality, and nonlinear dynamics, respectively.
翻译:神经网络(NNs) 可以为闭路电视系统提供重大实证性能改进, 但是它们也会在正式分析这些系统的安全性能方面带来挑战。 特别是, 这项工作侧重于估算远近可达的一组超文本( textit{ 神经反馈环 ) (由 NNN 控制器提供的闭路系统 ) 。 最近的工作为这些可达的数据集提供了界限, 但计算性可控方法产生过于保守的界限( 无法用于核查有用属性), 产生更紧紧的底线的方法对于在线计算来说过于密集。 这项工作通过对闭路系统的安全性进行正式分析来弥补差距。 虽然解决方案比以往( 缩略图基于 NNNC 的程序) 的方法要窄得多, 但有些计算性节省可以用来通过新输入的分解技术来改善界限, 这显示将大大缩小新基离差。 新的硬度方法是具有不确定性的系统( 例如测量和进程), 测量和流程的精确度 以及非直径的计算系统( 显示初始、 多式的基的系统) 显示一个可应用的精确性、 多式、 多式、 多式、 多式、 多式、 多式的系统显示的系统显示一个可以显示一个初始的系统。