mlsanityData to 7 Oct 2026

Automatic Fairness Testing of Neural Classifiers through Adversarial Sampling

arXiv 2107.08176 ↗First posted 17 Jul 2021cs.LG cs.AI cs.CYcited by 14

Not on the map. Why?

Abstract (arXiv)

Although deep learning has demonstrated astonishing performance in many applications, there are still concerns about its dependability. One desirable property of deep learning applications with societal impact is fairness (i.e., non-discrimination). Unfortunately, discrimination might be intrinsically embedded into the models due to the discrimination in the training data. As a countermeasure, fairness testing systemically identifies discriminatory samples, which can be used to retrain the model and improve the model's fairness. Existing fairness testing approaches however have two major limitations. Firstly, they only work well on traditional machine learning models and have poor performance (e.g., effectiveness and efficiency) on deep learning models. Secondly, they only work on simple structured (e.g., tabular) data and are not applicable for domains such as text. In this work, we bridge the gap by proposing a scalable and effective approach for systematically searching for discriminatory samples while extending existing fairness testing approaches to address a more challenging domain, i.e., text classification. Compared with state-of-the-art methods, our approach only employs lightweight procedures like gradient computation and clustering, which is significantly more scalable and effective. Experimental results show that on average, our approach explores the search space much more effectively (9.62 and 2.38 times more than the state-of-the-art methods respectively on tabular and text datasets) and generates much more discriminatory samples (24.95 and 2.68 times) within a same reasonable time. Moreover, the retrained models reduce discrimination by 57.2% and 60.2% respectively on average.

Key facts. Cited by 14 papers in the map (data through 7 Oct 2026). Builds on 31 of its 64 references that are in the map. First posted on arXiv 17 Jul 2021.

Builds on

31 of 64 references.

References · 31

  1. 2014Explaining and Harnessing Adversarial Examplescited by 7,287
  2. 2013Intriguing properties of neural networkscited by 5,114
  3. 2016"Why Should I Trust You?": Explaining the Predictions of Any Classifiercited by 5,040
  4. 2014Learning Phrase Representations using RNN Encoder-Decoder for Statistical Machine Translationcited by 4,016
  5. 2014Sequence to Sequence Learning with Neural Networkscited by 2,974
  6. 2015FaceNet: A Unified Embedding for Face Recognition and Clusteringcited by 2,833
  7. 2016Adversarial examples in the physical worldcited by 1,762
  8. 2016Man is to Computer Programmer as Woman is to Homemaker? Debiasing Word Embeddingscited by 1,304
  9. 2015The Limitations of Deep Learning in Adversarial Settingscited by 784
  10. 2014Certifying and removing disparate impactcited by 715
  11. 2018TextBugger: Generating Adversarial Text Against Real-world Applicationscited by 376
  12. 2018On the Effectiveness of Interval Bound Propagation for Training Verifiably Robust Modelscited by 322
19 more
  1. 2017DeepXplore: Automated Whitebox Testing of Deep Learning Systemscited by 307
  2. 2017DeepTest: Automated Testing of Deep-Neural-Network-driven Autonomous Carscited by 249
  3. 2016Ex Machina: Personal Attacks Seen at Scalecited by 208
  4. 2017Data Decisions and Theoretical Implications when Adversarially Learning Fair Representationscited by 165
  5. 2019Certified Robustness to Adversarial Word Substitutionscited by 164
  6. 2018Counterfactual Fairness in Text Classification through Robustnesscited by 150
  7. 2018Why Is My Classifier Discriminatory?cited by 143
  8. 2019Privacy Risks of Securing Machine Learning Models against Adversarial Examplescited by 136
  9. 2017Fairness Testing: Testing Software for Discriminationcited by 123
  10. 2018Guiding Deep Learning System Testing using Surprise Adequacycited by 123
  11. 2016Crafting Adversarial Input Sequences for Recurrent Neural Networkscited by 102
  12. 2019Achieving Verified Robustness to Symbol Substitutions via Interval Bound Propagationcited by 87
  13. 2018Automated Directed Fairness Testingcited by 77
  14. 2016Satisfying Real-world Goals with Dataset Constraintscited by 68
  15. 2018Adversarial Sample Detection for Deep Neural Network through Model Mutation Testingcited by 48
  16. 2018Probabilistic Verification of Fairness Properties via Concentrationcited by 45
  17. 2021RobOT: Robustness-Oriented Testing for Deep Learning Systemscited by 27
  18. 2020Robustness to Programmable String Transformations via Augmented Abstract Trainingcited by 8
  19. 2018Detecting Adversarial Samples for Deep Neural Networks through Mutation Testingcited by 5

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2021: 1; 2022: 1; 2023: 7; 2024: 4; 2025: 0; 2026: 1.

14 papers.

Sort: