一句话:提出基于 SMT 的神经网络个体公平性验证方法,通过输入划分与神经元剪枝实现可扩展的认证与反例生成。
机器学习软件的公平性保障仍不足,神经网络复杂决策使认证困难。本文提出 Fairify,一种基于 SMT 的神经网络个体公平性验证方法。个体公平性要求相似个体在受保护属性不同时仍获相似对待,但因全局检查和非线性节点而难以验证。Fairify 利用生产模型的白盒访问,先划分输入域,再对每个分区作形式分析剪枝:小输入域上许多神经元始终不活跃,结合区间算术与激活启发式可剪去它们,从而给出公平性认证或反例。作者在来自四个来源的 25 个真实网络上评估,展示了有效性、可扩展性及相对基线的性能优势,并支持按领域和网络规模配置以及带松弛和反例的目标查询。
Fairness of machine learning (ML) software has become a major concern in the recent past. Although recent research on testing and improving fairness have demonstrated impact on real-world software, providing fairness guarantee in practice is still lacking. Certification of ML models is challenging because of the complex decision-making process of the models. In this paper, we proposed Fairify, an SMT-based approach to verify individual fairness property in neural network (NN) models. Individual fairness ensures that any two similar individuals get similar treatment irrespective of their protected attributes e.g., race, sex, age. Verifying this fairness property is hard because of the global checking and non-linear computation nodes in NN. We proposed sound approach to make individual fairness verification tractable for the developers. The key idea is that many neurons in the NN always remain inactive when a smaller part of the input domain is considered. So, Fairify leverages white-box access to the models in production and then apply formal analysis based pruning. Our approach adopts input partitioning and then prunes the NN for each partition to provide fairness certification or counterexample. We leveraged interval arithmetic and activation heuristic of the neurons to perform the pruning as necessary. We evaluated Fairify on 25 real-world neural networks collected from four different sources, and demonstrated the effectiveness, scalability and performance over baseline and closely related work. Fairify is also configurable based on the domain and size of the NN. Our novel formulation of the problem can answer targeted verification queries with relaxations and counterexamples, which have practical implications.