mlsanityData to 14 Oct 2026

Auditing AI models for Verified Deployment under Semantic Specifications

arXiv 2109.12456 ↗First posted 25 Sep 2021cs.LG cs.AI cs.CVcited by 4

Not on the map. Why?

Abstract (arXiv)

Auditing trained deep learning (DL) models prior to deployment is vital for preventing unintended consequences. One of the biggest challenges in auditing is the lack of human-interpretable specifications for the DL models that are directly useful to the auditor. We address this challenge through a sequence of semantically-aligned unit tests, where each unit test verifies whether a predefined specification (e.g., accuracy over 95%) is satisfied with respect to controlled and semantically aligned variations in the input space (e.g., in face recognition, the angle relative to the camera). We enable such unit tests through variations in a semantically-interpretable latent space of a generative model. Further, we conduct certified training for the DL model through a shared latent space representation with the generative model. With evaluations on four different datasets, covering images of chest X-rays, human faces, ImageNet classes, and towers, we show how AuditAI allows us to obtain controlled variations for certified training. Thus, our framework, AuditAI, bridges the gap between semantically-aligned formal verification and scalability. A blog post accompanying the paper is at this link https://developer.nvidia.com/blog/nvidia-research-auditing-ai-models-for-verified-deployment-under-semantic-specifications

Key facts. Cited by 4 papers in the map (data through 14 Oct 2026). Builds on 58 of its 89 references that are in the map. First posted on arXiv 25 Sep 2021.

Builds on

58 of 89 references.

References · 58

  1. 2015Deep Residual Learning for Image Recognitioncited by 52,096
  2. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
  3. 2020Language Models are Few-Shot Learnerscited by 32,419
  4. 2014Explaining and Harnessing Adversarial Examplescited by 7,364
  5. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
  6. 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 6,013
  7. 2016Image-to-Image Translation with Conditional Adversarial Networkscited by 4,527
  8. 2014Deep Learning Face Attributes in the Wildcited by 3,693
  9. 2016Towards Evaluating the Robustness of Neural Networkscited by 2,998
  10. 2017Progressive Growing of GANs for Improved Quality, Stability, and Variationcited by 2,988
  11. 2018Large Scale GAN Training for High Fidelity Natural Image Synthesiscited by 2,626
  12. 2019CheXpert: A Large Chest Radiograph Dataset with Uncertainty Labels and Expert Comparisoncited by 1,423
38 more
  1. 2018Datasheets for Datasetscited by 1,386
  2. 2015LSUN: Construction of a Large-scale Image Dataset using Deep Learning with Humans in the Loopcited by 1,355
  3. 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,340
  4. 2018Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examplescited by 1,268
  5. 2016Colorful Image Colorizationcited by 1,114
  6. 2018Model Cards for Model Reportingcited by 1,080
  7. 2017ChestX-ray8: Hospital-scale Chest X-ray Database and Benchmarks on Weakly-Supervised Classification and Localization of Common Thorax Diseasescited by 972
  8. 2015Distillation as a Defense to Adversarial Perturbations against Deep Neural Networkscited by 678
  9. 2017Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methodscited by 546
  10. 2017Countering Adversarial Images using Input Transformationscited by 520
  11. 2017CheXNet: Radiologist-Level Pneumonia Detection on Chest X-Rays with Deep Learningcited by 461
  12. 2019On Evaluating Adversarial Robustnesscited by 447
  13. 2018Efficient Neural Network Robustness Certification with General Activation Functionscited by 445
  14. 2020In-Domain GAN Inversion for Real Image Editingcited by 420
  15. 2020Closed-Form Factorization of Latent Semantics in GANscited by 408
  16. 2020InterFaceGAN: Interpreting the Disentangled Face Representation Learned by GANscited by 394
  17. 2018Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Modelscited by 362
  18. 2018On the Effectiveness of Interval Bound Propagation for Training Verifiably Robust Modelscited by 328
  19. 2018Certified Defenses against Adversarial Examplescited by 306
  20. 2018Towards a Definition of Disentangled Representationscited by 296
  21. 2018Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionalitycited by 282
  22. 2018Learning to Drive in a Daycited by 273
  23. 2018Generating Adversarial Examples with Adversarial Networkscited by 258
  24. 2018Towards Fast Computation of Certified Robustness for ReLU Networkscited by 255
  25. 2020Understanding the Role of Individual Units in a Deep Neural Networkcited by 255
  26. 2017PixelDefend: Leveraging Generative Models to Understand and Defend against Adversarial Examplescited by 244
  27. 2019Large Scale Adversarial Representation Learningcited by 239
  28. 2019On Completeness-aware Concept-Based Explanations in Deep Neural Networkscited by 239
  29. 2019Algorithms for Verifying Deep Neural Networkscited by 221
  30. 2019Towards Stable and Efficient Training of Verifiably Robust Neural Networkscited by 205
  31. 2018Spatially Transformed Adversarial Examplescited by 195
  32. 2017Generating Natural Adversarial Examplescited by 183
  33. 2018Semidefinite relaxations for certifying robustness to adversarial examplescited by 179
  34. 2020Semantic Photo Manipulation with a Generative Image Priorcited by 178
  35. 2019Certified Robustness to Adversarial Word Substitutionscited by 168
  36. 2018Efficient Formal Safety Analysis of Neural Networkscited by 165
  37. 2021Paint by Wordcited by 107
  38. 2019Spatially-Aware Graph Neural Networks for Relational Behavior Forecasting from Sensor Datacited by 104

50 most cited of 58 All 58 (JSON)

Built on by

Cited by year

Citing papers per year: 2021: 1; 2022: 1; 2023: 1; 2024: 1.

4 papers.