Certifying Robustness to Programmable Data Bias in Decision Trees
Not on the map. Why?
Abstract (arXiv)
Datasets can be biased due to societal inequities, human biases, under-representation of minorities, etc. Our goal is to certify that models produced by a learning algorithm are pointwise-robust to potential dataset biases. This is a challenging problem: it entails learning models for a large, or even infinite, number of datasets, ensuring that they all produce the same prediction. We focus on decision-tree learning due to the interpretable nature of the models. Our approach allows programmatically specifying bias models across a variety of dimensions (e.g., missing data for minorities), composing types of bias, and targeting bias towards a specific group. To certify robustness, we use a novel symbolic technique to evaluate a decision-tree learner on a large, or infinite, number of datasets, certifying that each and every dataset produces the same prediction for a specific test point. We evaluate our approach on datasets that are commonly used in the fairness literature, and demonstrate our approach's viability on a range of bias models.
Key facts. Cited by 21 papers in the map (data through 14 Oct 2026). Builds on 19 of its 42 references that are in the map. First posted on arXiv 8 Oct 2021.
Builds on
19 of 42 references.
References · 19
- 2018Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networkscited by 519
- 2017Certified Defenses for Data Poisoning Attackscited by 303
- 2018Why Is My Classifier Discriminatory?cited by 143
- 2018Query-Efficient Hard-label Black-box Attack:An Optimization-based Approachcited by 130
- 2015Distributionally Robust Logistic Regressioncited by 126
- 2018Sever: A Robust Meta-Algorithm for Stochastic Optimizationcited by 125
- 2020Deep Partition Aggregation: Provable Defense against General Poisoning Attackscited by 115
- 2020Certified Robustness to Label-Flipping Attacks via Randomized Smoothingcited by 108
- 2019Recent Advances in Algorithmic High-Dimensional Robust Statisticscited by 101
- 2020Intrinsic Certified Robustness of Bagging against Data Poisoning Attackscited by 94
- 2018Label Sanitization against Label Flipping Poisoning Attackscited by 73
- 2021Introduction to Neural Network Verificationcited by 63
7 more
- 2020Certified Robustness of Nearest Neighbors against Data Poisoning and Backdoor Attackscited by 60
- 2019Robust Decision Trees Against Adversarial Examplescited by 40
- 2019Optimization and Abstraction: A Synergistic Approach for Analyzing Neural Network Robustnesscited by 40
- 2021Leave-one-out Unfairnesscited by 36
- 2020Ensuring Fairness Beyond the Training Datacited by 35
- 2019Provably Robust Boosted Decision Stumps and Trees against Adversarial Attackscited by 26
- 2020Robustness to Programmable String Transformations via Augmented Abstract Trainingcited by 8
Built on by
Citing papers per year: 2022: 4; 2023: 8; 2024: 3; 2025: 3; 2026: 3.
21 papers.
Sort:
By area:
- 2022FARE: Provably Fair Representation Learning with Practical Certificatescited by 21
- 2022BagFlip: A Certified Defense against Data Poisoningcited by 19
- 2023The Dataset Multiplicity Problem: How Unreliable Data Impacts Predictionscited by 17
- 2023Monitoring Algorithmic Fairnesscited by 8
- 2022Consistent Range Approximation for Fair Predictive Modelingcited by 7
- 2023Certifying the Fairness of KNN in the Presence of Dataset Biascited by 7
- 2023Monitoring Algorithmic Fairness under Partial Observationscited by 7
- 2023Toward Operationalizing Pipeline-aware ML Fairness: A Research Agenda for Developing Practical Guidelines and Toolscited by 7
- 2023PECAN: A Deterministic Certified Defense Against Backdoor Attackscited by 5
- 2024Provable Robustness of (Graph) Neural Networks Against Data Poisoning and Backdoor Attackscited by 5
- 2022Certifying Data-Bias Robustness in Linear Regressioncited by 3
- 2023Systematic Testing of the Data-Poisoning Robustness of KNNcited by 1
9 more
- 2024A Note on Bias to Completecited by 1
- 2026Analyzing Fairness of Neural Network Prediction via Counterfactual Dataset Generationcited by 1
- 2023Verification of Neural Networks Local Differential Classification Privacycited by 0
- 2024Timber! Poisoning Decision Treescited by 0
- 2025Monitoring of Static Fairnesscited by 0
- 2025Algorithmic Fairness: A Runtime Perspectivecited by 0
- 2025Robustness Certificates for Neural Networks Against Data Poisoning and Evasion Attackscited by 0
- 2026Exact Certification of Neural Networks and Partition Aggregation Ensembles against Label Poisoningcited by 0
- 2026Energy Shields for Fairnesscited by 0
- 2026Energy Shields for Fairness24 May 2026
- 2026Exact Certification of Neural Networks and Partition Aggregation Ensembles against Label Poisoning13 Apr 2026
- 2026Analyzing Fairness of Neural Network Prediction via Counterfactual Dataset Generation11 Feb 2026
- 2025Robustness Certificates for Neural Networks Against Data Poisoning and Evasion Attacks24 Dec 2025
- 2025Algorithmic Fairness: A Runtime Perspective28 Jul 2025
- 2025Monitoring of Static Fairness3 Jul 2025
- 2024Timber! Poisoning Decision Trees1 Oct 2024
- 2024Provable Robustness of (Graph) Neural Networks Against Data Poisoning and Backdoor Attacks15 Jul 2024
- 2024A Note on Bias to Complete18 Feb 2024
- 2023Verification of Neural Networks Local Differential Classification Privacy31 Oct 2023
- 2023Toward Operationalizing Pipeline-aware ML Fairness: A Research Agenda for Developing Practical Guidelines and Tools29 Sep 2023
- 2023Monitoring Algorithmic Fairness under Partial Observations1 Aug 2023
9 more
- 2023Certifying the Fairness of KNN in the Presence of Dataset Bias17 Jul 2023
- 2023Systematic Testing of the Data-Poisoning Robustness of KNN17 Jul 2023
- 2023Monitoring Algorithmic Fairness25 May 2023
- 2023The Dataset Multiplicity Problem: How Unreliable Data Impacts Predictions20 Apr 2023
- 2023PECAN: A Deterministic Certified Defense Against Backdoor Attacks27 Jan 2023
- 2022Consistent Range Approximation for Fair Predictive Modeling21 Dec 2022
- 2022FARE: Provably Fair Representation Learning with Practical Certificates13 Oct 2022
- 2022Certifying Data-Bias Robustness in Linear Regression7 Jun 2022
- 2022BagFlip: A Certified Defense against Data Poisoning26 May 2022
- 2022FARE: Provably Fair Representation Learning with Practical Certificatescited by 21
- 2023The Dataset Multiplicity Problem: How Unreliable Data Impacts Predictionscited by 17
- 2023Monitoring Algorithmic Fairnesscited by 8
- 2022Consistent Range Approximation for Fair Predictive Modelingcited by 7
- 2023Certifying the Fairness of KNN in the Presence of Dataset Biascited by 7
- 2023Monitoring Algorithmic Fairness under Partial Observationscited by 7
- 2023Toward Operationalizing Pipeline-aware ML Fairness: A Research Agenda for Developing Practical Guidelines and Toolscited by 7
- 2023PECAN: A Deterministic Certified Defense Against Backdoor Attackscited by 5
- 2024Provable Robustness of (Graph) Neural Networks Against Data Poisoning and Backdoor Attackscited by 5
- 2022Certifying Data-Bias Robustness in Linear Regressioncited by 3
- 2024A Note on Bias to Completecited by 1
- 2026Analyzing Fairness of Neural Network Prediction via Counterfactual Dataset Generationcited by 1
12 most cited of 18 All 18 (JSON)
- 2026Energy Shields for Fairness24 May 2026
- 2026Exact Certification of Neural Networks and Partition Aggregation Ensembles against Label Poisoning13 Apr 2026
- 2026Analyzing Fairness of Neural Network Prediction via Counterfactual Dataset Generation11 Feb 2026
- 2025Algorithmic Fairness: A Runtime Perspective28 Jul 2025
- 2025Monitoring of Static Fairness3 Jul 2025
- 2024Timber! Poisoning Decision Trees1 Oct 2024
- 2024Provable Robustness of (Graph) Neural Networks Against Data Poisoning and Backdoor Attacks15 Jul 2024
- 2024A Note on Bias to Complete18 Feb 2024
- 2023Verification of Neural Networks Local Differential Classification Privacy31 Oct 2023
- 2023Toward Operationalizing Pipeline-aware ML Fairness: A Research Agenda for Developing Practical Guidelines and Tools29 Sep 2023
- 2023Monitoring Algorithmic Fairness under Partial Observations1 Aug 2023
- 2023Certifying the Fairness of KNN in the Presence of Dataset Bias17 Jul 2023
12 newest of 18 All 18 (JSON)