Robustness Assessment of a Runway Object Classifier for Safe Aircraft Taxiing
This work addresses the need for rigorous safety certification in aviation AI, but it is an incremental case-study focused on a specific domain application.
The paper tackled the problem of certifying a deep neural network for aircraft taxiing safety by assessing its robustness to image perturbations, and proposed a method that reduced verification queries by nearly 60% while finding the classifier more vulnerable to noise than brightness or contrast changes.
As deep neural networks (DNNs) are becoming the prominent solution for many computational problems, the aviation industry seeks to explore their potential in alleviating pilot workload and in improving operational safety. However, the use of DNNs in this type of safety-critical applications requires a thorough certification process. This need can be addressed through formal verification, which provides rigorous assurances -- e.g.,~by proving the absence of certain mispredictions. In this case-study paper, we demonstrate this process using an image-classifier DNN currently under development at Airbus and intended for use during the aircraft taxiing phase. We use formal methods to assess this DNN's robustness to three common image perturbation types: noise, brightness and contrast, and some of their combinations. This process entails multiple invocations of the underlying verifier, which might be computationally expensive; and we therefore propose a method that leverages the monotonicity of these robustness properties, as well as the results of past verification queries, in order to reduce the overall number of verification queries required by nearly 60%. Our results provide an indication of the level of robustness achieved by the DNN classifier under study, and indicate that it is considerably more vulnerable to noise than to brightness or contrast perturbations.