arXiv:2410.22663cs.SEcs.CL2024-10中稿 · FSE 2025被引 8

自动检测文本分类模型预测是否可信,提升AI决策可靠性。

Automated Trustworthiness Oracle Generation for Machine Learning Text Classifiers

  • 通过语义相关性分析关键词与类别关系,自动判断预测可信度。
  • 相比仅依赖置信度的基线方法,准确率提升142%。
  • 适合关注AI可解释性与安全性的研究人员和工程师。

文本分类的机器学习应用广泛,但其决策可能受虚假关联影响,导致实际性能下降。传统评估指标难以建立人类信任,需人工验证解释结果,成本高且不可扩展。本文提出TOKI,首个自动化可信度评估方法:利用模型解释提取关键词汇,基于词嵌入衡量其与预测类别的语义相关性。同时引入新对抗攻击方法,针对TOKI发现的可信度漏洞。实验表明,仅依赖预测不确定性的基线无法有效区分可信/不可信预测;TOKI准确率比基线高142%;基于TOKI的攻击方法在更少扰动下优于SOTA方法A2T。

原文摘要 · Abstract (English)

Machine learning (ML) for text classification has been widely used in various domains. These applications can significantly impact ethics, economics, and human behavior, raising serious concerns about trusting ML decisions. Studies indicate that conventional metrics are insufficient to build human trust in ML models. These models often learn spurious correlations and predict based on them. In the real world, their performance can deteriorate significantly. To avoid this, a common practice is to test whether predictions are reasonable based on valid patterns in the data. Along with this, a challenge known as the trustworthiness oracle problem has been introduced. Due to the lack of automated trustworthiness oracles, the assessment requires manual validation of the decision process disclosed by explanation methods. However, this is time-consuming, error-prone, and unscalable. We propose TOKI, the first automated trustworthiness oracle generation method for text classifiers. TOKI automatically checks whether the words contributing the most to a prediction are semantically related to the predicted class. Specifically, we leverage ML explanations to extract the decision-contributing words and measure their semantic relatedness with the class based on word embeddings. We also introduce a novel adversarial attack method that targets trustworthiness vulnerabilities identified by TOKI. To evaluate their alignment with human judgement, experiments are conducted. We compare TOKI with a naive baseline based solely on model confidence and TOKI-guided adversarial attack method with A2T, a SOTA adversarial attack method. Results show that relying on prediction uncertainty cannot effectively distinguish between trustworthy and untrustworthy predictions, TOKI achieves 142% higher accuracy than the naive baseline, and TOKI-guided attack method is more effective with fewer perturbations than A2T.

可信度评估文本分类可解释性对抗攻击

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。