Robustness guarantees for Bayesian inference with Gaussian processes

Bayesian inference and Gaussian processes are widely used in applications ranging from robotics and control to biological systems. Many of these applications are safety-critical and require a characterization of the uncertainty associated with the learning model and formal guarantees on its predicti...

Full description

Bibliographic Details
Main Authors: Cardelli, L, Kwiatkowska, M, Laurenti, L, Patane, A
Format: Conference item
Published: AAAI Press 2019
_version_ 1797090519373840384
author Cardelli, L
Kwiatkowska, M
Laurenti, L
Patane, A
author_facet Cardelli, L
Kwiatkowska, M
Laurenti, L
Patane, A
author_sort Cardelli, L
collection OXFORD
description Bayesian inference and Gaussian processes are widely used in applications ranging from robotics and control to biological systems. Many of these applications are safety-critical and require a characterization of the uncertainty associated with the learning model and formal guarantees on its predictions. In this paper we define a robustness measure for Bayesian inference against input perturbations, given by the probability that, for a test point and a compact set in the input space containing the test point, the prediction of the learning model will remain δ−close for all the points in the set, for δ > 0. Such measures can be used to provide formal probabilistic guarantees for the absence of adversarial examples. By employing the theory of Gaussian processes, we derive upper bounds on the resulting robustness by utilising the Borell-TIS inequality, and propose algorithms for their computation. We evaluate our techniques on two examples, a GP regression problem and a fully-connected deep neural network, where we rely on weak convergence to GPs to study adversarial examples on the MNIST dataset.
first_indexed 2024-03-07T03:19:47Z
format Conference item
id oxford-uuid:b7085cd5-60c7-4307-ad1d-9c9070cdd20b
institution University of Oxford
last_indexed 2024-03-07T03:19:47Z
publishDate 2019
publisher AAAI Press
record_format dspace
spelling oxford-uuid:b7085cd5-60c7-4307-ad1d-9c9070cdd20b2022-03-27T04:45:28ZRobustness guarantees for Bayesian inference with Gaussian processesConference itemhttp://purl.org/coar/resource_type/c_5794uuid:b7085cd5-60c7-4307-ad1d-9c9070cdd20bSymplectic Elements at OxfordAAAI Press2019Cardelli, LKwiatkowska, MLaurenti, LPatane, ABayesian inference and Gaussian processes are widely used in applications ranging from robotics and control to biological systems. Many of these applications are safety-critical and require a characterization of the uncertainty associated with the learning model and formal guarantees on its predictions. In this paper we define a robustness measure for Bayesian inference against input perturbations, given by the probability that, for a test point and a compact set in the input space containing the test point, the prediction of the learning model will remain δ−close for all the points in the set, for δ > 0. Such measures can be used to provide formal probabilistic guarantees for the absence of adversarial examples. By employing the theory of Gaussian processes, we derive upper bounds on the resulting robustness by utilising the Borell-TIS inequality, and propose algorithms for their computation. We evaluate our techniques on two examples, a GP regression problem and a fully-connected deep neural network, where we rely on weak convergence to GPs to study adversarial examples on the MNIST dataset.
spellingShingle Cardelli, L
Kwiatkowska, M
Laurenti, L
Patane, A
Robustness guarantees for Bayesian inference with Gaussian processes
title Robustness guarantees for Bayesian inference with Gaussian processes
title_full Robustness guarantees for Bayesian inference with Gaussian processes
title_fullStr Robustness guarantees for Bayesian inference with Gaussian processes
title_full_unstemmed Robustness guarantees for Bayesian inference with Gaussian processes
title_short Robustness guarantees for Bayesian inference with Gaussian processes
title_sort robustness guarantees for bayesian inference with gaussian processes
work_keys_str_mv AT cardellil robustnessguaranteesforbayesianinferencewithgaussianprocesses
AT kwiatkowskam robustnessguaranteesforbayesianinferencewithgaussianprocesses
AT laurentil robustnessguaranteesforbayesianinferencewithgaussianprocesses
AT patanea robustnessguaranteesforbayesianinferencewithgaussianprocesses