TESTNAV Optimizes Robustness Testing for Deep Learning Models.

Arooj Arif, Tobias Hartung, Elena Botoeva, Alexandros Koliousis· August 21, 2026 View original

Key takeaways

  • TESTNAV efficiently tests deep learning models against compositional perturbations.
  • It formulates robustness testing as a bi-objective optimization problem.
  • The framework maximizes performance degradation while preserving input fidelity.
  • TESTNAV recovers Pareto fronts significantly faster than baseline methods.

Who benefits

AutomotiveHealthcareCybersecuritySoftware DevelopmentFinance

Summary

This paper introduces TESTNAV, a Pareto-guided framework for efficiently testing deep learning models against compositional input perturbations. It formulates robustness testing as a bi-objective optimization problem, maximizing performance degradation while preserving input fidelity, and uses NSGA-II to find severe yet realistic failures faster than baseline methods.

Deep learning models are known to be vulnerable to real-world input perturbations, especially when multiple corruptions, such as brightness shifts combined with motion blur, occur simultaneously. Testing for these "compositional" effects is challenging due to the combinatorial explosion of the perturbation space and the fact that many combinations result in unrealistic inputs with limited diagnostic value. To address these challenges, researchers present TESTNAV, a Pareto-guided robustness testing framework. TESTNAV is designed for efficiently exploring discrete, compositional perturbation spaces, particularly when the number of evaluable configurations is limited. It reframes robustness testing as a bi-objective optimization problem: the goal is to maximize performance degradation while simultaneously preserving the input's fidelity, which is measured using modality-specific metrics like SSIM for vision or BERT-F1 for language. The framework employs the NSGA-II algorithm to approximate the bi-objective Pareto front, effectively prioritizing severe yet realistic failures. Across four benchmarks spanning vision, natural language, and code generation, TESTNAV demonstrated significant efficiency gains. It recovered Pareto fronts up to 2.15 times faster than search-based baselines, utilizing only 35.8% to 89.3% of the discrete perturbation space defined by four perturbation dimensions with six levels each.

Why it matters

For professionals developing and deploying deep learning models, TESTNAV offers a more efficient and targeted approach to robustness testing, enabling the identification of critical vulnerabilities under realistic conditions without exhaustive and costly evaluations.

How to implement this in your domain

  1. 1Evaluate TESTNAV as a method for robustness testing of your deep learning models, especially for compositional perturbations.
  2. 2Define modality-specific fidelity metrics relevant to your model's input data (e.g., image quality, text coherence).
  3. 3Experiment with formulating robustness testing as a bi-objective optimization problem in your ML pipeline.
  4. 4Integrate Pareto-guided search algorithms like NSGA-II to efficiently explore perturbation spaces.
  5. 5Benchmark the efficiency and effectiveness of TESTNAV against your current robustness testing methodologies.

Original post by Arooj Arif, Tobias Hartung, Elena Botoeva, Alexandros Koliousis

"arXiv:2608.19882v1 Announce Type: new Abstract: Deep learning models remain vulnerable to real-world input perturbations, especially when multiple corruptions co-occur in the same input (e.g., brightness shifts and motion blur). Compositional testing reveals these interaction eff…"

View on X

Originally posted by Arooj Arif, Tobias Hartung, Elena Botoeva, Alexandros Koliousis on X · view source

Want to go deeper?

Turn these trends into skills with Learnijoy's hands-on AI & tech courses.

Explore courses