defense arXiv Apr 27, 2026 · 24d ago
Noémie Cohen, Mélanie Ducoffe, Christophe Gabreau et al. · Airbus · ONERA
Certified defense verifying neural network robustness against geometric perturbations like rotation, scaling, and shearing on images
Input Manipulation Attack vision
Safety-critical applications are required to perform as expected in normal operations. Image processing functions are often required to be insensitive to small geometric perturbations such as rotation, scaling, shearing or translation. This paper addresses the formal verification of neural networks against geometric perturbations on their image dataset. Our method Super-DeepG improves the reasoning used in linear relaxation techniques and Lipschitz optimization, and provides an implementation that leverages GPU hardware. By doing so, Super-DeepG achieves both precision and computational efficiency of robustness certification, to an extent that outperforms prior work. Super-DeepG is shared as an open-source tool on GitHub.
cnn Airbus · ONERA