<?xml-model href='http://www.tei-c.org/release/xml/tei/custom/schema/relaxng/tei_all.rng' schematypens='http://relaxng.org/ns/structure/1.0'?><TEI xmlns="http://www.tei-c.org/ns/1.0">
	<teiHeader>
		<fileDesc>
			<titleStmt><title level='a'>Towards the Unification and Robustness of Perturbation and Gradient Based Explanations</title></titleStmt>
			<publicationStmt>
				<publisher></publisher>
				<date>2021</date>
			</publicationStmt>
			<sourceDesc>
				<bibl> 
					<idno type="par_id">10297531</idno>
					<idno type="doi"></idno>
					<title level='j'>International Conference on Machine Learning (ICML)</title>
<idno></idno>
<biblScope unit="volume"></biblScope>
<biblScope unit="issue"></biblScope>					

					<author>Sushant Agarwal</author><author>Shahin Jabbari</author><author>Chirag Agarwal</author><author>Sohini Upadhyay</author><author>Steven Wu</author><author>Himabindu Lakkaraju</author>
				</bibl>
			</sourceDesc>
		</fileDesc>
		<profileDesc>
			<abstract><ab><![CDATA[As machine learning black boxes are increasingly being deployed in critical domains such as healthcare and criminal justice, there has been a growing emphasis on developing techniques for explaining these black boxes in a post hoc manner. In this work, we analyze two popular post hoc interpretation techniques: SmoothGrad which is a gradient based method, and a variant of LIME which is a perturbation based method. More specifically, wederive explicit closed form expressions for the explanations output by these two methods and show that they both converge to the same explanation in expectation, i.e., when the number of perturbed samples used by these methods is large. We then leverage this connection to establish other desirable properties, such as robustness, for these techniques. We also derive finite sample complexity bounds for the number of perturbations required for these methods to converge to their expected explanation. Finally, we empirically validate ourtheory using extensive experimentation on both synthetic and real world datasets.]]></ab></abstract>
		</profileDesc>
	</teiHeader>
	<text><body xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xlink="http://www.w3.org/1999/xlink">
<div xmlns="http://www.tei-c.org/ns/1.0"><head n="1.">Introduction</head><p>Over the past decade, predictive models are increasingly being considered for deployment in high-stakes domains such as healthcare and criminal justice. However, the successful adoption of predictive models in these settings depends heavily on how well decision makers (e.g., doctors, judges)</p><p>Proceedings of the 38 th International Conference on Machine Learning, PMLR 139, 2021. Copyright 2021 by the author(s). 1 The full technical version of this paper is available at <ref type="url">https: //arxiv.org/abs/2102.10618</ref>.</p><p>can understand and consequently trust their functionality. Only if decision makers have a clear picture of the behavior of these models can they assess when and how much to rely on these models, detect potential biases in them, and develop strategies for improving them <ref type="bibr">(Doshi-Velez &amp; Kim, 2017)</ref>. However, the increasing complexity as well as the proprietary nature of predictive models is making it challenging to understand these complex black boxes, thus motivating the need for tools and techniques that can explain them in a faithful and human interpretable manner.</p><p>Several techniques have been recently proposed to construct post hoc explanations of complex predictive models. While these techniques differ in a variety of ways, they can be broadly categorized into perturbation vs. gradient based techniques, based on the approaches they employ to generate explanations. For instance, LIME and SHAP <ref type="bibr">(Ribeiro et al., 2016;</ref><ref type="bibr">Lundberg &amp; Lee, 2017)</ref> are called perturbation based methods because they leverage perturbations of individual instances to construct interpretable local approximations (e.g., linear models), which in turn serve as explanations of individual predictions of black box models. On the other hand, SmoothGrad, Integrated Gradients and GradCAM <ref type="bibr">(Simonyan et al., 2014;</ref><ref type="bibr">Sundararajan et al., 2017;</ref><ref type="bibr">Selvaraju et al., 2017;</ref><ref type="bibr">Smilkov et al., 2017)</ref> are referred to as gradient based methods since they leverage gradients computed at individual instances to explain predictions of complex models. Recent research has focused on empirically analyzing the behavior of perturbation and gradient based post hoc explanations. For instance, several works <ref type="bibr">(Ghorbani et al., 2019;</ref><ref type="bibr">Slack et al., 2020a;</ref><ref type="bibr">Dombrowski et al., 2019;</ref><ref type="bibr">Adebayo et al., 2018;</ref><ref type="bibr">Alvarez-Melis &amp; Jaakkola, 2018</ref>) demonstrated that explanations generated using perturbation based techniques such as LIME and SHAP may not be robust, i.e., the resulting explanations may change drastically with very small changes to the instances. Furthermore, <ref type="bibr">Adebayo et al. (2018)</ref> showed that gradient based methods such as Smooth-Grad and GradCAM may not generate interpretations that are faithful to the underlying models.</p><p>While several perturbation and gradient based explanation techniques have been proposed in literature and the aforementioned works have empirically examined their behavior, there is very little work that focuses on developing a rigorous theoretical understanding of these techniques and systematically exploring the connections between them. Recently, <ref type="bibr">Levine et al. (2019)</ref> theoretically and empirically analyzed the robustness of a sparsified version of Smooth-Grad but their analysis requires several key modifications to the original SmoothGrad, whereas we study SmoothGrad in its original form. Even more recently, <ref type="bibr">Garreau &amp; von Luxburg (2020)</ref> provided closed form solutions for and theoretically analysed Tabular LIME (LIME restricted to tabular data). We study a simpler, non-discretized variant of LIME that benefits by exhibiting several desirable properties, such as being provably robust, unlike the setting in <ref type="bibr">Garreau &amp; von Luxburg (2020)</ref>. In addition, these works do not explore deeper connections between the two classes of techniques.</p><p>In this work, we initiate a study to unify perturbation and gradient based post hoc explanation techniques. To the best of our knowledge, this work makes the first attempt at establishing connections between these two popular classes of explanation techniques. More specifically, we make the following key contributions:</p><p>&#8226; We analyze two popular post hoc explanation methods -SmoothGrad (gradient based) and a variant of LIME (perturbation based) for continuous data that we refer to as Continuous LIME, or C-LIME for short. We derive explicit closed form expressions for the explanations output by these methods and demonstrate that they converge to the same output (explanation) in expectation, i.e., when the number of perturbed samples used by these methods is large.</p><p>&#8226; We then leverage this equivalence result to establish other desirable properties of these methods. More specifically, we prove that SmoothGrad and C-LIME satisfy Lipschitz continuity and are therefore robust to small changes in the input when the number of perturbed samples is large. This work is the first to demonstrate that a variant of LIME is provably robust.</p><p>&#8226; We also derive finite sample complexity bounds for the number of perturbed samples required for SmoothGrad and C-LIME to converge to their expected output.</p><p>&#8226; Finally, we prove that both SmoothGrad and C-LIME satisfy other interesting properties such as linearity.</p><p>We carry out extensive experimentation with synthetic and real world datasets from diverse domains such as online shopping and finance to analyze the behavior of Smooth-Grad and C-LIME. Our empirical results not only validate our theoretical claims but also provide other interesting insights. We observe that both SmoothGrad and C-LIME need far fewer perturbations (than what our theory predicts) in practice to converge to their expected output and/or exhibit robustness. SmoothGrad requires even fewer perturbations than C-LIME to be robust and also converges faster than C-LIME.</p><p>We also analyze the effects of other parameters such as the variance of the perturbed samples on the convergence as well as robustness of these methods, and find that smaller values of variance enable these methods to converge faster and exhibit robustness even with fewer perturbed samples.</p></div>
<div xmlns="http://www.tei-c.org/ns/1.0"><head n="2.">Preliminaries</head><p>Let us consider a complex function f : X &#8594; Y, where X &#8838; R d for some d &#8712; N and Y &#8838; R. In this section, we provide an overview of two popular post hoc explanation techniques, namely, SmoothGrad and LIME. Both Smooth-Grad and LIME are local explanation techniques i.e., they explain individual predictions f (x) of a given model f . Furthermore, both these methods fall under the broad category of feature attribution methods which determine the influence of each feature on a given prediction f (x). Below, we describe these methods in detail. We then lay down the setting and assumptions for this work.</p></div>
<div xmlns="http://www.tei-c.org/ns/1.0"><head n="2.1.">SmoothGrad</head><p>Gradient based explanations are designed to explain predictions f (x) for any x &#8712; X, by computing the derivative of f (x) with respect to each feature of x <ref type="bibr">(Ancona et al., 2018)</ref>.</p><p>Vanilla gradient based explanations are often noisy, highlighting random features and ignoring important ones <ref type="bibr">(Adebayo et al., 2018)</ref>. A convincing explanation for the noise in gradient based saliency maps is that the derivative of f may fluctuate sharply at small scales. Hence, the gradient at any given point is less meaningful than the average of gradients at local neighboring points. This idea has led to Smooth-Grad <ref type="bibr">(Smilkov et al., 2017)</ref>, which in practice reduces the noise in explanations compared to vanilla gradients.</p><p>More concretely, let S(x) (or simply S) denote a set of inputs in the neighborhood of x. Using S, the (empirical) explanation of SmoothGrad for f at point x is defined to be</p><p>where &#8711;f is the gradient of f . When S is drawn from a distribution P (x) (or simply P ), the expected explanation of SmoothGrad for f at input x can be defined by replacing the sample average with expectation:</p><p>Throughout this paper, we use subscripts P and S to distinguish between expected values and empirical averages in our quantities of interest.</p></div>
<div xmlns="http://www.tei-c.org/ns/1.0"><head n="2.2.">LIME</head><p>Another class of explainability models are perturbation based techniques. LIME is a popular perturbation based method that aims to explain the prediction f (x), by learning an interpretable model that approximates f locally around x <ref type="bibr">(Ribeiro et al., 2016)</ref>. To obtain a local explanation, LIME creates perturbed examples in the local neighbourhood of x, observes the predictions of f for these examples, and trains an interpretable model on these labeled examples.</p><p>More concretely, let S denote a set of inputs in the neighborhood of x and &#960; : X &#215; X &#8594; R &#8805;0 a distance metric over X. Let G be a class of explanations (or models) and for any g &#8712; G, &#8486;(g) denote the complexity of g e.g., the complexity of a linear explanation can be measured as the number of non-zero weights. The (empirical) explanation of LIME can be written as</p><p>where the loss function L is defined as</p><p>When S is drawn from a distribution P , the expected explanation of LIME for f at input x can be written by replacing the sample average in the loss function with expectation.</p><p>We call this quantity LIME f P (x). Remark. The default implementation of LIME has an additional discretization step for the features before optimization. Our definition of LIME here ignores this discretization.</p></div>
<div xmlns="http://www.tei-c.org/ns/1.0"><head n="2.3.">Our Setting and Assumptions</head><p>In our setting, we assume X = R d , i.e., we assume the features to be continuous. Different choices of Y in our setting lead to different learning settings. Y = R leads to regression. Y = [0, 1] corresponds to (binary or multi-class) classification when f (x) is interpreted as the probability of f belonging to a specific class.</p><p>For any point x, in both SmoothGrad and our variant of LIME (discussed below), we assume the sample S in the neighborhood of x is drawn from N (x, &#931;), where &#931; = &#963;<ref type="foot">foot_0</ref> I for some &#963; 2 &gt; 0. This is a standard choice in practice <ref type="bibr">(Garreau &amp; von Luxburg, 2020;</ref><ref type="bibr">Smilkov et al., 2017</ref>). 2 C-LIME. We use a variant of LIME for continuous features which we refer to as Continuous-LIME (or simply C-LIME). For any given function f , input point x and a sample S of inputs in the neighborhood of x, the (empirical) explanation of C-LIME can be written as</p><p>where G is the class of linear models.</p><p>We now highlight the main differences between LIME and C-LIME: (i) C-LIME assumes that the distance metric &#960; is a constant function that always outputs 1. Since C-LIME operates on continuous features and uses a Gaussian distribution centered at x to sample perturbations (unlike LIME which samples perturbations uniformly at random), the resulting perturbations are more likely to be closer to x and do not need to be weighted when fitting a local linear model.</p><p>(ii) While LIME allows for a general class of simple explanations (or models) G, we restrict ourselves only to linear models for C-LIME since it focuses on continuous features.</p><p>(iii) Lastly, we exclude the regularizer &#8486; from C-LIME i.e., we set &#8486;(g) = 0 for all g &#8712; G. Note that the paper that proposes LIME also advocates for enforcing sparsity by first carrying out a feature selection procedure to determine the top K features and then learning the corresponding weights via least squares <ref type="bibr">(Ribeiro et al., 2016)</ref>. See the full version for a discussion of the regularised version of LIME. Finally, for ease of exposition, throughout we assume the output of C-LIME is simply the weights on each feature, and ignore the intercept term. This can be done without loss of generality by centering. Moreover, we are only interested in the learned weights for the features, and not the intercept. For completeness, all of our proofs are written for the case that the intercept is present.</p><p>When clear from context, we refer to the expected output of SmoothGrad and C-LIME for explaining a function f at point x using a Gaussian distribution with mean x and covariance matrix &#931; as SG f &#931; and C-LIME f &#931; , respectively. Moreover, when it is clear from the context we replace the subscript S to n in all of our quantities of interest to simply emphasize that the size of sample S is n.</p></div>
<div xmlns="http://www.tei-c.org/ns/1.0"><head n="3.">Equivalence and Robustness</head><p>As our first contribution, in Section 3.1, we show that SmoothGrad and C-LIME provide identical explanations in expectation. This establishes a novel connection between gradient based and perturbation based explanation methods, which are often studied independently. Using this connection, in Section 3.2, we prove that both SmoothGrad and C-LIME are robust, i.e., the explanations provided by these methods for nearby points do not vary significantly.</p></div>
<div xmlns="http://www.tei-c.org/ns/1.0"><head n="3.1.">Equivalence</head><p>As our first result, in Theorem 1, we show that the expected output of SmoothGrad and C-LIME are the same for any function at any given input provided that SmoothGrad and C-LIME use the same Gaussian distribution for gradient computation and perturbations, respectively. Theorem 1. Let f : R d &#8594; R be a function. Then, for any x &#8712; X and any invertible covariance matrix</p><p>where a is a random input drawn from N (x, &#931;), and cov(a, f (a)) is a vector with the i'th entry corresponding to the covariance of f (a) and i'th feature of a.</p><p>Proof sketch. We separately derive closed forms for SmoothGrad and C-LIME. For SmoothGrad we apply a multivariate version of Stein's Lemma <ref type="bibr">(Landsman &amp; Ne&#353;lehov&#225;, 2008;</ref><ref type="bibr">Liu, 1994)</ref>. The proof for C-LIME uses calculus, and recovers the explanation of C-LIME by differentiation and solving for the solution where the gradient is 0. See the full version for more details.</p><p>We point out that Theorem 1 holds for any covariance matrix and does not require the covariance matrix to be diagonal. Furthermore, we note that the closed forms for both Smooth-Grad and C-LIME have a nice structure. For a diagonal &#931;, the i'th coefficient of SmoothGrad f (x) and C-LIME f (x) depends only on the covariance of f and the i'th feature. In particular, when &#931; = &#963; 2 I, then the i'th coefficient is simply cov(f (a), a i )&#963; -2 . This term captures the dependence of f on the i'th feature of the input.</p></div>
<div xmlns="http://www.tei-c.org/ns/1.0"><head n="3.2.">Robustness</head><p>Many interpretability methods come with the drawback that they are very sensitive to the choice of the point where the prediction of the function is going to be explained <ref type="bibr">(Alvarez-Melis &amp; Jaakkola, 2018;</ref><ref type="bibr">Ghorbani et al., 2019)</ref>. It is hence desirable to have robust explainability methods where two nearby points with similar labels have similar explanations.</p><p>In this section we show that both SmoothGrad and C-LIME are robust. The notion of robustness we use is Lipschitz continuity which is formally defined as follows.</p><p>We now formally state our robustness result. Proof sketch. We first prove the Lipschitzness of Smooth-Grad using the Pinkser and data processing inequalities <ref type="bibr">(van Erven &amp; Harremos, 2014)</ref>. Theorem 1 then implies that C-LIME is also Lipschitz. See the full version for details.</p><p>Theorem 2 shows that both SmoothGrad and C-LIME become less robust (i.e., the Lipschitz constants grows) when explaining functions with larger magnitude of gradients, or when the variance parameter &#963; 2 used in gradient computation or perturbations decreases. However, the Lipschitz constant is independent of the input dimension d.</p></div>
<div xmlns="http://www.tei-c.org/ns/1.0"><head n="4.">Convergence Analysis</head><p>The results in Section 3 prove the equivalence of Smooth-Grad and C-LIME and also robustness of these techniques in expectation which corresponds to large sample limits in practice. Any useful implementation of these techniques is based on finite number of gradient computations or sample perturbations. In this section, we derive sample complexity bounds to examine how fast the empirical estimates for the outputs of SmoothGrad and C-LIME at any given point will converge to the their expected value. This extends the implications of the results in Section 3 to practical implementations of SmoothGrad and C-LIME.</p><p>We start by examining how fast the output of SmoothGrad will converge to its expectation.</p><p>Proposition 1. Let f : R d &#8594; R be a function whose gradient is bounded by &#8711;f max . Fix x &#8712; X, &gt; 0 and &#948; &gt; 0.</p><p>Let n &#8805; C(&#8711;f max / ) 2 ln(d/&#948;) for some absolute constant C. Then with probability of at least 1 -&#948;, over a sample S of size n from N (x, &#931;), for any &#931; &#8712; R d , we have that</p><p>We next examine how fast the output of C-LIME will converge to its expectation.</p><p>Theorem 3. Let f : R d &#8594; [-1, 1] be a function. Fix x &#8712; X, &gt; 0 and &#948; &gt; 0. Let S denote a sample of size n from N (x, &#931;) for &#931; = &#963; 2 I where</p><p>for some absolute constant C. Then with probability of at least</p><p>Proof sketch. First observe that we can write the output of C-LIME both in expectation and in finite sample using the closed-form solution of ordinary least square as follows</p><p>where the expectations are with respect to a &#8764; N (x, &#931;) and we use b to index a sampled data point in a sample S of size n. By algebraic manipulation and applying Cauchy-Schwartz and triangle inequalities, the term above is bounded by</p><p>Therefore, it suffices to bound each of the 4 terms of the above equation separately. We show that the first term is bounded by 1/&#963; 2 using Weyl's inequality. We then show that, with high probability, the second term is bounded by /(2&#963; 2 ) using Union bound, Sub-Gaussian and Chernoff concentration inequalities. By applying the Weyl'sm Cauchy-Schwartz inequalities, Bernstein inequality in the sub-exponential case for matrices <ref type="bibr">(Tropp, 2012)</ref> and covariance estimation techniques <ref type="bibr">(Koltchinskii &amp; Lounici, 2017)</ref>, we show that, with high probability, the third term is bounded by /(4 x 2 ). Finally, we show that the last term is, with high probability, bounded by 2 x 2 , by using Union, Chernoff and Sub-Gaussian concentration bounds as well as Cauchy-Schwartz and triangle inequality. Multiplying the 4 bounds and applying a Union bound, we witness the theorem's claim. See the full version for details.</p><p>Fixing &#963; 2 and x, the bound in Theorem 3 has the standard 1/ 2 dependency on the error parameter and ln(1/&#948;) dependency on the probability of failure &#948;. Fixing other parameters, the sample complexity increases as either &#963; 2 or x 2 approach 0 or grow larger and larger. In the large regime, the growth in the sample complexity is in line with the intuition that accurate estimates under higher variance scenarios require more samples. In the small regime, in our analysis, the bound on the norm of the inverse of the product matrices will grow with a rate that is proportional to &#963; 2 or 1/ x 2 causing the growth in the sample complexity. We empirically study this dependency in Section 6.</p></div>
<div xmlns="http://www.tei-c.org/ns/1.0"><head n="5.">Additional Properties</head><p>In this section we study additional properties that are satisfied by both SmoothGrad and C-LIME. We defer all the omitted proofs of this section to the full version.</p><p>The first property that we study is linearity.</p><p>Proposition 2 (Linearity). Fix a covariance matrix</p><p>Linearity implies that the explanation of a more complex function that can be written as a linear combination of two simpler functions is simply the linear combination of the explanations of each of the simpler functions. This is useful e.g., in situations where computing explanations are computationally expensive and new explanations for linear compositions of functions can be simply derived by linear composition of the previously computed explanations.</p><p>The next property we study is proportionality. Proposition 3 (Proportionality). Let f : R d &#8594; R be a linear function of the form f</p><p>Proportionality implies that when the underlying function is linear both SmoothGrad and LIME provide explanations that are proportional to the weights of the underlying function. Although explaining the weights of a linear function with another set of weights might appear unnecessary, proportionality can be interpreted as a sanity check for explainability methods. <ref type="bibr">Garreau &amp; von Luxburg (2020)</ref> prove a weaker version of proportionality for C-LIME, where the multiplier k might be different for each feature.</p><p>An immediate consequence of proportionality is that, in general, SmoothGrad and C-LIME do not provide sparse explanations (for e.g., when the underlying function f is linear and non-sparse). In practice, sparsity can be promoted by adding a regularizer (i.e., by setting &#8486;(g) appropriately in our general setting). We study the regularized version of C-LIME in the full version.</p></div>
<div xmlns="http://www.tei-c.org/ns/1.0"><head n="6.">Experiments</head><p>In this section we evaluate our theoretical findings empirically on synthetic and real world datasets. We analyze the equivalence and robustness of SmoothGrad and C-LIME with respect to the number of perturbations. Finally we assess the sensitivity of these results to varying the hyperparameters such as the variance &#963; 2 in perturbations.</p></div>
<div xmlns="http://www.tei-c.org/ns/1.0"><head n="6.1.">Experimental Setup</head><p>Datasets: We generate a synthetic dataset and use 2 real world classification datasets from the UCI Machine Learning Repository <ref type="bibr">(Dua &amp; Graff, 2017)</ref>.</p><p>1. Simulated. We simulate a 1000 sample classification dataset with a 2 dimensional feature space. We fix y &#8712; {0, 1} randomly for each instance and sample x &#8712; R 2 from N (&#181; y , I 2 ) where &#181; 0 = [-1, -1] and &#181; 1 = [1, 1]. This results in the class clusters illustrated in Figure <ref type="figure">1</ref>.</p><p>2. Bankruptcy. This dataset comprises of bankruptcy prediction of Polish companies <ref type="bibr">(Zikeba et al., 2016)</ref>. The input attributes consist of features like net profit, sales and inventory from a pool of 10503 companies. We discard categorical features to align with our theory. As is standard practice when training neural networks, we normalize continuous features to N (0, 1). Given the resulting 15 dimensional feature set, the classification task is to predict whether the company in interest will bankrupt or not.</p><p>3. Online Shopping. This dataset comprises 12330 instances of online shopping interactions <ref type="bibr">(Saka et al., 2019)</ref>. Each sample contains 10 numerical features like the number of pages shoppers visited, time they spend on a page, metrics from Google Analytics and similar. Like with the Bankruptcy dataset, we discard categorical variables and normalize continuous variables, resulting in an 11 dimensional feature space. The target variable for classification is whether an online interaction ends in a purchase or not.</p><p>We choose the Bankruptcy and Online Shopping datasets since they contain a large number of real-valued features as assumed by our theory.</p><p>Underlying Function: For all our experiments, we use a two layer neural network with ELU activation function and 10 nodes per hidden layer. We follow the standard 80/20 dataset split, i.e., 80% of the data was used for training the model while 20% was used for testing. These are the underlying models (functions) that we are explaining in our experiments. The models are trained using Adam optimizer using a cross-entropy loss function. Our best performing models achieve a testing accuracy of 99.50%, 96.30%, and 99.8% using 15, 60, and 100 training epochs for the Simulated, Bankruptcy, and Online Shopping datasets, respectively. We also train models using fewer than the aforementioned training epochs to assess the the impact of model accuracy on our equivalence and robustness guarantees.</p><p>Parameters: Consistent with our theory, for any input point x, for both C-LIME and SmoothGrad we generate perturbations from a local neighborhood of x by sampling points from N (x, &#963; 2 I). We study the effect of the number of perturbations and the value of &#963; 2 in our experiments. between the explanations of SmoothGrad and C-LIME decreases as we increase the number of perturbations (X axis). Each curve corresponds to a different dataset.</p></div>
<div xmlns="http://www.tei-c.org/ns/1.0"><head n="6.2.">Equivalence</head><p>To evaluate the equivalence between SmoothGrad and C-LIME, we begin by generating explanations for each instance in the datasets' testing splits using &#963; 2 = 1. We probe the effect of varying &#963; 2 in Section 6.4. We measure the distance between SmoothGrad and C-LIME explanations for each instance and then average these distances over the entire testing split. We repeat this process for different numbers of perturbations, plotting these average distances versus number of perturbations in Figure <ref type="figure">2</ref>.</p><p>We observe that across all three datasets, the average L1 distance between the explanations for SmoothGrad and C-LIME decreases as we increase their respective number of perturbations, supporting equivalence. Interestingly, for all the three datasets the equivalence between the two explanation methods is achieved at as low as 100 perturbations. This is significantly lower than the finite perturbation estimates we derive in Proposition 1 and Theorem 3, suggesting that in practice, explanations approach their expected value even with a small number of perturbations.</p></div>
<div xmlns="http://www.tei-c.org/ns/1.0"><head n="6.3.">Robustness</head><p>To evaluate the robustness of SmoothGrad and C-LIME, we first take each instance x in the testing splits and generate 10 nearby neighbors x &#8764; N (x, 0.01I). We compute explanations for each original instance and its neighbors by perturbations using &#963; 2 = 1. For each instance x, we compute the distance between the explanation for x and the explanations for each of its neighboring points x . We take the maximum of these distances and then take the average of these maximum distances over the entire testing split. A small value for this average maximum distance suggests that explanations are robust as it implies that the difference between explanations for an instance and its nearby neighbors is small. We compute this average maximum distance for various numbers of perturbations and plot them in Figure <ref type="figure">3</ref>.</p><p>The average maximum distance approaches zero across all three datasets, evidencing the robustness of both Smooth-Grad and C-LIME. Notice that SmoothGrad appears to be more robust than C-LIME, with the average maximum distance saturating even closer to 0 than C-LIME. Furthermore, SmoothGrad saturates faster than C-LIME at perturbation numbers as small as 200. This suggests that SmoothGrad is more robust than C-LIME for fixed finite perturbations.</p></div>
<div xmlns="http://www.tei-c.org/ns/1.0"><head n="6.4.">Sensitivity Analysis</head><p>We evaluate the sensitivity of our findings to varying parameters &#963; 2 and accuracy of the underlying function.</p><p>Sensitivity to &#963; 2 . We begin by evaluating the impact of varying &#963; 2 (variance on the perturbations) on our results. We choose to focus on the Bankruptcy dataset, generating the previously described equivalency and robustness plots for &#963; 2 = 0.01, 0.1, and 1, as illustrated in Figure <ref type="figure">4</ref>. For additional analysis for other dataset refer to the full version. Notice that SmoothGrad and C-LIME converge to equivalence faster for smaller &#963; 2 . Similarly, both Smooth-Grad and C-LIME appear to achieve robustness faster for smaller &#963; 2 . Both of these observations are intuitive as &#963; 2 controls the size of the local neighborhood used to generate perturbations. Our theory, on the other hand, predicts that the number of perturbations should increase as either &#963; 2 approaches 0 or becomes very large. We suspect that this is due to our style of analysis which requires worst-case bounds on quantities such as the inverse of sampled covariance matrix which hypothetically can grow as &#963; 2 approaches 0.</p><p>Sensitivity to Performance of Underlying Function. Finally, we analyze whether the performance of the underlying model hinders the equivalence or robustness of SmoothGrad and C-LIME. We modulate model performance by reducing the number of training epochs. We train a model with 86% accuracy using 16 epochs and contrast it to our original model with 96% accuracy after 60 epochs. Again we choose to focus on the Bankruptcy dataset, generating the previously described equivalency and robustness plots for both models, as illustrated in Figure <ref type="figure">5</ref>. Interestingly, the convergence rates slow down as the performance of the model becomes worse. See the full version for more details.</p></div>
<div xmlns="http://www.tei-c.org/ns/1.0"><head n="7.">Related Work</head><p>Interpretability research can be categorized into learning inherently interpretable models, and constructing post hoc explanations. We provide an overview below.</p><p>Inherently Interpretable Models. Many approaches have been proposed to learn inherently interpretable models, for various tasks including classification and clustering. To this end, various classes of models such as decision trees, decision lists <ref type="bibr">(Letham et al., 2015)</ref>, decision sets <ref type="bibr">(Lakkaraju et al., 2016)</ref>, prototype based models <ref type="bibr">(Bien &amp; Tibshirani, 2009;</ref><ref type="bibr">Kim et al., 2014)</ref>, and generalized additive models <ref type="bibr">(Lou et al., 2012;</ref><ref type="bibr">Caruana et al., 2015)</ref> were proposed. However, complex models such as deep neural networks often achieve higher accuracy than simpler models <ref type="bibr">(Ribeiro et al., 2016)</ref>; thus, there has been a lot of interest in constructing post hoc explanations to understand their behavior.</p><p>Post Hoc Explanations. Several techniques have been proposed in recent literature to construct post hoc explana- tions of complex decision models. These techniques differ in their access to the complex model (i.e., black box vs. access to internals), scope of approximation (e.g., global vs. local), search technique (e.g., perturbation-based vs. gradient-based), and basic units of explanation (e.g., feature importance vs. rule based). In addition to LIME <ref type="bibr">(Ribeiro et al., 2016)</ref> and SHAP <ref type="bibr">(Lundberg &amp; Lee, 2017)</ref>, there are several other model-agnostic, local explanation approaches that explain individual predictions of black box models such as Anchors, BayesLIME and BayesSHAP <ref type="bibr">(Ribeiro et al., 2018;</ref><ref type="bibr">Slack et al., 2020b;</ref><ref type="bibr">Koh &amp; Liang, 2017)</ref>. Several of these approaches rely on input perturbations to learn interpretable local approximations.</p><p>Other local explanation methods including SmoothGrad have been proposed to compute saliency maps which capture local feature importance for an individual prediction by computing the gradient at that particular instance <ref type="bibr">(Simonyan et al., 2014;</ref><ref type="bibr">Sundararajan et al., 2017;</ref><ref type="bibr">Selvaraju et al., 2017;</ref><ref type="bibr">Smilkov et al., 2017)</ref>. There has also been recent work on constructing counterfactual explanations which capture what changes need to be made to a given instance in order to flip its prediction <ref type="bibr">(Wachter et al., 2017;</ref><ref type="bibr">Ustun et al., 2019;</ref><ref type="bibr">Karimi et al., 2019;</ref><ref type="bibr">Poyiadzi et al., 2020;</ref><ref type="bibr">Looveren &amp; Klaise, 2019;</ref><ref type="bibr">Barocas et al., 2020;</ref><ref type="bibr">Karimi et al., 2020a;</ref><ref type="bibr">b)</ref>. Such explanations can be leveraged to provide recourse to individuals negatively impacted by algorithmic decisions.</p><p>An alternate approach is to construct global explanations for summarizing the complete behavior of any given black box by approximating it using interpretable models <ref type="bibr">(Lakkaraju et al., 2019;</ref><ref type="bibr">Bastani et al., 2017;</ref><ref type="bibr">Kim et al., 2018)</ref>.</p><p>Analyzing Post Hoc Explanations. Recent work has shed light on the downsides of post hoc explanation techniques. For instance, <ref type="bibr">Rudin (2019)</ref> argued that post hoc explanations are not reliable, as these explanations are not necessarily faithful to the underlying models and present correlations. There has also been recent work on empirically exploring vulnerabilities of black box explanations <ref type="bibr">(Adebayo et al., 2018;</ref><ref type="bibr">Slack et al., 2020a;</ref><ref type="bibr">Lakkaraju &amp; Bastani, 2020;</ref><ref type="bibr">Rudin, 2019;</ref><ref type="bibr">Dombrowski et al., 2019</ref>)-e.g., <ref type="bibr">Ghorbani et al. (2019)</ref> demonstrated that post hoc explanations may not be robust, changing drastically even with small perturbations to inputs (Alvarez-Melis &amp; Jaakkola, 2018).</p><p>In addition to the above works, there has also been some recent research that focuses on theoretically analyzing the robustness <ref type="bibr">(Levine et al., 2019;</ref><ref type="bibr">Chalasani et al., 2020)</ref>, and other properties <ref type="bibr">(Garreau &amp; von Luxburg, 2020)</ref> of some of the popular post hoc explanation techniques. However, these works do not attempt to explore deeper connections between different classes of these techniques.</p></div>
<div xmlns="http://www.tei-c.org/ns/1.0"><head n="8.">Future Work</head><p>We initiate a study on the unification of perturbation and gradient based post hoc explanations, and pave the way for several promising research directions. It would be interesting to establish connections between other perturbation and gradient based explanations such as SHAP or Integrated gradients. It would also be interesting to study how perturbation and gradient based methods relate to counterfactual explanations. Furthermore, we mainly focused on the analysis of feature attribution methods. It would be exciting to analyze other kinds of explanation methods such as rule based or prototype based methods.</p></div><note xmlns="http://www.tei-c.org/ns/1.0" place="foot" n="2" xml:id="foot_0"><p>Many of our results hold for arbitrary &#931;. We point these out explicitly when we discuss our results.</p></note>
		</body>
		</text>
</TEI>
