Table of Contents
Fetching ...

Scalable and Interpretable Verification of Image-based Neural Network Controllers for Autonomous Vehicles

Aditya Parameshwaran, Yue Wang

TL;DR

The paper tackles the scalability and interpretability gap in formal verification of image-based neural network controllers for autonomous vehicles by introducing SEVIN, which maps high-dimensional images to a structured latent space via a Gaussian Mixture-VAE and partitions this space into convex polytopes labeled by control actions. The decoder of the VAE is integrated with the controller to form a combined network $\mathcal{H}(\mathbf{z}) = F(D(\mathbf{z}))$, enabling formal verification over low-dimensional polytopes with symbolic specifications (VNN-LIB) and using tools like $\alpha$-$\beta$-CROWN; the framework also extends to robustness verification through augmented latent spaces learned from perturbed data. Key contributions include a concrete construction of latent-space convex polytopes, a theoretical equivalence between latent-space and input-space verification (Theorem 1), and an end-to-end pipeline that supports both vanilla and robustness verification. Experiments in a driving environment show SEVIN achieving efficient verification (often under 1 second) and providing interpretable insights into controller behavior, with robustness improvements demonstrated via augmented data. Overall, SEVIN advances practical safety guarantees for image-based AV controllers by combining probabilistic latent representations, geometric input-space partitioning, and symbolic specifications to bridge formal methods and real-world applications.

Abstract

Existing formal verification methods for image-based neural network controllers in autonomous vehicles often struggle with high-dimensional inputs, computational inefficiency, and a lack of explainability. These challenges make it difficult to ensure safety and reliability, as processing high-dimensional image data is computationally intensive and neural networks are typically treated as black boxes. To address these issues, we propose SEVIN (Scalable and Explainable Verification of Image-Based Neural Network Controllers), a framework that leverages a Variational Autoencoders (VAE) to encode high-dimensional images into a lower-dimensional, explainable latent space. By annotating latent variables with corresponding control actions, we generate convex polytopes that serve as structured input spaces for verification, significantly reducing computational complexity and enhancing scalability. Integrating the VAE's decoder with the neural network controller allows for formal and robustness verification using these explainable polytopes. Our approach also incorporates robustness verification under real-world perturbations by augmenting the dataset and retraining the VAE to capture environmental variations. Experimental results demonstrate that SEVIN achieves efficient and scalable verification while providing explainable insights into controller behavior, bridging the gap between formal verification techniques and practical applications in safety-critical systems.

Scalable and Interpretable Verification of Image-based Neural Network Controllers for Autonomous Vehicles

TL;DR

The paper tackles the scalability and interpretability gap in formal verification of image-based neural network controllers for autonomous vehicles by introducing SEVIN, which maps high-dimensional images to a structured latent space via a Gaussian Mixture-VAE and partitions this space into convex polytopes labeled by control actions. The decoder of the VAE is integrated with the controller to form a combined network , enabling formal verification over low-dimensional polytopes with symbolic specifications (VNN-LIB) and using tools like --CROWN; the framework also extends to robustness verification through augmented latent spaces learned from perturbed data. Key contributions include a concrete construction of latent-space convex polytopes, a theoretical equivalence between latent-space and input-space verification (Theorem 1), and an end-to-end pipeline that supports both vanilla and robustness verification. Experiments in a driving environment show SEVIN achieving efficient verification (often under 1 second) and providing interpretable insights into controller behavior, with robustness improvements demonstrated via augmented data. Overall, SEVIN advances practical safety guarantees for image-based AV controllers by combining probabilistic latent representations, geometric input-space partitioning, and symbolic specifications to bridge formal methods and real-world applications.

Abstract

Existing formal verification methods for image-based neural network controllers in autonomous vehicles often struggle with high-dimensional inputs, computational inefficiency, and a lack of explainability. These challenges make it difficult to ensure safety and reliability, as processing high-dimensional image data is computationally intensive and neural networks are typically treated as black boxes. To address these issues, we propose SEVIN (Scalable and Explainable Verification of Image-Based Neural Network Controllers), a framework that leverages a Variational Autoencoders (VAE) to encode high-dimensional images into a lower-dimensional, explainable latent space. By annotating latent variables with corresponding control actions, we generate convex polytopes that serve as structured input spaces for verification, significantly reducing computational complexity and enhancing scalability. Integrating the VAE's decoder with the neural network controller allows for formal and robustness verification using these explainable polytopes. Our approach also incorporates robustness verification under real-world perturbations by augmenting the dataset and retraining the VAE to capture environmental variations. Experimental results demonstrate that SEVIN achieves efficient and scalable verification while providing explainable insights into controller behavior, bridging the gap between formal verification techniques and practical applications in safety-critical systems.
Paper Structure (24 sections, 3 theorems, 30 equations, 5 figures, 4 tables)

This paper contains 24 sections, 3 theorems, 30 equations, 5 figures, 4 tables.

Key Result

Lemma 1

Let $X = \{\mathbf{x}_i\}_{i=1}^M$ be a dataset of images, and let $A \subset \mathbb{R}^m$ be a set of action values, where each image $\mathbf{x}_i$ is associated with a control action $\mathbf{a}_i \in A$ that the neural network controller $F(\mathbf{x})$ should predict. Using the encoder $E(\mat

Figures (5)

  • Figure 1: The SEVIN model can be decomposed into two sub-modules for conducting formal verification of any neural network controller. (a) A VAE, defined as $\hat{\mathbf{x}} = D(E(\mathbf{x}))$, is initially trained and utilized to learn representation sets ($Z_i$) of latent features from the dataset $X$. The same dataset $X$ is also used to train the image-based neural network controller $F(\mathbf{x})$, which will later undergo verification. (b) Any latent feature sample $\mathbf{z} \in Z_i$ is representative of the dominant features that influence the control action ($\mathbf{a}$) predicted by $F(\mathbf{x})$. By combining the decoder $D(\mathbf{z})$ with the neural network controller $F(\mathbf{x})$, we can determine a set of control actions $A_i$ based on $Z_i$ (see more in Lemma \ref{['lemma_1']}). Finally, using a neural network verification tool, we can formally verify the satisfaction of the neural network controller $F(\mathbf{x})$ against a formal specification ($\phi$)
  • Figure 2: t-SNE plot of an 8D latent space representation generated for the clean image dataset ($X$)
  • Figure 3: 2D latent space representation of the front camera images from the driving scenario described in Example \ref{['example2']}. The variables are labeled by action sets $A_1 = [0.02, 0.20]$ and $A_2 = A \setminus A_1$.
  • Figure 4: Illustration of the data pre-processing, augmentation, and reconstruction steps used in our approach. (1) Original front camera view captured from the AV within the CARLA driving simulator environment on a two-lane track. (2)(a) Resized and cropped images before training. (b) Augmented image with brightness level adjusted by a random factor $\delta \in [-0.2, 0.2]$. (c) Augmented image with motion blur applied, with the degree of blur (kernel size) $\delta \in [1,6] \cap \mathbb{Z}$. (3) Reconstructions of the images from (2) generated by the trained VAE's.
  • Figure 5: t-SNE plot of an 8D latent space representation generated for the clean ($X$) and motion blur augmented image dataset ($\bar{X}$)

Theorems & Definitions (5)

  • Example 1
  • Lemma 1
  • Lemma 2
  • Example 2
  • Theorem 1