Inverse classification with logistic and softmax classifiers: efficient optimization
Not on the map. Why?
Abstract (arXiv)
In recent years, a certain type of problems have become of interest where one wants to query a trained classifier. Specifically, one wants to find the closest instance to a given input instance such that the classifier's predicted label is changed in a desired way. Examples of these "inverse classification" problems are counterfactual explanations, adversarial examples and model inversion. All of them are fundamentally optimization problems over the input instance vector involving a fixed classifier, and it is of interest to achieve a fast solution for interactive or real-time applications. We focus on solving this problem efficiently with the squared Euclidean distance for two of the most widely used classifiers: logistic regression and softmax classifier. Owing to special properties of these models, we show that the optimization can be solved in closed form for logistic regression, and iteratively but extremely fast for the softmax classifier. This allows us to solve either case exactly (to nearly machine precision) in a runtime of milliseconds to around a second even for very high-dimensional instances and many classes.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 26 of its 53 references that are in the map. First posted on arXiv 16 Sep 2023.
Builds on
26 of 53 references.
References · 26
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,364
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2013Intriguing properties of neural networkscited by 5,155
- 2021Convex optimizationcited by 2,515
- 2013Deep Inside Convolutional Networks: Visualising Image Classification Models and Saliency Mapscited by 2,371
- 2013Visualizing and Understanding Convolutional Networkscited by 2,290
- 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,318
- 2017Counterfactual Explanations without Opening the Black Box: Automated Decisions and the GDPRcited by 1,089
- 2018Generating Natural Language Adversarial Examplescited by 424
- 2018Actionable Recourse in Linear Classificationcited by 328
- 2018Audio Adversarial Examples: Targeted Attacks on Speech-to-Textcited by 274
- 2018Explanations based on the Missing: Towards Contrastive Explanations with Pertinent Negativescited by 262
14 more
- 2019Interpretable Counterfactual Explanations Guided by Prototypescited by 223
- 2019The What-If Tool: Interactive Probing of Machine Learning Modelscited by 207
- 2019Model-Agnostic Counterfactual Explanations for Consequential Decisionscited by 204
- 2016Synthesizing the preferred inputs for neurons in neural networks via deep generator networkscited by 181
- 2015Inverting Visual Representations with Convolutional Networkscited by 170
- 2019Efficient Search for Diverse Coherent Explanationscited by 111
- 2015Visualizing Deep Convolutional Neural Networks Using Natural Pre-Imagescited by 93
- 2015Evasion and Hardening of Tree Ensemble Classifierscited by 44
- 2021Optimal Counterfactual Explanations in Tree Ensemblescited by 36
- 2019CERTIFAI: Counterfactual Explanations for Robustness, Transparency, Interpretability, and Fairness of Artificial Intelligence modelscited by 34
- 2019Robustness Verification of Tree-based Modelscited by 33
- 2021Counterfactual Explanations for Oblique Decision Trees: Exact, Efficient Algorithmscited by 14
- 2023Very fast, approximate counterfactual explanations for decision forestscited by 4
- 2019Sampling the "Inverse Set" of a Neuron: An Approach to Understanding Neural Netscited by 2
Built on by
Not cited yet.