Inverting Supervised Representations with Autoregressive Neural Density Models
Not on the map. Why?
Abstract (arXiv)
We present a method for feature interpretation that makes use of recent advances in autoregressive density estimation models to invert model representations. We train generative inversion models to express a distribution over input features conditioned on intermediate model representations. Insights into the invariances learned by supervised models can be gained by viewing samples from these inversion models. In addition, we can use these inversion models to estimate the mutual information between a model's inputs and its intermediate representations, thus quantifying the amount of information preserved by the network at different stages. Using this method we examine the types of information preserved at different layers of convolutional neural networks, and explore the invariances induced by different architectural choices. Finally we show that the mutual information between inputs and network layers decreases over the course of training, supporting recent work by Shwartz-Ziv and Tishby (2017) on the information bottleneck theory of deep learning.
Key facts. Cited by 12 papers in the map (data through 14 Oct 2026). First posted on arXiv 1 Jun 2018.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 4; 2022: 2; 2023: 3; 2024: 1; 2025: 1; 2026: 1.
12 papers.
- 2023To Compress or Not to Compress- Self-Supervised Learning and Information Theory: A Reviewcited by 72
- 2021High Fidelity Visualization of What Your Self-Supervised Representation Knows Aboutcited by 66
- 2022Plug & Play Attacks: Towards Robust and Flexible Model Inversion Attackscited by 60
- 2021Farewell to Mutual Information: Variational Distillation for Cross-Modal Person Re-Identificationcited by 50
- 2022Orchestra: Unsupervised Federated Learning via Globally Consistent Clusteringcited by 45
- 2021Understanding Invariance via Feedforward Inversion of Discriminatively Trained Classifierscited by 11
- 2024Model Inversion Attacks: A Survey of Approaches and Countermeasurescited by 11
- 2021Darker than Black-Box: Face Reconstruction from Similarity Queriescited by 6
- 2023Finding Meaningful Distributions of ML Black-boxes under Forensic Investigationcited by 1
- 2023On the Adversarial Inversion of Deep Biometric Representationscited by 0
- 2025Revealing Unintentional Information Leakage in Low-Dimensional Facial Portrait Representationscited by 0
- 2026From Preimage Search To Source-Grounded Feature Inversioncited by 0
- 2026From Preimage Search To Source-Grounded Feature Inversion14 Jul 2026
- 2025Revealing Unintentional Information Leakage in Low-Dimensional Facial Portrait Representations12 Mar 2025
- 2024Model Inversion Attacks: A Survey of Approaches and Countermeasures15 Nov 2024
- 2023Finding Meaningful Distributions of ML Black-boxes under Forensic Investigation10 May 2023
- 2023To Compress or Not to Compress- Self-Supervised Learning and Information Theory: A Review19 Apr 2023
- 2023On the Adversarial Inversion of Deep Biometric Representations12 Apr 2023
- 2022Orchestra: Unsupervised Federated Learning via Globally Consistent Clustering23 May 2022
- 2022Plug & Play Attacks: Towards Robust and Flexible Model Inversion Attacks28 Jan 2022
- 2021High Fidelity Visualization of What Your Self-Supervised Representation Knows About16 Dec 2021
- 2021Darker than Black-Box: Face Reconstruction from Similarity Queries27 Jun 2021
- 2021Farewell to Mutual Information: Variational Distillation for Cross-Modal Person Re-Identification7 Apr 2021
- 2021Understanding Invariance via Feedforward Inversion of Discriminatively Trained Classifiers15 Mar 2021