🤖 AI Summary
This work addresses the challenge of probabilistic verification for neural networks. We propose BaB-prob, the first branch-and-bound framework for probabilistic verification based on pre-activation splitting. Methodologically, we extend pre-activation splitting—previously used only in deterministic verification—to the probabilistic setting, enabling efficient computation of probabilistic upper and lower bounds for subproblems via linear bound propagation. To guide the search, we introduce an “uncertainty level” metric and design two splitting strategies: BaB-prob-ordered (order-based splitting) and BaBSR-prob (uncertainty-aware splitting). Experiments demonstrate that BaB-prob consistently outperforms state-of-the-art methods across untrained networks, MNIST, CIFAR-10, and the VNN-COMP 2025 benchmark. Notably, it achieves superior verification accuracy and scalability for medium- to high-dimensional inputs. By unifying probabilistic reasoning with scalable branch-and-bound optimization, BaB-prob establishes a new, principled, and extensible paradigm for probabilistic formal verification of neural networks.
📝 Abstract
Branch-and-bound with preactivation splitting has been shown highly effective for deterministic verification of neural networks. In this paper, we extend this framework to the probabilistic setting. We propose BaB-prob that iteratively divides the original problem into subproblems by splitting preactivations and leverages linear bounds computed by linear bound propagation to bound the probability for each subproblem. We prove soundness and completeness of BaB-prob for feedforward-ReLU neural networks. Furthermore, we introduce the notion of uncertainty level and design two efficient strategies for preactivation splitting, yielding BaB-prob-ordered and BaB+BaBSR-prob. We evaluate BaB-prob on untrained networks, MNIST and CIFAR-10 models, respectively, and VNN-COMP 2025 benchmarks. Across these settings, our approach consistently outperforms state-of-the-art approaches in medium- to high-dimensional input problems.