Table of Contents
Fetching ...

Tracking Finite-Time Lyapunov Exponents to Robustify Neural ODEs

Tobias Wöhrer, Christian Kuehn

TL;DR

This work introduces finite-time Lyapunov exponents (FTLEs) as dynamical systems tools to analyze neural ODEs and reveal how input perturbations propagate along the learned flow. By linking FTLE ridges to decision boundaries through Lagrangian coherent structures, the authors provide an interpretable view of how two-dimensional neural ODE classifiers separate classes and how early dynamics shape classification. They then propose an FTLE-based regularizer that suppresses large exponents in the early phase of the input trajectory, improving adversarial robustness while reducing compute compared to full-interval regularization. Experiments on two-dimensional moons-like tasks show that FTLE ridges coincide with class boundaries, and early-dynamics suppression widens margins without sacrificing accuracy, highlighting a practical dynamical-systems approach to robustness in continuous-depth models. The work offers a principled framework for interpreting and stabilizing neural ODEs and points toward scalable extensions to higher dimensions.

Abstract

We investigate finite-time Lyapunov exponents (FTLEs), a measure for exponential separation of input perturbations, of deep neural networks within the framework of continuous-depth neural ODEs. We demonstrate that FTLEs are powerful organizers for input-output dynamics, allowing for better interpretability and the comparison of distinct model architectures. We establish a direct connection between Lyapunov exponents and adversarial vulnerability, and propose a novel training algorithm that improves robustness by FTLE regularization. The key idea is to suppress exponents far from zero in the early stage of the input dynamics. This approach enhances robustness and reduces computational cost compared to full-interval regularization, as it avoids a full ``double'' backpropagation.

Tracking Finite-Time Lyapunov Exponents to Robustify Neural ODEs

TL;DR

This work introduces finite-time Lyapunov exponents (FTLEs) as dynamical systems tools to analyze neural ODEs and reveal how input perturbations propagate along the learned flow. By linking FTLE ridges to decision boundaries through Lagrangian coherent structures, the authors provide an interpretable view of how two-dimensional neural ODE classifiers separate classes and how early dynamics shape classification. They then propose an FTLE-based regularizer that suppresses large exponents in the early phase of the input trajectory, improving adversarial robustness while reducing compute compared to full-interval regularization. Experiments on two-dimensional moons-like tasks show that FTLE ridges coincide with class boundaries, and early-dynamics suppression widens margins without sacrificing accuracy, highlighting a practical dynamical-systems approach to robustness in continuous-depth models. The work offers a principled framework for interpreting and stabilizing neural ODEs and points toward scalable extensions to higher dimensions.

Abstract

We investigate finite-time Lyapunov exponents (FTLEs), a measure for exponential separation of input perturbations, of deep neural networks within the framework of continuous-depth neural ODEs. We demonstrate that FTLEs are powerful organizers for input-output dynamics, allowing for better interpretability and the comparison of distinct model architectures. We establish a direct connection between Lyapunov exponents and adversarial vulnerability, and propose a novel training algorithm that improves robustness by FTLE regularization. The key idea is to suppress exponents far from zero in the early stage of the input dynamics. This approach enhances robustness and reduces computational cost compared to full-interval regularization, as it avoids a full ``double'' backpropagation.
Paper Structure (17 sections, 35 equations, 10 figures)

This paper contains 17 sections, 35 equations, 10 figures.

Figures (10)

  • Figure 1: Comparison of FTLEs of nODEs trained without and with active FTLE suppression. Figure \ref{['subfig:intronoreg']} shows large FTLE ridge at the class boundary. The modified training of Figure \ref{['subfig:introreg']} achieves a suppression of the FTLE ridge, reducing input sensitivity at the decision boundary.
  • Figure 2: Plots for Example \ref{['ex:1param']}
  • Figure 3: Plotted are the neural ODE evolution of Example \ref{['ex:1param']} for a grid of initial points with labels colored orange/blue according to the model's final prediction. The background colors depict the FTLEs for each point in $[-2,2]^2$ from initial time to current time. This results in an increasing FTLE interval as time progresses.
  • Figure 4: Plots for Example \ref{['ex:5params']}
  • Figure 5: Plotted is the neural ODE evolution of Example \ref{['ex:5params']} for a grid of initial points. The points are colored according to the models final prediction. The small arrows describe the piecewise-constant vector field that generate the dynamics. The background colors show the maximum FTLEs on the autonomous subinterval of the active vector field.
  • ...and 5 more figures

Theorems & Definitions (4)

  • Remark 1
  • Remark 2
  • Remark 3
  • Remark 4