Verification of Recurrent Neural Networks for Cognitive Tasks via Reachability Analysis

Recurrent Neural Networks (RNNs) are one of the most successful neural network architectures that deals with temporal sequences, e.g. speech and text recognition. Recently, RNNs have been shown to be useful in cognitive neuroscience as a model of decisionmaking. RNNs can be trained to solve the same behavioral tasks performed by humans and other animals in decision-making experiments, allowing for a direct comparison between networks and experimental subjects. Analysis of RNNs is expected to be a simpler problem than the analysis of neural activity. However, in practice, reasoning about an RNN’s behaviour is a challenging problem. In this work, we take the formal verification approach to the analysis of RNNs. We make two main contributions. First, we analyse the cognitive domain and formally define a set of useful properties to analyse for a popular experimental task. Second, we employ and adapt well-known verification techniques to our focus domain, i.e. a polytope propagation, an invariant detection and a counter-example guided abstraction refinement, to perform verification efficiently. Our experiments show that our techniques can effectively solve classes of benchmarks that are challenging for the state-of-the-art verification tool.

[1]  Russ Tedrake,et al.  Evaluating Robustness of Neural Networks with Mixed Integer Programming , 2017, ICLR.

[2]  Wen-Chuan Lee,et al.  NIC: Detecting Adversarial Samples with Neural Network Invariant Checking , 2019, NDSS.

[3]  Matthew T. Kaufman,et al.  A neural network that finds a naturalistic solution for the production of muscle activity , 2015, Nature Neuroscience.

[4]  Roberto Bagnara,et al.  Widening operators for powerset domains , 2005, International Journal on Software Tools for Technology Transfer.

[5]  Nikolaj Bjørner,et al.  Z3: An Efficient SMT Solver , 2008, TACAS.

[6]  Aleksander Madry,et al.  Training for Faster Adversarial Robustness Verification via Inducing ReLU Stability , 2018, ICLR.

[7]  Cho-Jui Hsieh,et al.  Efficient Neural Network Robustness Certification with General Activation Functions , 2018, NeurIPS.

[8]  M. Shadlen,et al.  Response of Neurons in the Lateral Intraparietal Area during a Combined Visual Discrimination Reaction Time Task , 2002, The Journal of Neuroscience.

[9]  Xue Liu,et al.  Verification of Recurrent Neural Networks Through Rule Extraction , 2018, ArXiv.

[10]  Swarat Chaudhuri,et al.  AI2: Safety and Robustness Certification of Neural Networks with Abstract Interpretation , 2018, 2018 IEEE Symposium on Security and Privacy (SP).

[11]  Inderjit S. Dhillon,et al.  Towards Fast Computation of Certified Robustness for ReLU Networks , 2018, ICML.

[12]  Alexander C. Huk,et al.  Discrete stepping and nonlinear ramping dynamics underlie spiking responses of LIP neurons during decision-making , 2018 .

[13]  Paul Cisek,et al.  Decision making by urgency gating: theory and experimental support. , 2012, Journal of neurophysiology.

[14]  Marsha Chechik,et al.  Craig Interpretation , 2012, SAS.

[15]  Roberto Bagnara,et al.  The Parma Polyhedra Library: Toward a complete set of numerical abstractions for the analysis and verification of hardware and software systems , 2006, Sci. Comput. Program..

[16]  Alessio Lomuscio,et al.  An approach to reachability analysis for feed-forward ReLU neural networks , 2017, ArXiv.

[17]  Timon Gehr,et al.  An abstract domain for certifying neural networks , 2019, Proc. ACM Program. Lang..

[18]  Sagar Chaki,et al.  SMT-based model checking for recursive programs , 2014, Formal Methods in System Design.

[19]  Devika Narain,et al.  Flexible sensorimotor computations through rapid reconfiguration of cortical dynamics , 2018 .

[20]  Michael L. Waskom,et al.  Decision Making through Integration of Sensory Evidence at Prolonged Timescales , 2018, Current Biology.

[21]  W. Newsome,et al.  Context-dependent computation by recurrent dynamics in prefrontal cortex , 2013, Nature.

[22]  Ankur Taly,et al.  Finding Invariants in Deep Neural Networks , 2019, ArXiv.

[23]  Mykel J. Kochenderfer,et al.  Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networks , 2017, CAV.

[24]  Mykel J. Kochenderfer,et al.  The Marabou Framework for Verification and Analysis of Deep Neural Networks , 2019, CAV.

[25]  Matteo Fischetti,et al.  Deep neural networks and mixed integer linear optimization , 2018, Constraints.

[26]  Xenofon D. Koutsoukos,et al.  Safety Verification of Cyber-Physical Systems with Reinforcement Learning Control , 2019, ACM Trans. Embed. Comput. Syst..

[27]  Xiao-Jing Wang,et al.  Task representations in neural networks trained to perform many cognitive tasks , 2019, Nature Neuroscience.

[28]  Guigang Zhang,et al.  Deep Learning , 2016, Int. J. Semantic Comput..

[29]  Markus Püschel,et al.  Fast polyhedra abstract domain , 2017, POPL.

[30]  William T. Newsome,et al.  Cortical microstimulation influences perceptual judgements of motion direction , 1990, Nature.

[31]  G. C. Shephard,et al.  Convex Polytopes , 1967 .

[32]  Roger Ratcliff,et al.  A Theory of Memory Retrieval. , 1978 .

[33]  Weiming Xiang,et al.  Star-Based Reachability Analysis of Deep Neural Networks , 2019, FM.

[34]  Dmitry Vengertsev,et al.  Recurrent Neural Network Properties and their Verification with Monte Carlo Techniques , 2020, SafeAI@AAAI.

[35]  Scott D. Brown,et al.  Diffusion Decision Model: Current Issues and History , 2016, Trends in Cognitive Sciences.

[36]  Guangyu R. Yang,et al.  Training Excitatory-Inhibitory Recurrent Neural Networks for Cognitive Tasks: A Simple and Flexible Framework , 2016, PLoS Comput. Biol..

[37]  Alessio Lomuscio,et al.  Verification of RNN-Based Neural Agent-Environment Systems , 2019, AAAI.

[38]  J. Gold,et al.  The neural basis of decision making. , 2007, Annual review of neuroscience.

[39]  Matthew Mirman,et al.  Fast and Effective Robustness Certification , 2018, NeurIPS.

[40]  Michael N. Shadlen,et al.  Differentiating between integration and non-integration strategies in perceptual decision making , 2020, bioRxiv.

[41]  Timon Gehr,et al.  Boosting Robustness Certification of Neural Networks , 2018, ICLR.

[42]  Abigail A. Russo,et al.  Motor Cortex Embeds Muscle-like Commands in an Untangled Population Response , 2018, Neuron.

[43]  D. Wolpert,et al.  Changing your mind: a computational mechanism of vacillation , 2009, Nature.