Podcasts Technology AXRP - the AI X-risk Research Podcast 21 - Interpretability for Engineers with Stephen Casper

21 - Interpretability for Engineers with Stephen Casper

Published: May 2, 2023, 12:50 a.m.

Lots of people in the field of machine learning study 'interpretability', developing tools that they say give us useful information about neural networks. But how do we know if meaningful progress is actually being made? What should we want out of these tools? In this episode, I speak to Stephen Casper about these questions, as well as about a benchmark he's co-developed to evaluate whether interpretability tools can find 'Trojan horses' hidden inside neural nets.

Patreon: patreon.com/axrpodcast

Ko-fi: ko-fi.com/axrpodcast

\xa0

Topics we discuss, and timestamps:

\xa0- 00:00:42 - Interpretability for engineers

\xa0\xa0 - 00:00:42 - Why interpretability?

\xa0\xa0 - 00:12:55 - Adversaries and interpretability

\xa0\xa0 - 00:24:30 - Scaling interpretability

\xa0\xa0 - 00:42:29 - Critiques of the AI safety interpretability community

\xa0\xa0 - 00:56:10 - Deceptive alignment and interpretability

\xa0- 01:09:48 - Benchmarking Interpretability Tools (for Deep Neural Networks) (Using Trojan Discovery)

\xa0\xa0 - 01:10:40 - Why Trojans?

\xa0\xa0 - 01:14:53 - Which interpretability tools?

\xa0\xa0 - 01:28:40 - Trojan generation

\xa0\xa0 - 01:38:13 - Evaluation

\xa0- 01:46:07 - Interpretability for shaping policy

\xa0- 01:53:55 - Following Casper's work

\xa0

The transcript: axrp.net/episode/2023/05/02/episode-21-interpretability-for-engineers-stephen-casper.html

\xa0

Links for Casper:

\xa0- Personal website: stephencasper.com/

\xa0- Twitter: twitter.com/StephenLCasper

\xa0- Electronic mail: scasper [at] mit [dot] edu

\xa0

Research we discuss:

\xa0- The Engineer's Interpretability Sequence: alignmentforum.org/s/a6ne2ve5uturEEQK7

\xa0- Benchmarking Interpretability Tools for Deep Neural Networks: arxiv.org/abs/2302.10894

\xa0- Adversarial Policies beat Superhuman Go AIs: goattack.far.ai/

\xa0- Adversarial Examples Are Not Bugs, They Are Features: arxiv.org/abs/1905.02175

\xa0- Planting Undetectable Backdoors in Machine Learning Models: arxiv.org/abs/2204.06974

\xa0- Softmax Linear Units: transformer-circuits.pub/2022/solu/index.html

\xa0- Red-Teaming the Stable Diffusion Safety Filter: arxiv.org/abs/2210.04610

\xa0

Episode art by Hamish Doodles: hamishdoodles.com