Pathologies of Neural Models Make Interpretations Difficult
arXiv:1804.07781 · doi:10.18653/v1/D18-1407
Abstract
One way to interpret neural model predictions is to highlight the most important input features---for example, a heatmap visualization over the words in an input sentence. In existing interpretation methods for NLP, a word's importance is determined by either input perturbation---measuring the decrease in model confidence when that word is removed---or by the gradient with respect to that word. To understand the limitations of these methods, we use input reduction, which iteratively removes the least important word from the input. This exposes pathological behaviors of neural models: the remaining words appear nonsensical to humans and are not the ones determined as important by interpretation methods. As we confirm with human experiments, the reduced examples lack information to support the prediction of any label, but models still make the same predictions with high confidence. To explain these counterintuitive results, we draw connections to adversarial examples and confidence calibration: pathological behaviors reveal difficulties in interpreting neural models trained with maximum likelihood. To mitigate their deficiencies, we fine-tune the models by encouraging high entropy outputs on reduced examples. Fine-tuned models become more interpretable under input reduction without accuracy loss on regular examples.
arXiv commentEMNLP 2018 camera ready
References in corpus (26)
- Explaining and Harnessing Adversarial Examples
- Intriguing properties of neural networks
- Towards A Rigorous Science of Interpretable Machine Learning
- Axiomatic Attribution for Deep Networks
- On Calibration of Modern Neural Networks
- VQA: Visual Question Answering
- Delving into Transferable Adversarial Examples and Black-box Attacks
- SQuAD: 100,000+ Questions for Machine Comprehension of Text
- How to Explain Individual Classification Decisions
- Understanding Neural Networks through Representation Erasure
- A large annotated corpus for learning natural language inference
- QANet: Combining Local Convolution with Global Self-Attention for Reading Comprehension
- Synthetic and Natural Noise Both Break Neural Machine Translation
- Regularizing Neural Networks by Penalizing Confident Output Distributions
- Distributional Smoothing with Virtual Adversarial Training
- Adversarial Examples for Evaluating Reading Comprehension Systems
- Know What You Don't Know: Unanswerable Questions for SQuAD
- Adversarial Training Methods for Semi-Supervised Text Classification
- Beyond Word Importance: Contextual Decomposition to Extract Interactions from LSTMs
- Visualizing and Understanding Neural Models in NLP
- The (Un)reliability of saliency methods
- Show, Ask, Attend, and Answer: A Strong Baseline For Visual Question Answering
- A Thorough Examination of the CNN/Daily Mail Reading Comprehension Task
- Bilateral Multi-Perspective Matching for Natural Language Sentences
- HotFlip: White-Box Adversarial Examples for Text Classification
- Interpretation of Neural Networks is Fragile
Cited by in corpus (52)
- Attention is not Explanation
- A Survey of the State of Explainable AI for Natural Language Processing
- Evaluating the State-of-the-Art of End-to-End Natural Language Generation: The E2E NLG Challenge
- Adapt or Get Left Behind: Domain Adaptation through BERT Language Model Finetuning for Aspect-Target Sentiment Classification
- Is BERT Really Robust? A Strong Baseline for Natural Language Attack on Text Classification and Entailment
- How model accuracy and explanation fidelity influence user trust
- Evaluating Models' Local Decision Boundaries via Contrast Sets
- Interpreting Graph Neural Networks for NLP With Differentiable Edge Masking
- Inseq: An Interpretability Toolkit for Sequence Generation Models
- Pretrained Transformers Improve Out-of-Distribution Robustness
- ferret: a Framework for Benchmarking Explainers on Transformers
- BERT & Family Eat Word Salad: Experiments with Text Understanding
- What can AI do for me: Evaluating Machine Learning Interpretations in Cooperative Play
- Explaining Black Box Predictions and Unveiling Data Artifacts through Influence Functions
- B-AVIBench: Towards Evaluating the Robustness of Large Vision-Language Model on Black-box Adversarial Visual-Instructions
- AllenNLP Interpret: A Framework for Explaining Predictions of NLP Models
- Text-CRS: A Generalized Certified Robustness Framework against Textual Adversarial Attacks
- From text to multimodal: a survey of adversarial example generation in question answering systems
- Exploring the Robustness of NMT Systems to Nonsensical Inputs
- Overinterpretation reveals image classification model pathologies
- Incorporating Priors with Feature Attribution on Text Classification
- CheerBots: Chatbots toward Empathy and Emotionusing Reinforcement Learning
- A Visual Analytics Framework for Adversarial Text Generation
- Quizbowl: The Case for Incremental Question Answering
- Interpretation of NLP models through input marginalization
- ShufText: A Simple Black Box Approach to Evaluate the Fragility of Text Classification Models
- TextDecepter: Hard Label Black Box Attack on Text Classifiers
- Train No Evil: Selective Masking for Task-Guided Pre-Training
- Assessing the Benchmarking Capacity of Machine Reading Comprehension Datasets
- Gradient-based Analysis of NLP Models is Manipulable
- Measuring Faithful and Plausible Visual Grounding in VQA
- It Takes Two Flints to Make a Fire: Multitask Learning of Neural Relation and Explanation Classifiers
- Evaluating Neural Machine Comprehension Model Robustness to Noisy Inputs and Adversarial Attacks
- FastIF: Scalable Influence Functions for Efficient Model Interpretation and Debugging
- Interactive Refinement of Cross-Lingual Word Embeddings
- AES Systems Are Both Overstable And Oversensitive: Explaining Why And Proposing Defenses
- R3: A Reading Comprehension Benchmark Requiring Reasoning Processes
- MSSRNet: Manipulating Sequential Style Representation for Unsupervised Text Style Transfer
- Lost In Translation: Generating Adversarial Examples Robust to Round-Trip Translation
- Neural Machine Translation: A Review and Survey
- Element Intervention for Open Relation Extraction
- Explaining Relation Classification Models with Semantic Extents
- Making Document-Level Information Extraction Right for the Right Reasons
- Go Beyond Plain Fine-tuning: Improving Pretrained Models for Social Commonsense
- Explaining the Road Not Taken
- Evaluating the Values of Sources in Transfer Learning
- DuReader_robust: A Chinese Dataset Towards Evaluating Robustness and Generalization of Machine Reading Comprehension in Real-World Applications
- Towards Explainable Fact Checking
- Neural Path Hunter: Reducing Hallucination in Dialogue Systems via Path Grounding
- VGNMN: Video-grounded Neural Module Network to Video-Grounded Language Tasks
- When Stability meets Sufficiency: Informative Explanations that do not Overwhelm
- AdvExpander: Generating Natural Language Adversarial Examples by Expanding Text