paperbot · PL 论文追踪

全部论文 待读 收藏

P2 Causality-based neural network repair

基于因果性的神经网络修复
ICSE Proceedings of the 44th International Conference on Software Engineering2022匹配度 3/10 · 该论文研究神经网络修复与因果故障定位,属于机器学习系统的可靠性/调试方向,但与用户核心关注的程序静态分析、Agentic/LLM 程序分析、浮点程序分析或贝叶斯程序分析无直接关联,也未将 LLM/Agent 用于改进程序分析。引用 115 inbox
Bing Sun, Jun Sun, Long H. Pham, Jie Shi
crossref: 2026-09-12dblp: 2026-09-12arxiv: 2026-09-12

AI 速览

一句话:提出基于因果性的神经网络修复技术CARE,通过定位问题神经元并优化参数来修复公平性、后门与安全缺陷。

神经网络在广泛应用中带来可靠性与安全性担忧,其缺陷可能导致不安全行为、安全风险或不公平社会影响。本文面向公平性、无后门和安全属性等目标,研究在尽量小地调整给定网络参数的前提下修复神经网络。作者提出 CARE(CAusality-based REpair),先用基于因果关系的故障定位找出“有罪”神经元,再优化这些神经元的参数以减少错误行为。实验在去后门、公平性修复和安全属性修复等任务上评估 CARE。结果显示,CARE 能高效有效地修复所有网络:公平性平均提升61.91%,后门攻击成功率从超过98%降至1%以下,安全属性违反率降至1%以下,并因因果定位而聚焦错误行为、保持原网络准确率。

问题
神经网络缺陷可能引发不安全行为、安全风险或社会不公,如何通过最小化参数调整修复网络,使其满足公平性、无后门或安全属性等期望性质。
方法
提出 CARE,一种基于因果性的修复技术:先进行因果故障定位识别导致错误行为的“有罪”神经元,再优化这些神经元的权值参数以降低误行为。
评估
在去后门、公平性和安全属性修复等任务上实验,评估修复效果;公平性平均提升61.91%,后门攻击成功率降至1%以下,安全违反率降至1%以下,并保持准确率。
原文摘要(Abstract)

Neural networks have had discernible achievements in a wide range of applications. The wide-spread adoption also raises the concern of their dependability and reliability. Similar to traditional decision-making programs, neural networks can have defects that need to be repaired. The defects may cause unsafe behaviors, raise security concerns or unjust societal impacts. In this work, we address the problem of repairing a neural network for desirable properties such as fairness and the absence of backdoor. The goal is to construct a neural network that satisfies the property by (minimally) adjusting the given neural network's parameters (i.e., weights). Specifically, we propose CARE (CAusality-based REpair), a causality-based neural network repair technique that 1) performs causality-based fault localization to identify the ‘guilty’ neurons and 2) optimizes the parameters of the identified neurons to reduce the misbehavior. We have empirically evaluated CARE on various tasks such as backdoor removal, neural network repair for fairness and safety properties. Our experiment results show that CARE is able to repair all neural networks efficiently and effectively. For fairness repair tasks, CARE successfully improves fairness by 61.91 % on average. For backdoor removal tasks, CARE reduces the attack success rate from over 98% to less than 1 %. For safety property repair tasks, CARE reduces the property violation rate to less than 1 %. Results also show that thanks to the causality-based fault localization, CARE's repair focuses on the misbehavior and preserves the accuracy of the neural networks.

链接与引用

DOI 原文 · arXiv · PDF(开放获取) · DBLP

BibTeX
@inproceedings{Sun0PS22,
  title = {Causality-based neural network repair},
  author = {Bing Sun and Jun Sun and Long H. Pham and Jie Shi},
  booktitle = {ICSE},
  year = {2022},
  doi = {10.1145/3510003.3510080}
}