English

Beyond NaN: Resiliency of Optimization Layers in The Face of Infeasibility

Machine Learning 2023-02-07 v2 Cryptography and Security Optimization and Control

Abstract

Prior work has successfully incorporated optimization layers as the last layer in neural networks for various problems, thereby allowing joint learning and planning in one neural network forward pass. In this work, we identify a weakness in such a set-up where inputs to the optimization layer lead to undefined output of the neural network. Such undefined decision outputs can lead to possible catastrophic outcomes in critical real time applications. We show that an adversary can cause such failures by forcing rank deficiency on the matrix fed to the optimization layer which results in the optimization failing to produce a solution. We provide a defense for the failure cases by controlling the condition number of the input matrix. We study the problem in the settings of synthetic data, Jigsaw Sudoku, and in speed planning for autonomous driving, building on top of prior frameworks in end-to-end learning and optimization. We show that our proposed defense effectively prevents the framework from failing with undefined output. Finally, we surface a number of edge cases which lead to serious bugs in popular equation and optimization solvers which can be abused as well.

Keywords

Cite

@article{arxiv.2202.06242,
  title  = {Beyond NaN: Resiliency of Optimization Layers in The Face of Infeasibility},
  author = {Wai Tuck Wong and Sarah Kinsey and Ramesha Karunasena and Thanh Nguyen and Arunesh Sinha},
  journal= {arXiv preprint arXiv:2202.06242},
  year   = {2023}
}

Comments

To appear in AAAI-23 Special Track on Safe and Robust AI