paper-with-me

홈 › Papers

Interpreting Neural Networks Using Flip Points

2019-03-21 · Roozbeh Yousefzadeh, Dianne P. O'Leary

Neural networks have been criticized for their lack of easy interpretation, which undermines confidence in their use for important applications. Here, we introduce a novel technique, interpreting a trained neural network by investigating its flip points. A flip point is any point that lies on the boundary between two output classes: e.g. for a neural network with a binary yes/no output, a flip point is any input that generates equal scores for "yes" and "no". The flip point closest to a given input is of particular importance, and this point is the solution to a well-posed optimization problem. This paper gives an overview of the uses of flip points and how they are computed. Through results on standard datasets, we demonstrate how flip points can be used to provide detailed interpretation of the output produced by a neural network. Moreover, for a given input, flip points enable us to measure confidence in the correctness of outputs much more effectively than softmax score. They also identify influential features of the inputs, identify bias, and find changes in the input that change the output of the model. We show that distance between an input and the closest flip point identifies the most influential points in the training data. Using principal component analysis (PCA) and rank-revealing QR factorization (RR-QR), the set of directions from each training input to its closest flip point provides explanations of how a trained neural network processes an entire dataset: what features are most important for classification into a given class, which features are most responsible for particular misclassifications, how an adversary might fool the network, etc. Although we investigate flip points for neural networks, their usefulness is actually model-agnostic.

📄 PDF Abstract BibTeX arXiv:1903.08789

Code (0)

등록된 구현이 없습니다.

Methods 이 논문이 사용한 방법론

Softmax The Softmax output function transforms a previous layer's output into a vector of probabilities. It is commonly used for multiclass classification. Given an input vector $x$…

Similar Papers 제목 키워드 기반

FLiP: Towards understanding and interpreting multimodal multilingual sentence embeddings

2026-04-20 · Santosh Kesiraju, Bolaji Yusuf, Šimon Sedláček, Oldřich Plchot 외 arxiv

This paper presents factorized linear projection (FLiP) models for understanding pretrained sentence embedding spaces. We train FLiP models to recover the lexical content from multilingual (LaBSE), multimodal (SONAR) and…

Interpreting and Mitigating Unwanted Uncertainty in LLMs

2025-10-26 · Tiasa Singha Roy, Ayush Rajesh Jhaveri, Ilias Triantafyllopoulos arxiv

Despite their impressive capabilities, Large Language Models (LLMs) exhibit unwanted uncertainty, a phenomenon where a model changes a previously correct answer into an incorrect one when re-prompted. This behavior under…

Activation Scaling for Steering and Interpreting Language Models

2024-10-07 · Niklas Stoehr, Kevin Du, Vésteinn Snæbjarnarson, Robert West 외

Given the prompt "Rome is in", can we steer a language model to flip its prediction of an incorrect token "France" to a correct token "Italy" by only multiplying a few relevant activation vectors with scalars? We argue t…

Language ModelingLanguage Modelling

Relabeling Minimal Training Subset to Flip a Prediction

2023-05-22 · Jinghan Yang, Linjie Xu, Lequan Yu

When facing an unsatisfactory prediction from a machine learning model, users can be interested in investigating the underlying reasons and exploring the potential for reversing the outcome. We ask: To flip the predictio…

Binary ClassificationPrediction

Label Flipping Data Poisoning Attack Against Wearable Human Activity Recognition System

2022-08-17 · Abdur R. Shahid, Ahmed Imteaj, Peter Y. Wu, Diane A. Igoche 외

Human Activity Recognition (HAR) is a problem of interpreting sensor data to human movement using an efficient machine learning (ML) approach. The HAR systems rely on data from untrusted users, making them susceptible to…

Activity RecognitionData PoisoningHuman Activity Recognition