Intriguing Parameters of Structural Causal Models

05/26/2021
by   Matej Zečević, et al.
3

In recent years there has been a lot of focus on adversarial attacks, especially on deep neural networks. Here, we argue that they are more general in nature and can easily affect a larger class of models, e.g., any differentiable perturbed optimizers. We further show that such attacks can be determined by the hidden confounders in a domain, thus drawing a novel connection between such attacks and causality. Establishing this causal perspective is characterized by the influence of the structural causal model's data generating process on the subsequent optimization thereby exhibiting intriguing parameters of the former. We reveal the existence of such parameters for three combinatorial optimization problems, namely linear assignment, shortest path and a real world problem of energy systems. Our empirical examination also unveils worrisome consequences of these attacks on differentiable perturbed optimizers thereby highlighting the criticality of our findings.

READ FULL TEXT

page 7

page 9

research
05/19/2022

Focused Adversarial Attacks

Recent advances in machine learning show that neural models are vulnerab...
research
05/25/2023

IDEA: Invariant Causal Defense for Graph Adversarial Robustness

Graph neural networks (GNNs) have achieved remarkable success in various...
research
06/26/2019

Defending Adversarial Attacks by Correcting logits

Generating and eliminating adversarial examples has been an intriguing t...
research
11/07/2022

Deep Causal Learning: Representation, Discovery and Inference

Causal learning has attracted much attention in recent years because cau...
research
05/28/2021

Visualizing Representations of Adversarially Perturbed Inputs

It has been shown that deep learning models are vulnerable to adversaria...
research
03/29/2022

Finding Structure and Causality in Linear Programs

Linear Programs (LP) are celebrated widely, particularly so in machine l...
research
09/18/2022

Membership Inference Attacks and Generalization: A Causal Perspective

Membership inference (MI) attacks highlight a privacy weakness in presen...

Please sign up or login with your details

Forgot password? Click here to reset