What is decomon? decomon
is a library that allows the derivation of upper and lower bounds
for the predictions of a Tensorflow/Keras neural network with perturbed inputs.
In the current release, these bounds are represented as affine functions with respect to some variable under perturbation.
Previous works that tackled certified robustness with backward propagation relied on forward upper and lower bounds. In decomon
,
we explored various ways to tighten forward upper and lower bounds, while remaining backpropagation-compatible
thanks to symbolic optimization.
Our algorithm improves existing forward linear relaxation algorithms for general Keras-based neural networks without manual derivation. Our implementation is also automatically differentiable. So far we support interval bound propagation, forward mode perturbation, backward mode perturbation as well as hybrid approaches.
decomon
is compatible with a wider range of perturbation: boxes,
We believe that decomon is a complementary tool to existing libraries for the certification of neural networks.
Since we rely on Tensorflow and not Pytorch, we are opening up the possibility for a new community to formally assess the robustness of their networks, without worrying about the technicality of the implementation. In this way, we hope to promote the formal certification of neural networks into safety critical systems.
Quick version:
pip install decomon
For more details, see the online documentation.
You can see how to get certified lower and upper bounds for a basic Keras neural network in the Getting started section of the online documentation.
The latest documentation is available online.
Some educational notebooks are available in tutorials/
folder.
Links to launch them online with colab or binder are provided in the
Tutorials section of the online documentation.
We welcome any contribution. See more about how to contribute in the online documentation.