On the Safety of Interpretable Machine Learning: A Maximum Deviation Approach
Not on the map. Why?
Abstract (arXiv)
Interpretable and explainable machine learning has seen a recent surge of interest. We focus on safety as a key motivation behind the surge and make the relationship between interpretability and safety more quantitative. Toward assessing safety, we introduce the concept of maximum deviation via an optimization problem to find the largest deviation of a supervised learning model from a reference model regarded as safe. We then show how interpretability facilitates this safety assessment. For models including decision trees, generalized linear and additive models, the maximum deviation can be computed exactly and efficiently. For tree ensembles, which are not regarded as interpretable, discrete optimization techniques can still provide informative bounds. For a broader class of piecewise Lipschitz functions, we leverage the multi-armed bandit literature to show that interpretability produces tighter (regret) bounds on the maximum deviation. We present case studies, including one on mortgage approval, to illustrate our methods and the insights about models that may be obtained from deviation maximization.
Key facts. Cited by 7 papers in the map (data through 7 Oct 2026). Builds on 33 of its 72 references that are in the map. First posted on arXiv 2 Nov 2022.
Builds on
33 of 72 references.
References · 33
- 2015Distilling the Knowledge in a Neural Networkcited by 10,076
- 2017A Unified Approach to Interpreting Model Predictionscited by 6,488
- 2016"Why Should I Trust You?": Explaining the Predictions of Any Classifiercited by 5,040
- 2016Concrete Problems in AI Safetycited by 1,582
- 2017Towards A Rigorous Science of Interpretable Machine Learningcited by 1,400
- 2017Provable defenses against adversarial examples via the convex outer adversarial polytopecited by 564
- 2018Explaining Explanations: An Overview of Interpretability of Machine Learningcited by 508
- 2020Neural Additive Models: Interpretable Machine Learning with Neural Netscited by 318
- 2018Explanations based on the Missing: Towards Contrastive Explanations with Pertinent Negativescited by 261
- 2018Towards Fast Computation of Certified Robustness for ReLU Networkscited by 254
- 2019InterpretML: A Unified Framework for Machine Learning Interpretabilitycited by 243
- 2017Formal Verification of Piece-Wise Linear Feed-Forward Neural Networkscited by 241
21 more
- 2018Semidefinite relaxations for certifying robustness to adversarial examplescited by 178
- 2018Verifiable Reinforcement Learning via Policy Extractioncited by 176
- 2018A Dual Approach to Scalable Verification of Deep Networkscited by 125
- 2018Strong mixed-integer programming formulations for trained neural networkscited by 115
- 2020Enabling certification of verification-agnostic networks via memory-efficient semidefinite programmingcited by 65
- 2016Scalable Bayesian Rule Listscited by 64
- 2021A Dynamical System Perspective for Lipschitz Neural Networkscited by 59
- 2016On the Safety of Machine Learning: Cyber-Physical Systems, Decision Sciences, and Data Productscited by 52
- 2018Interpretable to Whom? A Role-based Model for Analyzing Interpretable Machine Learning Systemscited by 47
- 2015Evasion and Hardening of Tree Ensemble Classifierscited by 44
- 2015Simple regret for infinitely many armed banditscited by 39
- 2019An Inductive Synthesis Framework for Verifiable Reinforcement Learningcited by 39
- 2021Optimal Counterfactual Explanations in Tree Ensemblescited by 36
- 2019Generalized Linear Rule Modelscited by 34
- 2019Robustness Verification of Tree-based Modelscited by 33
- 2019Leveraging Latent Features for Local Explanationscited by 21
- 2021A Silicon Valley Love Triangle: Hiring Algorithms, Pseudo-Science, and the Quest for Auditabilitycited by 16
- 2019Finding and Visualizing Weaknesses of Deep Reinforcement Learning Agentscited by 15
- 2018Improving Simple Models with Confidence Profilescited by 12
- 2020Versatile Verification of Tree Ensemblescited by 12
- 2019Quantile Convolutional Neural Networks for Value at Risk Forecastingcited by 1
Built on by
Citing papers per year: 2023: 2; 2024: 3; 2025: 2.
7 papers.
- 2024A Primer on the Inner Workings of Transformer-based Language Modelscited by 83
- 2024Predictive Churn with the Set of Good Modelscited by 15
- 2023Bayesian Safe Policy Learning with Chance Constrained Optimization: Application to Military Security Assessment during the Vietnam Warcited by 4
- 2024What Sketch Explainability Really Means for Downstream Taskscited by 4
- 2023Towards interpretable-by-design deep learning algorithmscited by 3
- 2025Birds look like cars: Adversarial analysis of intrinsically interpretable deep learningcited by 3
- 2025Additive Models Explained: A Computational Complexity Approachcited by 3
- 2025Additive Models Explained: A Computational Complexity Approach24 Oct 2025
- 2025Birds look like cars: Adversarial analysis of intrinsically interpretable deep learning11 Mar 2025
- 2024A Primer on the Inner Workings of Transformer-based Language Models30 Apr 2024
- 2024What Sketch Explainability Really Means for Downstream Tasks14 Mar 2024
- 2024Predictive Churn with the Set of Good Models12 Feb 2024
- 2023Towards interpretable-by-design deep learning algorithms19 Nov 2023
- 2023Bayesian Safe Policy Learning with Chance Constrained Optimization: Application to Military Security Assessment during the Vietnam War17 Jul 2023