paperbot · PL 论文追踪

全部论文 待读 收藏

P1 Fairify: Fairness Verification of Neural Networks

Fairify:神经网络的公平性验证
ICSE 2023 IEEE/ACM 45th International Conference on Software Engineering (ICSE)2023匹配度 6/10 · 该论文将 SMT 与形式化验证用于神经网络公平性认证,属于 PL/程序验证方法在 ML 系统上的应用,与“机器学习系统静态分析/程序验证”方向有交集;但它不涉及 Agentic/LLM、浮点程序分析或贝叶斯程序分析,因此不是研究画像的核心方向。引用 49 inbox
Sumon Biswas, Hridesh Rajan
crossref: 2026-09-12dblp: 2026-09-12arxiv: 2026-09-12

AI 速览

一句话:提出基于 SMT 的神经网络个体公平性验证方法,通过输入划分与神经元剪枝实现可扩展的认证与反例生成。

机器学习软件的公平性保障仍不足,神经网络复杂决策使认证困难。本文提出 Fairify,一种基于 SMT 的神经网络个体公平性验证方法。个体公平性要求相似个体在受保护属性不同时仍获相似对待,但因全局检查和非线性节点而难以验证。Fairify 利用生产模型的白盒访问,先划分输入域,再对每个分区作形式分析剪枝:小输入域上许多神经元始终不活跃,结合区间算术与激活启发式可剪去它们,从而给出公平性认证或反例。作者在来自四个来源的 25 个真实网络上评估,展示了有效性、可扩展性及相对基线的性能优势,并支持按领域和网络规模配置以及带松弛和反例的目标查询。

问题
如何为神经网络模型提供个体公平性保证:相似个体不因受保护属性(种族、性别、年龄等)而受到不同对待。由于需要全局检查且网络含非线性节点,该验证通常难以处理。
方法
提出基于 SMT 的 Fairify:利用白盒访问对输入域划分,并在各分区上结合区间算术与神经元激活启发式进行形式分析剪枝,剪去不活跃神经元,以返回公平性认证或反例,也支持带松弛的目标查询。
评估
在来自四个来源的 25 个真实神经网络上评估,验证方法的有效性、可扩展性和性能,并与基线和相关工作比较;方法可按领域和网络规模配置。
原文摘要(Abstract)

Fairness of machine learning (ML) software has become a major concern in the recent past. Although recent research on testing and improving fairness have demonstrated impact on real-world software, providing fairness guarantee in practice is still lacking. Certification of ML models is challenging because of the complex decision-making process of the models. In this paper, we proposed Fairify, an SMT-based approach to verify individual fairness property in neural network (NN) models. Individual fairness ensures that any two similar individuals get similar treatment irrespective of their protected attributes e.g., race, sex, age. Verifying this fairness property is hard because of the global checking and non-linear computation nodes in NN. We proposed sound approach to make individual fairness verification tractable for the developers. The key idea is that many neurons in the NN always remain inactive when a smaller part of the input domain is considered. So, Fairify leverages white-box access to the models in production and then apply formal analysis based pruning. Our approach adopts input partitioning and then prunes the NN for each partition to provide fairness certification or counterexample. We leveraged interval arithmetic and activation heuristic of the neurons to perform the pruning as necessary. We evaluated Fairify on 25 real-world neural networks collected from four different sources, and demonstrated the effectiveness, scalability and performance over baseline and closely related work. Fairify is also configurable based on the domain and size of the NN. Our novel formulation of the problem can answer targeted verification queries with relaxations and counterexamples, which have practical implications.

链接与引用

DOI 原文 · arXiv · PDF(开放获取) · DBLP

BibTeX
@inproceedings{abs-2212-06140,
  title = {Fairify: Fairness Verification of Neural Networks},
  author = {Sumon Biswas and Hridesh Rajan},
  booktitle = {ICSE},
  year = {2023},
  doi = {10.1109/icse48619.2023.00134}
}