Evaluating the Robustness of Interpretability Methods through Explanation Invariance and Equivariance

被引:0
作者
Crabbe, Jonathan [1 ]
van der Schaar, Mihaela [1 ]
机构
[1] Univ Cambridge, DAMTP, Cambridge, England
来源
ADVANCES IN NEURAL INFORMATION PROCESSING SYSTEMS 36 (NEURIPS 2023) | 2023年
关键词
BLACK-BOX;
D O I
暂无
中图分类号
TP18 [人工智能理论];
学科分类号
081104 ; 0812 ; 0835 ; 1405 ;
摘要
Interpretability methods are valuable only if their explanations faithfully describe the explained model. In this work, we consider neural networks whose predictions are invariant under a specific symmetry group. This includes popular architectures, ranging from convolutional to graph neural networks. Any explanation that faithfully explains this type of model needs to be in agreement with this invariance property. We formalize this intuition through the notion of explanation invariance and equivariance by leveraging the formalism from geometric deep learning. Through this rigorous formalism, we derive (1) two metrics to measure the robustness of any interpretability method with respect to the model symmetry group; (2) theoretical robustness guarantees for some popular interpretability methods and (3) a systematic approach to increase the invariance of any interpretability method with respect to a symmetry group. By empirically measuring our metrics for explanations of models associated with various modalities and symmetry groups, we derive a set of 5 guidelines to allow users and developers of interpretability methods to produce robust explanations.
引用
收藏
页数:37
相关论文
共 96 条
[21]  
Crabbe Jonathan, 2021, PR MACH LEARN RES, V139
[22]  
Crabbe Jonathan, 2022, PR MACH LEARN RES
[23]  
Crabbe Jonathan, 2022, Advances in Neural Information Processing Systems, V35, P12295
[24]  
Darlow L.N., 2018, arXiv
[25]  
Doshi-Velez Finale, 2017, arXiv
[26]   Improving performance of deep learning models with axiomatic attribution priors and expected gradients [J].
Erion, Gabriel ;
Janizek, Joseph D. ;
Sturmfels, Pascal ;
Lundberg, Scott M. ;
Lee, Su-In .
NATURE MACHINE INTELLIGENCE, 2021, 3 (07) :620-631
[27]  
Fey M ..., 2019, ICLR WORKSH REPR LEA
[28]  
Fisher A, 2019, J MACH LEARN RES, V20
[29]   Wirelessly Pickpocketing a Mifare Classic Card [J].
Garcia, Flavio D. ;
van Rossum, Peter ;
Verdult, Roel ;
Schreur, Ronny Wichers .
PROCEEDINGS OF THE 2009 30TH IEEE SYMPOSIUM ON SECURITY AND PRIVACY, 2009, :3-15
[30]  
Garima Frederick Liu, 2020, P 3 INT C NEUR INF P