为深度学习模型测试构建输入空间的地形图,精准定位失败区域。
TopoMap: A Feature-based Semantic Discriminator of the Topographical Regions in the Test Input Space
- 通过降维与聚类生成输入特征空间的地形图,按失败特征分组。
- 在可杀突变体上比随机选择提升35%,不可杀突变体上提升61%。
- 无需模型内部信息,适合各类深度学习系统测试与故障分析。
深度学习系统测试仍是开放挑战。尽管容易找到导致模型异常的输入,但按引发失败的特征对输入进行分组仍缺乏研究。现有方法引入的扰动往往只关注特定失败特征,忽略其他特征区域。本文提出TopoMap,构建输入特征空间的显式地形图。该方法为黑盒、模型无关,仅依赖输入特征。首先对输入进行降维得到嵌入表示,再进行聚类;不同模型需适配特定嵌入计算与聚类算法。我们提出一种新方法评估嵌入与聚类配置的优劣:使用一个深层神经网络(DNN)模拟人类评估者,判断两簇是否可通过其元素特征区分。该DNN自动选出最优拓扑地图。实验表明,TopoMap生成的地图包含可区分且有意义的区域。通过突变分析评估其有效性:在可杀突变体上,相比随机选择平均提升35%;在不可杀突变体上提升61%。
原文摘要 · Abstract (English)
Testing Deep Learning (DL)-based systems is an open challenge. Although it is relatively easy to find inputs that cause a DL model to misbehave, the grouping of inputs by features that make the DL model under test fail is largely unexplored. Existing approaches for DL testing introduce perturbations that may focus on specific failure-inducing features, while neglecting others that belong to different regions of the feature space. In this paper, we create an explicit topographical map of the input feature space. Our approach, named TopoMap, is both black-box and model-agnostic as it relies solely on features that characterise the input space. To discriminate the inputs according to the specific features they share, we first apply dimensionality reduction to obtain input embeddings, which are then subjected to clustering. Each DL model might require specific embedding computations and clustering algorithms to achieve a meaningful separation of inputs into discriminative groups. We propose a novel way to evaluate alternative configurations of embedding and clustering techniques. We used a deep neural network (DNN) as an approximation of a human evaluator who could tell whether a pair of clusters can be discriminated based on the features of the included elements. We use such a DNN to automatically select the optimal topographical map of the inputs among all those that are produced by different embedding/clustering configurations. The evaluation results show that the maps generated by TopoMap consist of distinguishable and meaningful regions. In addition, we evaluate the effectiveness of TopoMap using mutation analysis. In particular, we assess whether the clusters in our topographical map allow for an effective selection of mutation-killing inputs. Experimental results show that our approach outperforms random selection by 35% on average on killable mutants; by 61% on non-killable ones.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。