一句话:提出基于因果性的神经网络修复技术CARE,通过定位问题神经元并优化参数来修复公平性、后门与安全缺陷。
神经网络在广泛应用中带来可靠性与安全性担忧,其缺陷可能导致不安全行为、安全风险或不公平社会影响。本文面向公平性、无后门和安全属性等目标,研究在尽量小地调整给定网络参数的前提下修复神经网络。作者提出 CARE(CAusality-based REpair),先用基于因果关系的故障定位找出“有罪”神经元,再优化这些神经元的参数以减少错误行为。实验在去后门、公平性修复和安全属性修复等任务上评估 CARE。结果显示,CARE 能高效有效地修复所有网络:公平性平均提升61.91%,后门攻击成功率从超过98%降至1%以下,安全属性违反率降至1%以下,并因因果定位而聚焦错误行为、保持原网络准确率。
Neural networks have had discernible achievements in a wide range of applications. The wide-spread adoption also raises the concern of their dependability and reliability. Similar to traditional decision-making programs, neural networks can have defects that need to be repaired. The defects may cause unsafe behaviors, raise security concerns or unjust societal impacts. In this work, we address the problem of repairing a neural network for desirable properties such as fairness and the absence of backdoor. The goal is to construct a neural network that satisfies the property by (minimally) adjusting the given neural network's parameters (i.e., weights). Specifically, we propose CARE (CAusality-based REpair), a causality-based neural network repair technique that 1) performs causality-based fault localization to identify the ‘guilty’ neurons and 2) optimizes the parameters of the identified neurons to reduce the misbehavior. We have empirically evaluated CARE on various tasks such as backdoor removal, neural network repair for fairness and safety properties. Our experiment results show that CARE is able to repair all neural networks efficiently and effectively. For fairness repair tasks, CARE successfully improves fairness by 61.91 % on average. For backdoor removal tasks, CARE reduces the attack success rate from over 98% to less than 1 %. For safety property repair tasks, CARE reduces the property violation rate to less than 1 %. Results also show that thanks to the causality-based fault localization, CARE's repair focuses on the misbehavior and preserves the accuracy of the neural networks.