TL;DR
Formal verification of neural networks, which ensures safety across all inputs, is limited by GPU memory constraints. To address this, the authors adapted tensor parallelism and fully sharded data parallelism techniques for the auto_LiRPA and α,β-CROWN verification frameworks.
✦ Why It Matters
Engineers can now verify larger neural networks for safety, enhancing reliability in critical applications.
Key Takeaways
How It Works
Tensor Parallelism divides weight and relaxation-coefficient matrices across multiple GPUs, allowing for more extensive model verification without exceeding memory limits. Fully Sharded Data Parallelism focuses on sharding only weight matrices, using an AllGather operation per layer to maintain accuracy while significantly reducing memory requirements.
Related