arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2410.04772cs.CYcs.LG
收藏

从透明到问责再回到透明:AI审计中的访问权限与证据问题探讨

From Transparency to Accountability and Back: A Discussion of Access and Evidence in AI Auditing

Stanford University(斯坦福大学);Massachusetts Institute of Technology(麻省理工学院)

Sarah H. Cen, Rohan Alur

AI总结:

该研究探讨AI审计的核心操作问题——开展有效审计所需的AI系统访问权限,分析四类访问的优劣,提出至少应授予黑盒访问权限,并构建了确定额外访问权限的假设检验框架,为审计实施提供清晰指导。

摘要:

人工智能(AI)正越来越多地介入我们的生活,其非预期且未声明的副作用引发了广泛担忧。这些发展让AI审计问题受到关注:AI审计指依据一组预定标准,对AI系统、其开发过程及行为开展的系统性评估与分析。审计有多种形式,包括部署前风险评估、持续监测和合规性测试,在为从开发者到终端用户的各类AI利益相关方提供保障方面发挥着关键作用。例如,审计可用于验证算法是否符合法律规定、是否与行业标准一致、是否满足开发者宣称的规格要求。但AI审计存在诸多操作层面的挑战,使其落地变得复杂。\n在本研究中,我们探讨了AI审计中的一个核心操作问题:要开展有意义的审计,需要获得对AI系统的何种访问权限?解答这一问题具有直接的政策意义,可为AI审计指南与要求制定提供参考。我们首先讨论了审计人员在确定合适的访问类型时需要权衡的因素,并剖析了四种访问类型的优缺点。我们得出结论:至少应向审计人员授予黑盒访问权限(即提供模型的查询权限而不披露其内部实现),因为它能在商业机密、数据隐私、审计标准化与审计效率相关的考量之间取得平衡。随后,我们提出了一个框架,用于确定除黑盒访问权限外,还应向审计人员授予多少额外访问权限。我们表明,审计可被构建为一种自然的假设检验,将假设检验与法律程序进行类比,并认为这种框架能为审计实施提供清晰且可解释的指导。

英文摘要:

Artificial intelligence (AI) is increasingly intervening in our lives, raising widespread concern about its unintended and undeclared side effects. These developments have brought attention to the problem of AI auditing: the systematic evaluation and analysis of an AI system, its development, and its behavior relative to a set of predetermined criteria. Auditing can take many forms, including pre-deployment risk assessments, ongoing monitoring, and compliance testing. It plays a critical role in providing assurances to various AI stakeholders, from developers to end users. Audits may, for instance, be used to verify that an algorithm complies with the law, is consistent with industry standards, and meets the developer's claimed specifications. However, there are many operational challenges to AI auditing that complicate its implementation. In this work, we examine a key operational issue in AI auditing: what type of access to an AI system is needed to perform a meaningful audit? Addressing this question has direct policy relevance, as it can inform AI audit guidelines and requirements. We begin by discussing the factors that auditors balance when determining the appropriate type of access, and unpack the benefits and drawbacks of four types of access. We conclude that, at minimum, black-box access -- providing query access to a model without exposing its internal implementation -- should be granted to auditors, as it balances concerns related to trade secrets, data privacy, audit standardization, and audit efficiency. We then suggest a framework for determining how much further access (in addition to black-box access) to grant auditors. We show that auditing can be cast as a natural hypothesis test, draw parallels hypothesis testing and legal procedure, and argue that this framing provides clear and interpretable guidance on audit implementation.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑