
Premium content
Access to this content requires a subscription. You must be a premium user to view this content.

Would you like to see your presentation here, made available to a global audience of researchers?
Add your own presentation or have us affordably record your next conference.
Deep neural networks may exhibit dangerous behaviors under various security threats and there exists an ongoing arms race between attackers and defenders. In this work, we propose to utilize recent progress on neural network repair to mitigate these threats and repair various kinds of neural network defects within a unified framework. To push the boundary of existing repairs (suffering from limitations such as lack of guarantees, limited scalability, etc) in addressing more practical contexts, we propose ProRepair, a novel provable repair framework driven by formal preimage synthesis and property refinement. The key ideas are: (i) synthesizing a proxy box to characterize the feature-space preimage, which can guide the subsequent repair step towards the correct outputs, and (ii) performing property refinement to enable surgical corrections and scale to more complex tasks. We evaluate ProRepair across various repair tasks and the results demonstrate it outperforms existing methods.
