Editing a classifier by rewriting its prediction rules
Not on the map. Why?
Abstract (arXiv)
We present a methodology for modifying the behavior of a classifier by directly rewriting its prediction rules. Our approach requires virtually no additional data collection and can be applied to a variety of settings, including adapting a model to new environments, and modifying it to ignore spurious features. Our code is available at https://github.com/MadryLab/EditingClassifiers .
Key facts. Cited by 64 papers in the map (data through 7 Oct 2026). Builds on 63 of its 97 references that are in the map. First posted on arXiv 2 Dec 2021.
Builds on
63 of 97 references.
References · 63
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2014Microsoft COCO: Common Objects in Contextcited by 17,498
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
- 2014ImageNet Large Scale Visual Recognition Challengecited by 8,441
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2013Intriguing properties of neural networkscited by 5,114
- 2016"Why Should I Trust You?": Explaining the Predictions of Any Classifiercited by 5,040
- 2016DeepLab: Semantic Image Segmentation with Deep Convolutional Nets, Atrous Convolution, and Fully Connected CRFscited by 3,239
- 2013Visualizing and Understanding Convolutional Networkscited by 2,278
- 2020Shortcut Learning in Deep Neural Networkscited by 1,928
- 2014Unsupervised Domain Adaptation by Backpropagationcited by 1,906
38 more
- 2019Invariant Risk Minimizationcited by 1,832
- 2019Do ImageNet Classifiers Generalize to ImageNet?cited by 1,507
- 2020WILDS: A Benchmark of in-the-Wild Distribution Shiftscited by 1,366
- 2017Interpretability Beyond Feature Attribution: Quantitative Testing with Concept Activation Vectors (TCAV)cited by 1,309
- 2019Distributionally Robust Neural Networks for Group Shifts: On the Importance of Regularization for Worst-Case Generalizationcited by 1,232
- 2019LVIS: A Dataset for Large Vocabulary Instance Segmentationcited by 1,215
- 2020Concept Bottleneck Modelscited by 1,022
- 2019AugMix: A Simple Data Processing Method to Improve Robustness and Uncertaintycited by 897
- 2017Network Dissection: Quantifying Interpretability of Deep Visual Representationscited by 703
- 2019Interpreting the Latent Space of GANs for Semantic Face Editingcited by 691
- 2018Recognition in Terra Incognitacited by 655
- 2020GANSpace: Discovering Interpretable GAN Controlscited by 612
- 2021Knowledge Neurons in Pretrained Transformerscited by 590
- 2021Editing Factual Knowledge in Language Modelscited by 548
- 2021Fast Model Editing at Scalecited by 491
- 2015Optimal Transport for Domain Adaptationcited by 457
- 2019Learning the Difference that Makes a Difference with Counterfactually-Augmented Datacited by 428
- 2013DeCAF: A Deep Convolutional Activation Feature for Generic Visual Recognitioncited by 422
- 2020Noise or Signal: The Role of Image Backgrounds in Object Recognitioncited by 342
- 2020StyleSpace Analysis: Disentangled Controls for StyleGAN Image Generationcited by 331
- 2020Are we done with ImageNet?cited by 329
- 2014CNN Features off-the-shelf: an Astounding Baseline for Recognitioncited by 316
- 2019Counterfactual Visual Explanationscited by 312
- 2019A Fourier Perspective on Model Robustness in Computer Visioncited by 288
- 2016Revisiting Batch Normalization For Practical Domain Adaptationcited by 285
- 2020Understanding the Role of Individual Units in a Deep Neural Networkcited by 254
- 2019On the "steerability" of generative adversarial networkscited by 247
- 2020Concept Whitening for Interpretable Image Recognitioncited by 225
- 2019GANalyze: Toward Visual Definitions of Cognitive Image Propertiescited by 193
- 2020How Does Mixup Help With Robustness and Generalization?cited by 193
- 2020BREEDS: Benchmarks for Subpopulation Shiftcited by 155
- 2020Understanding Self-Training for Gradual Domain Adaptationcited by 149
- 2019Distributionally Robust Language Modelingcited by 142
- 2019Explaining Classifiers with Causal Concept Effect (CaCE)cited by 135
- 2019Adversarial Examples Are a Natural Consequence of Test Error in Noisecited by 114
- 2017Few-Shot Adversarial Domain Adaptationcited by 111
- 2019Towards Causal VQA: Revealing and Reducing Spurious Correlations by Invariant and Covariant Semantic Editingcited by 108
- 2019Improving Robustness Without Sacrificing Accuracy with Patch Gaussian Augmentationcited by 105
50 most cited of 63 All 63 (JSON)
Built on by
Citing papers per year: 2022: 18; 2023: 19; 2024: 19; 2025: 4; 2026: 4.
64 papers.
Sort:
By area:
- 2022Editing Models with Task Arithmeticcited by 1,076
- 2023Weak-to-Strong Generalization: Eliciting Strong Capabilities With Weak Supervisioncited by 445
- 2022Post-hoc Concept Bottleneck Modelscited by 289
- 2023Does Localization Inform Editing? Surprising Differences in Causality-Based Localization vs. Knowledge Editing in Language Modelscited by 237
- 2023Task Arithmetic in the Tangent Space: Improved Editing of Pre-Trained Modelscited by 218
- 2022Extremely Simple Activation Shaping for Out-of-Distribution Detectioncited by 212
- 2023Knowledge Editing for Large Language Models: A Surveycited by 189
- 2022Patching open-vocabulary models by interpolating weightscited by 187
- 2024A Comprehensive Study of Knowledge Editing for Large Language Modelscited by 157
- 2023Editing Implicit Assumptions in Text-to-Image Diffusion Modelscited by 128
- 2022Toward Transparent AI: A Survey on Interpreting the Inner Structures of Deep Neural Networkscited by 126
- 2024Safe LoRA: the Silver Lining of Reducing Safety Risks when Fine-tuning Large Language Modelscited by 122
38 more
- 2023Parameter Efficient Multi-task Model Fusion with Partial Linearizationcited by 64
- 2023Continual Learning: Applications and the Road Forwardcited by 59
- 2022Leveraging Explanations in Interactive Machine Learning: An Overviewcited by 52
- 2022Mechanistic Mode Connectivitycited by 50
- 2023Codebook Features: Sparse and Discrete Interpretability for Neural Networkscited by 45
- 2022Using Language to Extend to Unseen Domainscited by 34
- 2024In-Context Editing: Learning Knowledge from Self-Induced Distributionscited by 33
- 2023ReFACT: Updating Text-to-Image Models by Editing the Text Encodercited by 32
- 2022Repairing Neural Networks by Leaving the Right Past Behindcited by 27
- 2022Language Anisotropic Cross-Lingual Model Editingcited by 26
- 2022Rewriting Geometric Rules of a GANcited by 25
- 2023Overcoming Generic Knowledge Loss with Selective Parameter Updatecited by 23
- 2024Decomposing and Editing Predictions by Modeling Model Computationcited by 19
- 2024Concept Bottleneck Models Without Predefined Conceptscited by 17
- 2024Concept-Based Explanations in Computer Vision: Where Are We and Where Could We Go?cited by 17
- 2023Forgetting before Learning: Utilizing Parametric Arithmetic for Knowledge Updating in Large Language Modelscited by 15
- 2024Fine-Tuning Attention Modules Only: Enhancing Weight Disentanglement in Task Arithmeticcited by 14
- 2023Robust Weight Signatures: Gaining Robustness as Easy as Patching Weights?cited by 13
- 2022Artifact-Based Domain Generalization of Skin Lesion Modelscited by 11
- 2023Interpreting and Controlling Vision Foundation Models via Text Explanationscited by 11
- 2023A Framework for Interpretability in Machine Learning for Medical Imagingcited by 9
- 2024Parameter-tuning-free data entry error unlearning with adaptive selective synaptic dampeningcited by 9
- 2023Edit at your own risk: evaluating the robustness of edited models to distribution shiftscited by 8
- 2024Clarify: Improving Model Robustness With Natural Language Correctionscited by 8
- 2022Perspectives on Incorporating Expert Feedback into Model Updatescited by 7
- 2022Rank-One Editing of Encoder-Decoder Modelscited by 7
- 2024Towards Compositionality in Concept Learningcited by 7
- 2024Towards Practical Tool Usage for Continually Learning LLMscited by 6
- 2022Auditing Visualizations: Transparency Methods Struggle to Detect Anomalous Behaviorcited by 5
- 2024Reactive Model Correction: Mitigating Harm to Task-Relevant Features via Conditional Bias Suppressioncited by 5
- 2024Data Debiasing with Datamodels (D3M): Improving Subgroup Robustness via Data Selectioncited by 5
- 2024Learning Where to Edit Vision Transformerscited by 4
- 2025How to Enable Effective Cooperation Between Humans and NLP Models: A Survey of Principles, Formalizations, and Beyondcited by 4
- 2022Data-Centric Debugging: mitigating model failures via targeted data collectioncited by 3
- 2023Identifying and Mitigating Model Failures through Few-shot CLIP-aided Diffusion Generationcited by 3
- 2026Attribution-Guided Model Rectification of Unreliable Neural Network Behaviorscited by 3
- 2023Transferring Learning Trajectories of Neural Networkscited by 2
- 2024DREditor: An Time-efficient Approach for Building a Domain-specific Dense Retrieval Modelcited by 2
50 most cited of 64 All 64 (JSON)
- 2026MOMO: Mars Orbital Model Foundation Model for Mars Orbital Applications3 Apr 2026
- 2026Attribution-Guided Model Rectification of Unreliable Neural Network Behaviors8 Mar 2026
- 2026Let's Split Up: Zero-Shot Classifier Edits for Fine-Grained Video Understanding18 Feb 2026
- 2026Position: Capability Control Should be a Separate Goal From Alignment5 Feb 2026
- 2025ModHiFi: Identifying High Fidelity predictive components for Model Modification24 Nov 2025
- 2025Exploring and Leveraging Class Vectors for Classifier Editing13 Oct 2025
- 2025Ensuring Medical AI Safety: Interpretability-Driven Detection and Mitigation of Spurious Model Behavior and Associated Data23 Jan 2025
- 2025How to Enable Effective Cooperation Between Humans and NLP Models: A Survey of Principles, Formalizations, and Beyond10 Jan 2025
- 2024Learning Where to Edit Vision Transformers4 Nov 2024
- 2024Criticality and Safety Margins for Reinforcement Learning26 Sep 2024
- 2024Concept-Based Explanations in Computer Vision: Where Are We and Where Could We Go?20 Sep 2024
- 2024Model editing for distribution shifts in uranium oxide morphological analysis22 Jul 2024
38 more
- 2024Fine-Tuning Attention Modules Only: Enhancing Weight Disentanglement in Task Arithmetic9 Jul 2024
- 2024Concept Bottleneck Models Without Predefined Concepts4 Jul 2024
- 2024Towards Compositionality in Concept Learning26 Jun 2024
- 2024Data Debiasing with Datamodels (D3M): Improving Subgroup Robustness via Data Selection24 Jun 2024
- 2024In-Context Editing: Learning Knowledge from Self-Induced Distributions17 Jun 2024
- 2024Safe LoRA: the Silver Lining of Reducing Safety Risks when Fine-tuning Large Language Models27 May 2024
- 2024Decomposing and Editing Predictions by Modeling Model Computation17 Apr 2024
- 2024Reactive Model Correction: Mitigating Harm to Task-Relevant Features via Conditional Bias Suppression15 Apr 2024
- 2024Towards Practical Tool Usage for Continually Learning LLMs14 Apr 2024
- 2024Inference-Time Rule Eraser: Fair Recognition via Distilling and Removing Biased Rules7 Apr 2024
- 2024Parameter-tuning-free data entry error unlearning with adaptive selective synaptic dampening6 Feb 2024
- 2024Exploring higher-order neural network node interactions with total correlation6 Feb 2024
- 2024Clarify: Improving Model Robustness With Natural Language Corrections6 Feb 2024
- 2024DREditor: An Time-efficient Approach for Building a Domain-specific Dense Retrieval Model23 Jan 2024
- 2024A Comprehensive Study of Knowledge Editing for Large Language Models2 Jan 2024
- 2023Weak-to-Strong Generalization: Eliciting Strong Capabilities With Weak Supervision14 Dec 2023
- 2023Identifying and Mitigating Model Failures through Few-shot CLIP-aided Diffusion Generation9 Dec 2023
- 2023Continual Learning: Applications and the Road Forward20 Nov 2023
- 2023Forgetting before Learning: Utilizing Parametric Arithmetic for Knowledge Updating in Large Language Models14 Nov 2023
- 2023Codebook Features: Sparse and Discrete Interpretability for Neural Networks26 Oct 2023
- 2023Knowledge Editing for Large Language Models: A Survey24 Oct 2023
- 2023Interpreting and Controlling Vision Foundation Models via Text Explanations16 Oct 2023
- 2023Parameter Efficient Multi-task Model Fusion with Partial Linearization7 Oct 2023
- 2023A Framework for Interpretability in Machine Learning for Medical Imaging2 Oct 2023
- 2023Overcoming Generic Knowledge Loss with Selective Parameter Update23 Aug 2023
- 2023ReFACT: Updating Text-to-Image Models by Editing the Text Encoder1 Jun 2023
- 2023Transferring Learning Trajectories of Neural Networks23 May 2023
- 2023Task Arithmetic in the Tangent Space: Improved Editing of Pre-Trained Models22 May 2023
- 2023Implicit Visual Bias Mitigation by Posterior Estimate Sharpening of a Bayesian Neural Network29 Mar 2023
- 2023Delta-Patching: A Framework for Rapid Adaptation of Pre-trained Convolutional Networks without Base Performance Loss26 Mar 2023
- 2023Editing Implicit Assumptions in Text-to-Image Diffusion Models14 Mar 2023
- 2023Edit at your own risk: evaluating the robustness of edited models to distribution shifts28 Feb 2023
- 2023Robust Weight Signatures: Gaining Robustness as Easy as Patching Weights?24 Feb 2023
- 2023Does Localization Inform Editing? Surprising Differences in Causality-Based Localization vs. Knowledge Editing in Language Models10 Jan 2023
- 2022Editing Models with Task Arithmetic8 Dec 2022
- 2022Interactive Visual Feature Search28 Nov 2022
- 2022Rank-One Editing of Encoder-Decoder Models23 Nov 2022
- 2022Data-Centric Debugging: mitigating model failures via targeted data collection17 Nov 2022
50 newest of 64 All 64 (JSON)
- 2024Towards Practical Tool Usage for Continually Learning LLMs14 Apr 2024
- 2023Editing Implicit Assumptions in Text-to-Image Diffusion Modelscited by 128
- 2023Knowledge Editing for Large Language Models: A Surveycited by 189
- 2023Knowledge Editing for Large Language Models: A Survey24 Oct 2023
- 2022Editing Models with Task Arithmeticcited by 1,076
- 2022Post-hoc Concept Bottleneck Modelscited by 289
- 2023Does Localization Inform Editing? Surprising Differences in Causality-Based Localization vs. Knowledge Editing in Language Modelscited by 237
- 2023Task Arithmetic in the Tangent Space: Improved Editing of Pre-Trained Modelscited by 218
- 2022Extremely Simple Activation Shaping for Out-of-Distribution Detectioncited by 212
- 2022Patching open-vocabulary models by interpolating weightscited by 187
- 2024A Comprehensive Study of Knowledge Editing for Large Language Modelscited by 157
- 2022Toward Transparent AI: A Survey on Interpreting the Inner Structures of Deep Neural Networkscited by 126
- 2024Safe LoRA: the Silver Lining of Reducing Safety Risks when Fine-tuning Large Language Modelscited by 122
- 2023Parameter Efficient Multi-task Model Fusion with Partial Linearizationcited by 64
- 2023Continual Learning: Applications and the Road Forwardcited by 59
- 2022Leveraging Explanations in Interactive Machine Learning: An Overviewcited by 52
12 most cited of 58 All 58 (JSON)
- 2026MOMO: Mars Orbital Model Foundation Model for Mars Orbital Applications3 Apr 2026
- 2026Attribution-Guided Model Rectification of Unreliable Neural Network Behaviors8 Mar 2026
- 2026Let's Split Up: Zero-Shot Classifier Edits for Fine-Grained Video Understanding18 Feb 2026
- 2026Position: Capability Control Should be a Separate Goal From Alignment5 Feb 2026
- 2025Exploring and Leveraging Class Vectors for Classifier Editing13 Oct 2025
- 2025Ensuring Medical AI Safety: Interpretability-Driven Detection and Mitigation of Spurious Model Behavior and Associated Data23 Jan 2025
- 2025How to Enable Effective Cooperation Between Humans and NLP Models: A Survey of Principles, Formalizations, and Beyond10 Jan 2025
- 2024Learning Where to Edit Vision Transformers4 Nov 2024
- 2024Criticality and Safety Margins for Reinforcement Learning26 Sep 2024
- 2024Concept-Based Explanations in Computer Vision: Where Are We and Where Could We Go?20 Sep 2024
- 2024Model editing for distribution shifts in uranium oxide morphological analysis22 Jul 2024
- 2024Fine-Tuning Attention Modules Only: Enhancing Weight Disentanglement in Task Arithmetic9 Jul 2024
12 newest of 58 All 58 (JSON)