{"id":"https://openalex.org/W7164025265","doi":"https://doi.org/10.48550/arxiv.2606.09746","title":"Hybrid Robustness Verification for Spatio-Temporal Neural Networks","display_name":"Hybrid Robustness Verification for Spatio-Temporal Neural Networks","publication_year":2026,"publication_date":"2026-06-08","ids":{"openalex":"https://openalex.org/W7164025265","doi":"https://doi.org/10.48550/arxiv.2606.09746"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.09746","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.09746","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.09746","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5138220973","display_name":"Sherwin Varghese","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Varghese, Sherwin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006299169","display_name":"Matthew Wicker","orcid":"https://orcid.org/0000-0003-0779-3114"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wicker, Matthew","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5135970747","display_name":"Alessio Lomuscio","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lomuscio, Alessio","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9952999949455261,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9952999949455261,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10812","display_name":"Human Pose and Action Recognition","score":0.0006000000284984708,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.0005000000237487257,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.7427999973297119},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.5514000058174133},{"id":"https://openalex.org/keywords/convolutional-neural-network","display_name":"Convolutional neural network","score":0.5065000057220459},{"id":"https://openalex.org/keywords/verifiable-secret-sharing","display_name":"Verifiable secret sharing","score":0.42969998717308044},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.40400001406669617},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.353300005197525},{"id":"https://openalex.org/keywords/upper-and-lower-bounds","display_name":"Upper and lower bounds","score":0.3336000144481659},{"id":"https://openalex.org/keywords/formal-verification","display_name":"Formal verification","score":0.3305000066757202}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7735999822616577},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.7427999973297119},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.5514000058174133},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.5065000057220459},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4595000147819519},{"id":"https://openalex.org/C85847156","wikidata":"https://www.wikidata.org/wiki/Q59015987","display_name":"Verifiable secret sharing","level":3,"score":0.42969998717308044},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.40400001406669617},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.37790000438690186},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3560999929904938},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.353300005197525},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.34439998865127563},{"id":"https://openalex.org/C77553402","wikidata":"https://www.wikidata.org/wiki/Q13222579","display_name":"Upper and lower bounds","level":2,"score":0.3336000144481659},{"id":"https://openalex.org/C111498074","wikidata":"https://www.wikidata.org/wiki/Q173326","display_name":"Formal verification","level":2,"score":0.3305000066757202},{"id":"https://openalex.org/C113775141","wikidata":"https://www.wikidata.org/wiki/Q428691","display_name":"Computer engineering","level":1,"score":0.3140000104904175},{"id":"https://openalex.org/C179799912","wikidata":"https://www.wikidata.org/wiki/Q205084","display_name":"Computational complexity theory","level":2,"score":0.3037000000476837},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.29980000853538513},{"id":"https://openalex.org/C152062344","wikidata":"https://www.wikidata.org/wiki/Q818888","display_name":"Computability","level":2,"score":0.290800005197525},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.289900004863739},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.2856000065803528},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.28529998660087585},{"id":"https://openalex.org/C206688291","wikidata":"https://www.wikidata.org/wiki/Q7617819","display_name":"Stochastic gradient descent","level":3,"score":0.2815999984741211},{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.2775999903678894},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.25440001487731934},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.25429999828338623}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.09746","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.09746","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.09746","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.09746","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.5485032200813293}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"With":[0],"AI":[1],"increasingly":[2],"deployed":[3],"in":[4,38,50,87,187,197],"safety-critical":[5],"systems,":[6],"providing":[7],"formal":[8],"robustness":[9,75,225],"guarantees":[10,226],"for":[11,177,206],"the":[12,33,42,45,112,154,169,174,178,188,191],"underlying":[13],"models":[14],"is":[15],"essential.":[16],"Existing":[17],"verification":[18,76,145,204],"methods":[19,186],"either":[20,116],"rely":[21],"on":[22,101],"overly":[23],"conservative":[24],"approximations":[25],"or":[26,121],"incur":[27],"prohibitive":[28],"computational":[29],"costs.":[30],"For":[31],"example,":[32],"use":[34],"of":[35,77,119,126,153,190],"lp-norm":[36],"perturbations":[37,57],"video":[39,52,81],"settings":[40],"encodes":[41],"belief":[43],"that":[44,131,147],"adversary":[46],"can":[47,114],"inject":[48],"noise":[49],"every":[51],"frame.":[53],"In":[54,70],"practice,":[55],"adversarial":[56,102],"exhibit":[58],"structured":[59],"spatial":[60],"and":[61,82,94,158,209],"temporal":[62],"correlations,":[63],"constrained":[64],"to":[65,212,218],"lower-dimensional,":[66],"semantically":[67],"meaningful":[68],"subspaces.":[69],"this":[71,198],"work,":[72],"we":[73,183,200],"study":[74],"3D":[78],"CNNs":[79],"processing":[80],"volumetric":[83],"inputs,":[84],"targeting":[85],"applications":[86],"action":[88],"recognition":[89],"(UCF-101),":[90],"autonomous":[91,207],"driving":[92,208],"(Udacity),":[93],"medical":[95],"imaging":[96],"(MedMNIST)":[97],"exploiting":[98],"realistic":[99,133],"assumptions":[100],"strength":[103],"by":[104],"modelling":[105,132],"them":[106],"as":[107],"spatio-temporal":[108],"constraints":[109,134],"-":[110],"where":[111],"attacker":[113],"modify":[115],"a":[117,124,144,203],"subset":[118],"frames":[120],"patches":[122],"within":[123],"set":[125],"consecutive":[127],"frames.":[128],"We":[129,138],"demonstrate":[130],"enables":[135],"tighter":[136],"approximations.":[137,167],"introduce":[139],"Spatio-Temporal":[140],"Bound":[141],"Propagation":[142],"(STBP),":[143],"framework":[146],"computes":[148],"an":[149],"exact":[150,170],"closed-form":[151],"characterization":[152],"first":[155,179],"convolutional":[156,180],"layer":[157],"propagates":[159],"certified":[160,234],"bounds":[161,176],"through":[162],"subsequent":[163],"layers":[164],"using":[165],"scalable":[166],"Computing":[168],"closed":[171],"form":[172],"provides":[173,223],"tightest":[175],"layer.":[181],"Thus,":[182],"utilise":[184],"approximation":[185],"remainder":[189],"network.":[192],"To":[193],"spur":[194],"further":[195],"progress":[196],"field,":[199],"propose":[201],"ST-Bench,":[202],"benchmark":[205],"activity":[210],"recognition,":[211],"systematically":[213],"evaluate":[214],"verifiable":[215],"robustness.":[216],"Compared":[217],"existing":[219],"verification-based":[220],"approaches,":[221],"STBP":[222],"stronger":[224],"with":[227],"significantly":[228],"improved":[229],"scalability,":[230],"achieving":[231],"1.7x":[232],"higher":[233],"robust":[235],"accuracy":[236],"under":[237],"identical":[238],"perturbation":[239],"budgets.":[240]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-06-10T00:00:00"}