Reachability Analysis and Safety Verification of Neural Feedback Systems via Hybrid Zonotopes Yuhao Zhang and Xiangru Xu

2025-04-29 0 0 474.13KB 8 页 10玖币
侵权投诉
Reachability Analysis and Safety Verification of Neural Feedback
Systems via Hybrid Zonotopes
Yuhao Zhang and Xiangru Xu
Abstract Hybrid zonotopes generalize constrained zono-
topes by introducing additional binary variables and possess
some unique properties that make them convenient to represent
nonconvex sets. This paper presents novel hybrid zonotope-
based methods for the reachability analysis and safety veri-
fication of neural feedback systems. Algorithms are proposed
to compute the input-output relationship of each layer of a
feedforward neural network, as well as the exact reachable
sets of neural feedback systems. In addition, a sufficient and
necessary condition is formulated as a mixed-integer linear
program to certify whether the trajectories of a neural feedback
system can avoid unsafe regions. The proposed approach
is shown to yield a formulation that provides the tightest
convex relaxation for the reachable sets of the neural feedback
system. Complexity reduction techniques for the reachable
sets are developed to balance the computation efficiency and
approximation accuracy. Two numerical examples demonstrate
the superior performance of the proposed approach compared
to other existing methods.
I. INTRODUCTION
Artificial neural networks have shown their extraordinary
performance in many fields such as auto-driving systems [1]
and mobile robots [2]. Implementation of neural networks in
such controlled systems also raises safety concerns as even a
small chance of failure may cause catastrophic consequences.
Therefore, it’s critical to find an efficient method to verify the
safety properties of controlled systems with neural network
components before real implementations. However, analyz-
ing properties of neural networks is notoriously difficult due
to their highly non-convex and nonlinear natures [3].
Various methods have been proposed to perform reacha-
bility analysis and safety verification for the neural feedback
systems (i.e., feedback systems with neural network con-
trollers) [4], [5], [6], [7], [8]. Based on quadratic constraints,
a reachable set over-approximation method was proposed
in [9], [10] using semi-definite programming (SDP). A
fast reachability method was introduced in [11] by relax-
ing the SDP into linear programming (LP). Learning-based
reachability methods were also developed in [12], [13] for
neural feedback systems with probabilistic guarantees on
the correctness of the approximated reachable sets. Set-
based methods were also proposed to compute the exact
reachable sets of neural feedback systems using star sets
[14] and constrained zonotopes [15]. Despite their interesting
results, these two methods can only deal with convex set
representations which limit their usage for complex safety
Yuhao Zhang and Xiangru Xu are with the Department of Mechanical
Engineering, University of Wisconsin-Madison, Madison, WI, USA. Email:
{yuhao.zhang2,xiangru.xu}@wisc.edu.
Fig. 1: The neural feedback system is given as x(t+ 1) =
Adx(t)+Bdu(t)where the state feedback controller u(t) =
π(x(t)) is a given `-layer FNN with the ReLU activation
function. At each time step, the neural feedback system maps
a hybrid zonotope as the input set to another hybrid zonotope
as the output set. The initial set is X0and the reachable set
at time tfrom X0is Rt(X0).
verification problems. Besides, the computation complexity
increases rapidly for deep neural networks.
Recently, a new set representation named the hybrid zono-
tope was introduced in [16]. Through the addition of binary
generators, hybrid zonotope can represent non-convex sets
with flat faces. And the reachability analysis based on hybrid
zonotopes will lead to the formulation of mixed-integer linear
programs (MILPs), for which many state-of-the-art solvers
such as Gurobi [17] and learning-based solver MLOPT [18]
can be utilized to accelerate the computation.
In this work, we present hybrid zonotope-based methods
for reachability analysis and safety verification of neural
feedback systems with ReLU-activated feed-forward neural
network (FNN) controllers (see Figure 1). The contributions
of this paper are threefold: (i) For neural feedback systems
with hybrid zonotopes as the input sets, a novel approach
is presented to compute the nonconvex exact reachable sets
represented as hybrid zonotopes; (ii) Based on the convex
relaxation property of the computed reachable sets and the
properties of hybrid zonotopes, heuristic reduction methods
are proposed to reduce the complexity growth of the hybrid
zonotope sets; (iii) Using the computed reachable sets, an
MILP-based condition is provided to verify the unsafe region
avoidance of neural feedback systems, for which off-the-shelf
solvers can be employed. The efficiency of the proposed
methods is demonstrated through two numerical examples.
II. PRELIMINARIES & PROBLEM STATEMENT
A. Hybrid Zonotopes
Definition 1: Let Z,Zc,ZhRn.Zis a zonotope if (1)
holds [19], Zcis a constrained zonotope if (2) holds [20],
and Zhis a hybrid zonotope if (3) holds [16]:
(c,G)Rn×Rn×ng:Z={Gξ+c| kξk1},(1)
arXiv:2210.03244v1 [math.OC] 6 Oct 2022
(c,G,A,b)Rn×Rn×ng×Rnc×ng×Rnc:
Zc={Gξ+c| kξk1,Aξ=b},(2)
(c,Gc,Gb,Ac,Ab,b)Rn×Rn×ng×Rn×nb×Rnc×ng
×Rnc×nb×Rnc:(3)
Zh=
GcGbξc
ξb+c
ξc
ξb∈ Bng
× {−1,1}nb,
AcAbξc
ξb=b
,
where Bng
={xRng| kxk1}is the unit hy-
percube in Rng. The shorthand notations of the zono-
tope, constrained zonotope and hybrid zonotope are given
by Z=Zhc,Gi,Zc=CZhc,G,A,bi, and Zh=
HZhc,Gc,Gb,Ac,Ab,bi, respectively.
Note that a hybrid zonotope degenerates into a constrained
zonotope when nb= 0, and a constrained zonotope de-
generates into a zonotope when nc= 0. For a given
hybrid zonotope HZhc,Gc,Gb,Ac,Ab,bi, the vector cis
called the center, the columns of Gbare called the binary
generators, and the columns of Gcare called the continuous
generators (or simply generators if binary generators are not
present). For simplicity, we define the set B(Ac,Ab,b) =
{(ξc,ξb)∈ Bng
× {−1,1}nb|Acξc+Abξb=b}.
We denote G[:, i]as the i-th column of a matrix G. The
complexity of a hybrid zonotope is described by its degrees-
of freedom order or simply order oh= (ng+nbnc)/n.
The equivalence of a hybrid zonotope with a finite collec-
tion of constrained zonotopes is stated by the result below.
Lemma 1: [16, Theorem 5] The set ZhRnis a hybrid
zonotope if and only if it is the union of a finite number of
constrained zonotopes.
Similar to constrained zonotopes, hybrid zonotopes are
closed under linear map and intersections.
Lemma 2: [16, Proposition 7] For any RRm×n,Zh=
HZhcz,Gc
z,Gb
z,Ac
z,Ab
z,bzi ⊂ Rn,Yh=HZhcy,Gc
y,
Gb
y,Ac
y,Ab
y,byi ⊂ Rn, and H={xRm|hTxf} ⊂
Rnthe following identities hold:
RZh=HZhRcz,RGc
z,RGb
z,Ac
z,Ab
z,bzi,
Zh∩ Yh=HZhcz,Gc
z0,Gb
z0,
Ac
z0
0 Ac
y
Gc
zGc
y
,
Ab
z0
0 Ab
y
Gb
zGb
y
,
bz
by
cycz
i,
Zh∩ H=HZhcz,Gc
z0,Gb
z,Ac
z0
hTGc
z
dm
2,
Ab
z
hTGb
z,bz
fhTczdm
2i,
where dm=Png,z
i=1
hTGc
z[:, i]
+Pnb,z
i=1
hTGb
z[:, i]
+f
hTcz.
Hybrid zonotopes are also closed under union operation.
Lemma 3: [21, Proposition 1] (Union) For any Zh=
HZ cz,Gc
z,Gb
z,Ac
z,Ab
z,bzRnand Wh=
HZ cw,Gc
w,Gb
w,Ac
w,Ab
w,bwRn, define the vec-
tors ˆ
GbRn,ˆ
cRn,ˆ
Ab
zRnc,z ,ˆ
bz
Rnc,z ,ˆ
Ab
wRnc,w , and ˆ
bwRnc,w , such that ˆ
Gb=
(Gb
w1+cz)(Gb
z1+cw)
2,ˆ
Ab
z=Ab
z1bz
2,ˆ
Ab
w=Ab
w1+bw
2,ˆ
c=
(Gb
w1+cz)+(Gb
z1+cw)
2,ˆ
bz=Ab
z1+bz
2,ˆ
bw=Ab
w1+bw
2.
Then the union of Zhand Whis a hybrid zonotope Zh
Wh=HZ cu,Gc
u,Gb
u,Ac
u,Ab
u,buRnwhere
Gc
u=Gc
zGc
w0,Gb
u=Gb
zGb
wˆ
Gb,
Ac
u=
Ac
z0 0
0 Ac
w0
Ac
3I
,Ab
u=
Ab
z0ˆ
Ab
z
0 Ab
wˆ
Ab
w
Ab
3
,
Ac
3=
I0
I0
0I
0I
0 0
0 0
0 0
0 0
,Ab
3=
0 0 1
21
0 0 1
21
0 0 1
21
0 0 1
21
1
2I01
21
1
2I01
21
01
2I1
21
01
2I1
21
,
cu=ˆ
c,bu=ˆ
bT
zˆ
bT
wbT
3T,
b3=1
21T1
21T1
21T1
21T0T1T0T1TT.
The emptiness of a hybrid zonotope can be checked by
solving an MILP.
Lemma 4: [16] Given Zh=HZhc,Gc,Gb,Ac,Ab,bi
Rn,Zh6=if and only if min{||ξc|||Acξc+Abξb=
b,ξcRng,ξb∈ {−1,1}nb} ≤ 1.
B. Problem Statement
Consider a discrete-time linear system:
x(t+ 1) = Adx(t) + Bdu(t)(4)
where x(t)Rn,u(t)Rmare the state and the control
input. AdRn×n,BdRn×mare the state matrix and the
input matrix, respectively.
We assume a state-feedback controller
u(t) = π(x(t)),(5)
which is parameterized by an `-layer FNN with the Rectified
Linear Unit (ReLU) activation function. The closed-loop
system with system model (4) and controller (5) is denoted
as:
x(t+ 1) = fcl(x(t)) ,Adx(t) + Bdπ(x(t)).(6)
For the closed-loop system (6), we denote Rt(X0),
{x(t)Rn|x(0) ∈ X0,x(k+ 1) = fcl(x(k)), k =
0,1, . . . , t 1}the (forward) reachable set at time tfrom
a given set of initial conditions X0Rn.
For the `-layer FNN controller, let W(k1) be the k-th
layer weight matrix and v(k1) be the k-th layer bias vector,
for k= 1, . . . , `. Denote x(k)as the neurons of the k-th
layer, then, for k= 1, . . . , ` 1, we have
x(k)=ReLU(W(k1)x(k1) +v(k1))(7)
where x(0) =x(t)and ReLU(x) = max{0,x}. Only the
linear map is applied in the last layer, i.e., π(x(t)) = x(`)=
W(`1)x(`1) +v(`1).
摘要:

ReachabilityAnalysisandSafetyVericationofNeuralFeedbackSystemsviaHybridZonotopesYuhaoZhangandXiangruXuAbstract—Hybridzonotopesgeneralizeconstrainedzono-topesbyintroducingadditionalbinaryvariablesandpossesssomeuniquepropertiesthatmakethemconvenienttorepresentnonconvexsets.Thispaperpresentsnovelhybri...

展开>> 收起<<
Reachability Analysis and Safety Verification of Neural Feedback Systems via Hybrid Zonotopes Yuhao Zhang and Xiangru Xu.pdf

共8页,预览2页

还剩页未读, 继续阅读

声明:本站为文档C2C交易模式,即用户上传的文档直接被用户下载,本站只是中间服务平台,本站所有文档下载所得的收益归上传人(含作者)所有。玖贝云文库仅提供信息存储空间,仅对用户上传内容的表现方式做保护处理,对上载内容本身不做任何修改或编辑。若文档所含内容侵犯了您的版权或隐私,请立即通知玖贝云文库,我们立即给予删除!
分类:图书资源 价格:10玖币 属性:8 页 大小:474.13KB 格式:PDF 时间:2025-04-29

开通VIP享超值会员特权

  • 多端同步记录
  • 高速下载文档
  • 免费文档工具
  • 分享文档赚钱
  • 每日登录抽奖
  • 优质衍生服务
/ 8
客服
关注