Auditing AI models for Verified Deployment under Semantic Specifications
Not on the map. Why?
Abstract (arXiv)
Auditing trained deep learning (DL) models prior to deployment is vital for preventing unintended consequences. One of the biggest challenges in auditing is the lack of human-interpretable specifications for the DL models that are directly useful to the auditor. We address this challenge through a sequence of semantically-aligned unit tests, where each unit test verifies whether a predefined specification (e.g., accuracy over 95%) is satisfied with respect to controlled and semantically aligned variations in the input space (e.g., in face recognition, the angle relative to the camera). We enable such unit tests through variations in a semantically-interpretable latent space of a generative model. Further, we conduct certified training for the DL model through a shared latent space representation with the generative model. With evaluations on four different datasets, covering images of chest X-rays, human faces, ImageNet classes, and towers, we show how AuditAI allows us to obtain controlled variations for certified training. Thus, our framework, AuditAI, bridges the gap between semantically-aligned formal verification and scalability. A blog post accompanying the paper is at this link https://developer.nvidia.com/blog/nvidia-research-auditing-ai-models-for-verified-deployment-under-semantic-specifications
Key facts. Cited by 4 papers in the map (data through 14 Oct 2026). Builds on 58 of its 89 references that are in the map. First posted on arXiv 25 Sep 2021.
Builds on
58 of 89 references.
References · 58
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 6,013
- 2016Image-to-Image Translation with Conditional Adversarial Networkscited by 4,527
- 2014Deep Learning Face Attributes in the Wildcited by 3,693
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,998
- 2017Progressive Growing of GANs for Improved Quality, Stability, and Variationcited by 2,988
- 2018Large Scale GAN Training for High Fidelity Natural Image Synthesiscited by 2,626
- 2019CheXpert: A Large Chest Radiograph Dataset with Uncertainty Labels and Expert Comparisoncited by 1,423
38 more
- 2018Datasheets for Datasetscited by 1,386
- 2015LSUN: Construction of a Large-scale Image Dataset using Deep Learning with Humans in the Loopcited by 1,355
- 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,340
- 2018Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examplescited by 1,268
- 2016Colorful Image Colorizationcited by 1,114
- 2018Model Cards for Model Reportingcited by 1,080
- 2017ChestX-ray8: Hospital-scale Chest X-ray Database and Benchmarks on Weakly-Supervised Classification and Localization of Common Thorax Diseasescited by 972
- 2015Distillation as a Defense to Adversarial Perturbations against Deep Neural Networkscited by 678
- 2017Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methodscited by 546
- 2017Countering Adversarial Images using Input Transformationscited by 520
- 2017CheXNet: Radiologist-Level Pneumonia Detection on Chest X-Rays with Deep Learningcited by 461
- 2019On Evaluating Adversarial Robustnesscited by 447
- 2018Efficient Neural Network Robustness Certification with General Activation Functionscited by 445
- 2020In-Domain GAN Inversion for Real Image Editingcited by 420
- 2020Closed-Form Factorization of Latent Semantics in GANscited by 408
- 2020InterFaceGAN: Interpreting the Disentangled Face Representation Learned by GANscited by 394
- 2018Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Modelscited by 362
- 2018On the Effectiveness of Interval Bound Propagation for Training Verifiably Robust Modelscited by 328
- 2018Certified Defenses against Adversarial Examplescited by 306
- 2018Towards a Definition of Disentangled Representationscited by 296
- 2018Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionalitycited by 282
- 2018Learning to Drive in a Daycited by 273
- 2018Generating Adversarial Examples with Adversarial Networkscited by 258
- 2018Towards Fast Computation of Certified Robustness for ReLU Networkscited by 255
- 2020Understanding the Role of Individual Units in a Deep Neural Networkcited by 255
- 2017PixelDefend: Leveraging Generative Models to Understand and Defend against Adversarial Examplescited by 244
- 2019Large Scale Adversarial Representation Learningcited by 239
- 2019On Completeness-aware Concept-Based Explanations in Deep Neural Networkscited by 239
- 2019Algorithms for Verifying Deep Neural Networkscited by 221
- 2019Towards Stable and Efficient Training of Verifiably Robust Neural Networkscited by 205
- 2018Spatially Transformed Adversarial Examplescited by 195
- 2017Generating Natural Adversarial Examplescited by 183
- 2018Semidefinite relaxations for certifying robustness to adversarial examplescited by 179
- 2020Semantic Photo Manipulation with a Generative Image Priorcited by 178
- 2019Certified Robustness to Adversarial Word Substitutionscited by 168
- 2018Efficient Formal Safety Analysis of Neural Networkscited by 165
- 2021Paint by Wordcited by 107
- 2019Spatially-Aware Graph Neural Networks for Relational Behavior Forecasting from Sensor Datacited by 104
50 most cited of 58 All 58 (JSON)
Built on by
Citing papers per year: 2021: 1; 2022: 1; 2023: 1; 2024: 1.
4 papers.
- 2023Effective Human-AI Teams via Learned Natural Language Rules and Onboardingcited by 20
- 2022Towards a More Rigorous Science of Blindspot Discovery in Image Classification Modelscited by 5
- 2021Auditing Robot Learning for Safety and Compliance during Deploymentcited by 4
- 2024Assessing the Auditability of AI-integrating Systems: A Framework and Learning Analytics Case Studycited by 3
- 2024Assessing the Auditability of AI-integrating Systems: A Framework and Learning Analytics Case Study29 Oct 2024
- 2023Effective Human-AI Teams via Learned Natural Language Rules and Onboarding2 Nov 2023
- 2022Towards a More Rigorous Science of Blindspot Discovery in Image Classification Models8 Jul 2022
- 2021Auditing Robot Learning for Safety and Compliance during Deployment12 Oct 2021