mlsanityData to 7 Oct 2026

COLEP: Certifiably Robust Learning-Reasoning Conformal Prediction via Probabilistic Circuits

arXiv 2403.11348 ↗First posted 17 Mar 2024cs.LG cs.AI stat.MLcited by 9

Not on the map. Why?

Abstract (arXiv)

Conformal prediction has shown spurring performance in constructing statistically rigorous prediction sets for arbitrary black-box machine learning models, assuming the data is exchangeable. However, even small adversarial perturbations during the inference can violate the exchangeability assumption, challenge the coverage guarantees, and result in a subsequent decline in empirical coverage. In this work, we propose a certifiably robust learning-reasoning conformal prediction framework (COLEP) via probabilistic circuits, which comprise a data-driven learning component that trains statistical models to learn different semantic concepts, and a reasoning component that encodes knowledge and characterizes the relationships among the trained models for logic reasoning. To achieve exact and efficient reasoning, we employ probabilistic circuits (PCs) within the reasoning component. Theoretically, we provide end-to-end certification of prediction coverage for COLEP in the presence of bounded adversarial perturbations. We also provide certified coverage considering the finite size of the calibration set. Furthermore, we prove that COLEP achieves higher prediction coverage and accuracy over a single model as long as the utilities of knowledge models are non-trivial. Empirically, we show the validity and tightness of our certified coverage, demonstrating the robust conformal prediction of COLEP on various datasets, including GTSRB, CIFAR10, and AwA2. We show that COLEP achieves up to 12% improvement in certified coverage on GTSRB, 9% on CIFAR-10, and 14% on AwA2.

Key facts. Cited by 9 papers in the map (data through 7 Oct 2026). Builds on 53 of its 80 references that are in the map. First posted on arXiv 17 Mar 2024.

Builds on

53 of 80 references.

References · 53

  1. 2017Attention Is All You Needcited by 59,932
  2. 2015Deep Residual Learning for Image Recognitioncited by 51,809
  3. 2014Explaining and Harnessing Adversarial Examplescited by 7,287
  4. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
  5. 2013Intriguing properties of neural networkscited by 5,114
  6. 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,442
  7. 2022Competition-Level Code Generation with AlphaCodecited by 1,427
  8. 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,324
  9. 2016Distribution-Free Predictive Inference For Regressioncited by 657
  10. 2017Provable defenses against adversarial examples via the convex outer adversarial polytopecited by 564
  11. 2017Zero-Shot Learning -- A Comprehensive Evaluation of the Good, the Bad and the Uglycited by 536
  12. 2023DecodingTrust: A Comprehensive Assessment of Trustworthiness in GPT Modelscited by 505
38 more
  1. 2018Certified Robustness to Adversarial Examples with Differential Privacycited by 462
  2. 2018Efficient Neural Network Robustness Certification with General Activation Functionscited by 439
  3. 2020Classification with Valid and Adaptive Coveragecited by 390
  4. 2019Neural Probabilistic Logic Programming in DeepProbLogcited by 389
  5. 2022Conformal prediction beyond exchangeabilitycited by 348
  6. 2019Provably Robust Deep Learning via Adversarially Trained Smoothed Classifierscited by 328
  7. 2018On the Effectiveness of Interval Bound Propagation for Training Verifiably Robust Modelscited by 322
  8. 2018Neural-Symbolic VQA: Disentangling Reasoning from Vision and Language Understandingcited by 304
  9. 2017A Semantic Loss Function for Deep Learning with Symbolic Knowledgecited by 267
  10. 2017Neural-Symbolic Learning and Reasoning: A Survey and Interpretationcited by 195
  11. 2018Spatially Transformed Adversarial Examplescited by 195
  12. 2018Lipschitz-Margin Training: Scalable Certification of Perturbation Invariance for Deep Neural Networkscited by 193
  13. 2022Semantic Probabilistic Layers for Neuro-Symbolic Learningcited by 103
  14. 2021Invisible for both Camera and LiDAR: Security of Multi-Sensor Fusion based Perception in Autonomous Driving Under Physical-World Attackscited by 101
  15. 2013A Differential Approach to Inference in Bayesian Networkscited by 93
  16. 2021CRFL: Certifiably Robust Federated Learning against Backdoor Attackscited by 91
  17. 2022SafeBench: A Benchmarking Platform for Safety Evaluation of Autonomous Vehiclescited by 65
  18. 2021Sensitivity Analysis of Individual Treatment Effects: A Robust Conformal Inference Approachcited by 62
  19. 2020TSS: Transformation-Specific Smoothing for Robustness Certificationcited by 49
  20. 2021Improved deterministic l2 robustness on CIFAR-10 and CIFAR-100cited by 47
  21. 2021Selection and Aggregation of Conformal Prediction Setscited by 46
  22. 2021CROP: Certifying Robust Policies for Reinforcement Learning through Functional Smoothingcited by 41
  23. 2021Policy Smoothing for Provably Robust Reinforcement Learningcited by 39
  24. 2023DiffAttack: Evasion Attacks Against Diffusion-Based Adversarial Purificationcited by 36
  25. 2018Differentially Private Data Generative Modelscited by 33
  26. 2022LOT: Layer-wise Orthogonal Training on Improving ℓ2 Certified Robustnesscited by 32
  27. 2019Characterizing Attacks on Deep Reinforcement Learningcited by 31
  28. 2024C-RAG: Certified Generation Risks for Retrieval-Augmented Language Modelscited by 27
  29. 2022COPA: Certifying Robust Policies for Offline Reinforcement Learning against Poisoning Attackscited by 25
  30. 2023Probabilistically robust conformal predictioncited by 25
  31. 2021Knowledge Enhanced Machine Learning Pipeline against Diverse Adversarial Attackscited by 24
  32. 2022Double Sampling Randomized Smoothingcited by 22
  33. 2022Fairness in Federated Learning via Core-Stabilitycited by 22
  34. 2021Multi Split Conformal Predictioncited by 21
  35. 2021Label-Assemble: Leveraging Multiple Datasets with Partial Labelscited by 20
  36. 2017On Relaxing Determinism in Arithmetic Circuitscited by 14
  37. 2020Improving Certified Robustness via Statistical Learning with Logical Reasoningcited by 12
  38. 2022Certifying Some Distributional Fairness with Subpopulation Decompositioncited by 11

50 most cited of 53 All 53 (JSON)

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2024: 3; 2025: 4; 2026: 2.

9 papers.