book

Practicing Trustworthy Machine Learning

by Yada Pruksachatkun, Matthew Mcateer, Subho Majumdar

January 2023

Intermediate to advanced

300 pages

8h 8m

English

O'Reilly Media, Inc.

Read now

Unlock full access

Implementing Machine Learning in ProductionThe Transformer ConvergenceAn Explosion of Large and Highly Capable ML ModelsWhy We Wrote This BookWho This Book Is ForAI Safety and AlignmentUse of HuggingFace PyTorch for AI ModelsFoundationsConventions Used in This BookUsing Code ExamplesO’Reilly Online LearningHow to Contact UsAcknowledgments
Attack Vectors for Machine Learning PipelinesImproperly Implemented Privacy Features in ML: Case StudiesCase 1: Apple’s CSAMCase 2: GitHub CopilotCase 3: Model and Data Theft from No-Code ML ToolsDefinitionsDefinition of PrivacyProxies and Metrics for PrivacyLegal Definitions of Privacyk-AnonymityTypes of Privacy-Invading Attacks on ML PipelinesMembership AttacksModel InversionModel ExtractionStealing a BERT-Based Language ModelDefenses Against Model Theft from Output LogitsPrivacy-Testing ToolsMethods for Preserving PrivacyDifferential PrivacyStealing a Differentially Privately Trained ModelFurther Differential Privacy ToolingHomomorphic EncryptionSecure Multi-Party ComputationSMPC ExampleFurther SMPC ToolingFederated LearningConclusion
Case 1: Social MediaCase 2: Triaging Patients in Healthcare SystemsCase 3: Legal SystemsKey Concepts in Fairness and Fairness-Related HarmsIndividual FairnessParity FairnessCalculating Parity FairnessScenario 1: Language GenerationScenario 2: Image CaptioningFairness Harm MitigationMitigation Methods in the Pre-Processing StageMitigation Methods in the In-Processing StageMitigation Methods in the Post-Processing StageFairness Tool KitsHow Can You Prioritize Fairness in Your Organization?ConclusionFurther Reading
Explainability Versus InterpretabilityThe Need for Interpretable and Explainable ModelsA Possible Trade-off Between Explainability and PrivacyEvaluating the Usefulness of Interpretation or Explanation MethodsDefinitions and Categories“Black Box”Global Versus Local InterpretabilityModel-Agnostic Versus Model-Specific MethodsInterpreting GPT-2Methods for Explaining Models and Interpreting OutputsInherently Explainable ModelsLocal Model-Agnostic Interpretability MethodsGlobal Model-Agnostic Interpretability MethodsExplaining Neural NetworksSaliency MappingDeep Dive: Saliency Mapping with CLIPAdversarial Counterfactual ExamplesOvercome the Limitations of Interpretability with a Security MindsetLimitations and Pitfalls of Explainable and Interpretable MethodsRisks of Deceptive InterpretabilityConclusion
Evaluating RobustnessNon-Adversarial RobustnessStep 1: Apply PerturbationsStep 2: Defining and Applying ConstraintsDeep Dive: Word Substitution with Cosine Similarity ConstraintsAdversarial RobustnessDeep Dive: Adversarial Attacks in Computer VisionCreating Adversarial ExamplesImproving RobustnessConclusion
Case 1: Unsecured AWS BucketsCase 2: Clearview AI Scraping Photos from Social MediaCase 3: Improperly Stored Medical DataIssues in Procuring Real-World DataUsing the Right Data for the Modeling GoalConsentPII, PHI, and SecretsProportionality and Sampling TechniquesUndescribed VariationUnintended ProxiesFailures of External ValidityData IntegritySetting Reasonable ExpectationsTools for Addressing Data Collection IssuesSynthetically Generated DataDALL·E, GPT-3, and Synthetic DataImproving Pattern Recognition with Synthetic DataDeep Dive: Pre-Training a Model with a Process-Driven Synthetic DatasetFacial Recognition, Pose Detection, and Human-Centric TasksObject Recognition and Related TasksEnvironment NavigationUnity and Unreal EnvironmentsLimitations of Synthetic Data in HealthcareLimitations of Synthetic Data in NLPSelf-Supervised Learned Models Versus Giant Natural DatasetsRepurposing Quality Control Metrics for Security PurposesConclusion
Making Sense of Improperly Overhyped Research ClaimsShallow Human-AI Comparison AntipatternDownplaying the Limitations of the Technique AntipatternUncritical PR Piece AntipatternHyperbolic or Just Plain Wrong AntipatternGetting Past These AntipatternsQuantized MLTooling for Quantized MLPrivacy, Bias, Interpretability, and Stability in Quantized MLDiffusion-Based Energy ModelsHomomorphic EncryptionSimulating Federated LearningQuantum Machine LearningTooling and Resources for Quantum Machine LearningWhy QML Will Not Solve Your Regular ML ProblemsMaking the Leap from Theory to Practice
Part I: Additional Technical FactorsCausal Machine LearningSparsity and Model CompressionUncertainty QuantificationPart II: Implementation ChallengesMotivating Stakeholders to Develop Trustworthy ML SystemsTrust DebtsImportant Aspects of TrustEvaluation and FeedbackTrustworthiness and MLOpsConclusion
ToolingLiFTDatasheetsModel CardsDAG CardsHuman-in-the-Loop StepsOversight GuidelinesStages of AssessmentThe Need for a Cross-Project ApproachMITRE ATLASBenchmarksAI Incident DatabaseBug BountiesDeep Dive: Connecting the DotsDataPre-ProcessingModel TrainingModel InferenceTrust ComponentsConclusion

Interpretable or Fair Modeling PackagesOther Python Packages for General Explainability

Content preview from Practicing Trustworthy Machine Learning

Chapter 6. More State-of-the-Art Research Questions

Much of what we’ve covered in previous chapters has ranged from standard practices to practical yet underutilized methods. This chapter is dedicated to methods that are just exiting the research phase. We will also go into which of these methods are becoming practical for the real world and ask how different they are from the various trustworthiness metrics we’ve discussed in the previous chapters. This is by no means an exhaustive list of some of the various bleeding-edge ML techniques in the works right now. However, these are some of the more interesting techniques the authors have seen come up in discussions.

First, we want to go over how to watch out for overhyped reports and articles about machine learning techniques (which will be extremely relevant in “Quantum Machine Learning”).

Making Sense of Improperly Overhyped Research Claims

In general, all of these techniques are still in their research and proof-of-concept stages. It would help if we had more examples of how to judge research techniques and their readiness for the real world. This might sound like an oxymoron, since the whole point of machine learning research is to produce insights and techniques beyond what was previously possible.

A more helpful approach might be to look for red flags in reports on new machine learning advances. Indeed, given how fast the field of machine learning has been moving, it can be difficult to enforce a standard or culture of quality ...