English

Distill-and-Compare: Auditing Black-Box Models Using Transparent Model Distillation

Machine Learning 2018-10-12 v4 Artificial Intelligence Machine Learning

Abstract

Black-box risk scoring models permeate our lives, yet are typically proprietary or opaque. We propose Distill-and-Compare, a model distillation and comparison approach to audit such models. To gain insight into black-box models, we treat them as teachers, training transparent student models to mimic the risk scores assigned by black-box models. We compare the student model trained with distillation to a second un-distilled transparent model trained on ground-truth outcomes, and use differences between the two models to gain insight into the black-box model. Our approach can be applied in a realistic setting, without probing the black-box model API. We demonstrate the approach on four public data sets: COMPAS, Stop-and-Frisk, Chicago Police, and Lending Club. We also propose a statistical test to determine if a data set is missing key features used to train the black-box model. Our test finds that the ProPublica data is likely missing key feature(s) used in COMPAS.

Cite

@article{arxiv.1710.06169,
  title  = {Distill-and-Compare: Auditing Black-Box Models Using Transparent Model Distillation},
  author = {Sarah Tan and Rich Caruana and Giles Hooker and Yin Lou},
  journal= {arXiv preprint arXiv:1710.06169},
  year   = {2018}
}

Comments

Camera-ready version for AAAI/ACM AIES 2018. Data and pseudocode at https://github.com/shftan/auditblackbox. Previously titled "Detecting Bias in Black-Box Models Using Transparent Model Distillation". A short version was presented at NIPS 2017 Symposium on Interpretable Machine Learning

R2 v1 2026-06-22T22:16:37.324Z