DeepCNP: An efficient white-box testing of deep neural networks by aligning critical neuron paths

被引:0
|
作者
Liu, Weiguang [1 ]
Luo, Senlin [1 ]
Pan, Limin [1 ]
Zhang, Zhao [1 ]
机构
[1] Beijing Inst Technol, Informat Syst & Secur & Countermeasures Expt Ctr, Beijing 100081, Peoples R China
关键词
Deep neural networks; Deep learning testing; Critical neuron paths; Test cases;
D O I
10.1016/j.infsof.2024.107640
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
Context: Erroneous decisions of Deep Neural Networks may pose a significant threat to Deep Learning systems deployed in security-critical domains. The key to testing DNNs is to propose a testing technique to generate test cases that can detect more defects of the models. It has been demonstrated that coverage-guided fuzz testing methods are difficult to detect the correctness defects of model's decision logic. Meanwhile, the neuron activation threshold is set based on experience, which increases the uncertainty of the test even more. In addition, the randomly selected seed mutations are prone to generate a large number of invalid test cases, which has a great impact on the testing efficiency. Objective: This paper introduces DeepCNP, a method that combines Critical Neuron Paths alignment and dynamic seeds selection strategy, which can comprehensively and efficiently test all the decision paths of DNN and generate as many different classes of test cases as possible to expose misbehaviors of the model and thus finding defects. Method: DeepCNP utilizes training data to construct decision paths determined by the neuron output distribution, and aligns different decision paths in order to generate test cases. Seeds that are easy to align are dynamically selected based on the decision paths to be tested, and the labeling of seed mutations is specified during the path alignment process, thus improving the efficiency of fuzz testing. Results: Experimental results show that DeepCNP achieves new state-of-the-art results, pioneering the testing of all decision logics of the model through critical neuron path alignment, which greatly enhances the number of defects found, the efficiency and number of generated test cases. Conclusion: DeepCNP comprehensively tests the decision logic of DNNs, efficiently generating a large number of test cases of different categories to expose model's misbehaviors and thus finding additional defects.
引用
收藏
页数:13
相关论文
共 39 条
  • [1] A White-Box Testing for Deep Neural Networks Based on Neuron Coverage
    Yu, Jing
    Duan, Shukai
    Ye, Xiaojun
    IEEE TRANSACTIONS ON NEURAL NETWORKS AND LEARNING SYSTEMS, 2023, 34 (11) : 9185 - 9197
  • [2] Test4Deep: an Effective White-box Testing for Deep Neural Networks
    Yu, Jing
    Fu, Yao
    Zheng, Yanan
    Zheng, Wang
    Ye, Xiaojun
    2019 22ND IEEE INTERNATIONAL CONFERENCE ON COMPUTATIONAL SCIENCE AND ENGINEERING (IEEE CSE 2019) AND 17TH IEEE INTERNATIONAL CONFERENCE ON EMBEDDED AND UBIQUITOUS COMPUTING (IEEE EUC 2019), 2019, : 16 - 23
  • [3] An Efficient Method for Automatic Generation of Linearly Independent Paths in White-box Testing
    Wang, Xinyang
    Jiang, Yaqiu
    Tian, Wenhong
    INTERNATIONAL JOURNAL OF ENGINEERING AND TECHNOLOGY INNOVATION, 2015, 5 (02) : 108 - 120
  • [4] FOSTERING THE ROBUSTNESS OF WHITE-BOX DEEP NEURAL NETWORK WATERMARKS BY NEURON ALIGNMENT
    Li, Fang-Qi
    Wang, Shi-Lin
    Zhu, Yun
    2022 IEEE INTERNATIONAL CONFERENCE ON ACOUSTICS, SPEECH AND SIGNAL PROCESSING (ICASSP), 2022, : 3049 - 3053
  • [5] DI-AA: An interpretable white-box attack for fooling deep neural networks
    Wang, Yixiang
    Liu, Jiqiang
    Chang, Xiaolin
    Rodriguez, Ricardo J.
    Wang, Jianhua
    INFORMATION SCIENCES, 2022, 610 : 14 - 32
  • [6] DI-AA: An interpretable white-box attack for fooling deep neural networks
    Wang, Yixiang
    Liu, Jiqiang
    Chang, Xiaolin
    Rodríguez, Ricardo J.
    Wang, Jianhua
    Information Sciences, 2022, 610 : 14 - 32
  • [7] Efficient White-Box Fairness Testing through Gradient Search
    Zhang, Lingfeng
    Zhang, Yueling
    Zhang, Min
    ISSTA '21: PROCEEDINGS OF THE 30TH ACM SIGSOFT INTERNATIONAL SYMPOSIUM ON SOFTWARE TESTING AND ANALYSIS, 2021, : 103 - 114
  • [8] A Robustness-Assured White-Box Watermark in Neural Networks
    Lv, Peizhuo
    Li, Pan
    Zhang, Shengzhi
    Chen, Kai
    Liang, Ruigang
    Ma, Hualong
    Zhao, Yue
    Li, Yingjiu
    IEEE TRANSACTIONS ON DEPENDABLE AND SECURE COMPUTING, 2023, 20 (06) : 5214 - 5229
  • [9] Robustness of Bayesian Neural Networks to White-Box Adversarial Attacks
    Uchendu, Adaku
    Campoy, Daniel
    Menart, Christopher
    Hildenbrandt, Alexandra
    2021 IEEE FOURTH INTERNATIONAL CONFERENCE ON ARTIFICIAL INTELLIGENCE AND KNOWLEDGE ENGINEERING (AIKE 2021), 2021, : 72 - 80
  • [10] NeuronFair: Interpretable White-Box Fairness Testing through Biased Neuron Identification
    Zheng, Haibin
    Chen, Zhiqing
    Du, Tianyu
    Zhang, Xuhong
    Cheng, Yao
    Ji, Shouling
    Wang, Jingyi
    Yu, Yue
    Chen, Jinyin
    2022 ACM/IEEE 44TH INTERNATIONAL CONFERENCE ON SOFTWARE ENGINEERING (ICSE 2022), 2022, : 1519 - 1531