Robust and Stable Black Box Explanations

Abstract

As machine learning black boxes are increasingly being deployed in real-world applications, there has been a growing interest in developing post hoc explanations that summarize the behaviors of these black boxes. However, existing algorithms for generating such explanations have been shown to lack stability and robustness to distribution shifts. We propose a novel framework for generating robust and stable explanations of black box models based on adversarial training. Our framework optimizes a minimax objective that aims to construct the highest fidelity explanation with respect to the worst-case over a set of adversarial perturbations. We instantiate this algorithm for explanations in the form of linear models and decision sets by devising the required optimization procedures. To the best of our knowledge, this work makes the first attempt at generating post hoc explanations that are robust to a general class of adversarial perturbations that are of practical interest. Experimental evaluation with real-world and synthetic datasets demonstrates that our approach substantially improves robustness of explanations without sacrificing their fidelity on the original data distribution.

References in corpus (11)

• Towards A Rigorous Science of Interpretable Machine Learning
• Axiomatic Attribution for Deep Networks
• Interpretable classifiers using rules and Bayesian analysis: Building a better stroke prediction model
• SmoothGrad: removing noise by adding noise
• Sanity Checks for Saliency Maps
• Understanding Adversarial Training: Increasing Local Stability of Neural Nets through Robust Optimization
• Explanations can be manipulated and geometry is to blame
• Non-monotone submodular maximization under matroid and knapsack constraints
• Interpretability via Model Extraction
• Interpreting Neural Network Judgments via Minimal, Stable, and Symbolic Corrections
• Learning Interpretable Models with Causal Guarantees