“…Due to the pervasiveness of adversarial inputs [20,27,50,55,56,70,87], the machine learning community has put a great deal of effort into measuring and improving the robustness of networks [14,15,22,29,44,49,58,61,62,78,84]. The formal methods community has also been looking into the problem, by devising scalable DNN verification, optimization and monitoring techniques [1,4,5,[7][8][9]12,19,32,45,46,54,57,60,66,79,85]. Our approach uses a DNN verifier as a backend, and its scalability would improve as these verifiers become more scalable.…”