{"id":"https://openalex.org/W4385767377","doi":"https://doi.org/10.24963/ijcai.2023/25","title":"The #DNN-Verification Problem: Counting Unsafe Inputs for Deep Neural Networks","display_name":"The #DNN-Verification Problem: Counting Unsafe Inputs for Deep Neural Networks","publication_year":2023,"publication_date":"2023-08-01","ids":{"openalex":"https://openalex.org/W4385767377","doi":"https://doi.org/10.24963/ijcai.2023/25"},"language":"en","primary_location":{"id":"doi:10.24963/ijcai.2023/25","is_oa":true,"landing_page_url":"https://doi.org/10.24963/ijcai.2023/25","pdf_url":"https://www.ijcai.org/proceedings/2023/0025.pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Thirty-Second International Joint Conference on Artificial Intelligence","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.ijcai.org/proceedings/2023/0025.pdf","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5005034849","display_name":"Luca Marzari","orcid":"https://orcid.org/0000-0002-0069-0182"},"institutions":[{"id":"https://openalex.org/I119439378","display_name":"University of Verona","ror":"https://ror.org/039bp8j42","country_code":"IT","type":"education","lineage":["https://openalex.org/I119439378"]}],"countries":["IT"],"is_corresponding":true,"raw_author_name":"Luca Marzari","raw_affiliation_strings":["University of Verona","Department of Computer Science, University of Verona, Verona, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Verona","institution_ids":["https://openalex.org/I119439378"]},{"raw_affiliation_string":"Department of Computer Science, University of Verona, Verona, Italy","institution_ids":["https://openalex.org/I119439378"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110796636","display_name":"Davide Corsi","orcid":"https://orcid.org/0000-0002-1908-4449"},"institutions":[{"id":"https://openalex.org/I119439378","display_name":"University of Verona","ror":"https://ror.org/039bp8j42","country_code":"IT","type":"education","lineage":["https://openalex.org/I119439378"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Davide Corsi","raw_affiliation_strings":["University of Verona","Department of Computer Science, University of Verona, Verona, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Verona","institution_ids":["https://openalex.org/I119439378"]},{"raw_affiliation_string":"Department of Computer Science, University of Verona, Verona, Italy","institution_ids":["https://openalex.org/I119439378"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037548562","display_name":"Ferdinando Cicalese","orcid":"https://orcid.org/0000-0003-1652-0599"},"institutions":[{"id":"https://openalex.org/I119439378","display_name":"University of Verona","ror":"https://ror.org/039bp8j42","country_code":"IT","type":"education","lineage":["https://openalex.org/I119439378"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Ferdinando Cicalese","raw_affiliation_strings":["University of Verona","Department of Computer Science, University of Verona, Verona, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Verona","institution_ids":["https://openalex.org/I119439378"]},{"raw_affiliation_string":"Department of Computer Science, University of Verona, Verona, Italy","institution_ids":["https://openalex.org/I119439378"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5045922629","display_name":"Alessandro Farinelli","orcid":"https://orcid.org/0000-0002-2592-5814"},"institutions":[{"id":"https://openalex.org/I119439378","display_name":"University of Verona","ror":"https://ror.org/039bp8j42","country_code":"IT","type":"education","lineage":["https://openalex.org/I119439378"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Alessandro Farinelli","raw_affiliation_strings":["University of Verona, Italy","Department of Computer Science, University of Verona, Verona, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Verona, Italy","institution_ids":["https://openalex.org/I119439378"]},{"raw_affiliation_string":"Department of Computer Science, University of Verona, Verona, Italy","institution_ids":["https://openalex.org/I119439378"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5005034849"],"corresponding_institution_ids":["https://openalex.org/I119439378"],"apc_list":null,"apc_paid":null,"fwci":1.0127,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.80950573,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"217","last_page":"224"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9498000144958496,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.948199987411499,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6831355094909668},{"id":"https://openalex.org/keywords/property","display_name":"Property (philosophy)","score":0.6607487201690674},{"id":"https://openalex.org/keywords/probabilistic-logic","display_name":"Probabilistic logic","score":0.6208465695381165},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.586367666721344},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.5543656349182129},{"id":"https://openalex.org/keywords/completeness","display_name":"Completeness (order theory)","score":0.5533100962638855},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.5528910160064697},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4452383816242218},{"id":"https://openalex.org/keywords/counting-problem","display_name":"Counting problem","score":0.41181501746177673},{"id":"https://openalex.org/keywords/selection","display_name":"Selection (genetic algorithm)","score":0.4108225405216217},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.3342908024787903},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.32096511125564575},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.1803286075592041}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6831355094909668},{"id":"https://openalex.org/C189950617","wikidata":"https://www.wikidata.org/wiki/Q937228","display_name":"Property (philosophy)","level":2,"score":0.6607487201690674},{"id":"https://openalex.org/C49937458","wikidata":"https://www.wikidata.org/wiki/Q2599292","display_name":"Probabilistic logic","level":2,"score":0.6208465695381165},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.586367666721344},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.5543656349182129},{"id":"https://openalex.org/C17231256","wikidata":"https://www.wikidata.org/wiki/Q5156540","display_name":"Completeness (order theory)","level":2,"score":0.5533100962638855},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.5528910160064697},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4452383816242218},{"id":"https://openalex.org/C16592021","wikidata":"https://www.wikidata.org/wiki/Q5177154","display_name":"Counting problem","level":2,"score":0.41181501746177673},{"id":"https://openalex.org/C81917197","wikidata":"https://www.wikidata.org/wiki/Q628760","display_name":"Selection (genetic algorithm)","level":2,"score":0.4108225405216217},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3342908024787903},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.32096511125564575},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.1803286075592041},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.24963/ijcai.2023/25","is_oa":true,"landing_page_url":"https://doi.org/10.24963/ijcai.2023/25","pdf_url":"https://www.ijcai.org/proceedings/2023/0025.pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Thirty-Second International Joint Conference on Artificial Intelligence","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.24963/ijcai.2023/25","is_oa":true,"landing_page_url":"https://doi.org/10.24963/ijcai.2023/25","pdf_url":"https://www.ijcai.org/proceedings/2023/0025.pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Thirty-Second International Joint Conference on Artificial Intelligence","raw_type":"proceedings-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.7599999904632568}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4385767377.pdf"},"referenced_works_count":22,"referenced_works":["https://openalex.org/W1507872748","https://openalex.org/W1576973534","https://openalex.org/W1673923490","https://openalex.org/W2115826669","https://openalex.org/W2594877703","https://openalex.org/W2721006554","https://openalex.org/W2950029838","https://openalex.org/W2950183737","https://openalex.org/W2957311447","https://openalex.org/W2989358546","https://openalex.org/W3086166649","https://openalex.org/W3183549096","https://openalex.org/W3185656037","https://openalex.org/W3190946860","https://openalex.org/W3212827451","https://openalex.org/W4200294561","https://openalex.org/W4206095852","https://openalex.org/W4226429284","https://openalex.org/W4283793632","https://openalex.org/W4301187031","https://openalex.org/W4366723927","https://openalex.org/W4383108795"],"related_works":["https://openalex.org/W4237277701","https://openalex.org/W2121424666","https://openalex.org/W1587028174","https://openalex.org/W4301250310","https://openalex.org/W2030928163","https://openalex.org/W2067700950","https://openalex.org/W1669998927","https://openalex.org/W2182768446","https://openalex.org/W2620237082","https://openalex.org/W2055420561"],"abstract_inverted_index":{"Deep":[0],"Neural":[1],"Networks":[2],"are":[3],"increasingly":[4],"adopted":[5],"in":[6,85],"critical":[7],"tasks":[8],"that":[9,83,105,126,151],"require":[10],"a":[11,28,81,86,89,102,122,128,146],"high":[12],"level":[13],"of":[14,77,80,88,97,110,116,132,148,155,163],"safety,":[15],"e.g.,":[16],"autonomous":[17],"driving.":[18],"While":[19],"state-of-the-art":[20],"verifiers":[21],"can":[22],"be":[23],"employed":[24],"to":[25,113],"check":[26],"whether":[27,37],"DNN":[29,82],"is":[30,39,49],"unsafe":[31,43],"w.r.t.":[32],"some":[33],"given":[34],"property":[35],"(i.e.,":[36],"there":[38],"at":[40],"least":[41],"one":[42],"input":[44,78],"configuration),":[45],"their":[46],"yes/no":[47],"output":[48],"not":[50],"informative":[51],"enough":[52],"for":[53],"other":[54],"purposes,":[55],"such":[56],"as":[57],"shielding,":[58],"model":[59],"selection,":[60],"or":[61],"training":[62],"improvements.":[63],"In":[64],"this":[65,98],"paper,":[66],"we":[67,119],"introduce":[68],"the":[69,75,95,107,114,117,133,153,161,164],"#DNN-Verification":[70],"problem,":[71,118],"which":[72],"involves":[73],"counting":[74],"number":[76],"configurations":[79],"result":[84],"violation":[87],"particular":[90],"safety":[91],"property.":[92],"We":[93,141],"analyze":[94],"complexity":[96],"problem":[99],"and":[100,159],"propose":[101,121],"novel":[103],"approach":[104],"returns":[106],"exact":[108],"count":[109,135],"violations.":[111],"Due":[112],"#P-completeness":[115],"also":[120],"randomized,":[123],"approximate":[124,157],"method":[125,158],"provides":[127],"provable":[129],"probabilistic":[130],"bound":[131],"correct":[134],"while":[136],"significantly":[137],"reducing":[138],"computational":[139],"requirements.":[140],"present":[142],"experimental":[143],"results":[144],"on":[145],"set":[147],"safety-critical":[149],"benchmarks":[150],"demonstrate":[152],"effectiveness":[154],"our":[156],"evaluate":[160],"tightness":[162],"bound.":[165]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":2}],"updated_date":"2026-05-05T08:41:31.759640","created_date":"2025-10-10T00:00:00"}