
Reachability Analysis and Safety Verification of Neural Feedback
Systems via Hybrid Zonotopes
Yuhao Zhang and Xiangru Xu
Abstract— Hybrid zonotopes generalize constrained zono-
topes by introducing additional binary variables and possess
some unique properties that make them convenient to represent
nonconvex sets. This paper presents novel hybrid zonotope-
based methods for the reachability analysis and safety veri-
fication of neural feedback systems. Algorithms are proposed
to compute the input-output relationship of each layer of a
feedforward neural network, as well as the exact reachable
sets of neural feedback systems. In addition, a sufficient and
necessary condition is formulated as a mixed-integer linear
program to certify whether the trajectories of a neural feedback
system can avoid unsafe regions. The proposed approach
is shown to yield a formulation that provides the tightest
convex relaxation for the reachable sets of the neural feedback
system. Complexity reduction techniques for the reachable
sets are developed to balance the computation efficiency and
approximation accuracy. Two numerical examples demonstrate
the superior performance of the proposed approach compared
to other existing methods.
I. INTRODUCTION
Artificial neural networks have shown their extraordinary
performance in many fields such as auto-driving systems [1]
and mobile robots [2]. Implementation of neural networks in
such controlled systems also raises safety concerns as even a
small chance of failure may cause catastrophic consequences.
Therefore, it’s critical to find an efficient method to verify the
safety properties of controlled systems with neural network
components before real implementations. However, analyz-
ing properties of neural networks is notoriously difficult due
to their highly non-convex and nonlinear natures [3].
Various methods have been proposed to perform reacha-
bility analysis and safety verification for the neural feedback
systems (i.e., feedback systems with neural network con-
trollers) [4], [5], [6], [7], [8]. Based on quadratic constraints,
a reachable set over-approximation method was proposed
in [9], [10] using semi-definite programming (SDP). A
fast reachability method was introduced in [11] by relax-
ing the SDP into linear programming (LP). Learning-based
reachability methods were also developed in [12], [13] for
neural feedback systems with probabilistic guarantees on
the correctness of the approximated reachable sets. Set-
based methods were also proposed to compute the exact
reachable sets of neural feedback systems using star sets
[14] and constrained zonotopes [15]. Despite their interesting
results, these two methods can only deal with convex set
representations which limit their usage for complex safety
Yuhao Zhang and Xiangru Xu are with the Department of Mechanical
Engineering, University of Wisconsin-Madison, Madison, WI, USA. Email:
{yuhao.zhang2,xiangru.xu}@wisc.edu.
Fig. 1: The neural feedback system is given as x(t+ 1) =
Adx(t)+Bdu(t)where the state feedback controller u(t) =
π(x(t)) is a given `-layer FNN with the ReLU activation
function. At each time step, the neural feedback system maps
a hybrid zonotope as the input set to another hybrid zonotope
as the output set. The initial set is X0and the reachable set
at time tfrom X0is Rt(X0).
verification problems. Besides, the computation complexity
increases rapidly for deep neural networks.
Recently, a new set representation named the hybrid zono-
tope was introduced in [16]. Through the addition of binary
generators, hybrid zonotope can represent non-convex sets
with flat faces. And the reachability analysis based on hybrid
zonotopes will lead to the formulation of mixed-integer linear
programs (MILPs), for which many state-of-the-art solvers
such as Gurobi [17] and learning-based solver MLOPT [18]
can be utilized to accelerate the computation.
In this work, we present hybrid zonotope-based methods
for reachability analysis and safety verification of neural
feedback systems with ReLU-activated feed-forward neural
network (FNN) controllers (see Figure 1). The contributions
of this paper are threefold: (i) For neural feedback systems
with hybrid zonotopes as the input sets, a novel approach
is presented to compute the nonconvex exact reachable sets
represented as hybrid zonotopes; (ii) Based on the convex
relaxation property of the computed reachable sets and the
properties of hybrid zonotopes, heuristic reduction methods
are proposed to reduce the complexity growth of the hybrid
zonotope sets; (iii) Using the computed reachable sets, an
MILP-based condition is provided to verify the unsafe region
avoidance of neural feedback systems, for which off-the-shelf
solvers can be employed. The efficiency of the proposed
methods is demonstrated through two numerical examples.
II. PRELIMINARIES & PROBLEM STATEMENT
A. Hybrid Zonotopes
Definition 1: Let Z,Zc,Zh⊂Rn.Zis a zonotope if (1)
holds [19], Zcis a constrained zonotope if (2) holds [20],
and Zhis a hybrid zonotope if (3) holds [16]:
∃(c,G)∈Rn×Rn×ng:Z={Gξ+c| kξk∞≤1},(1)
arXiv:2210.03244v1 [math.OC] 6 Oct 2022