← Search

Quanshi Zhang

47 accepted papers

2026

Can LLMs Reason Soundly in Law? Auditing Inference Patterns for Legal Judgment

ICLR 2026poster

This paper presents a method to analyze the inference patterns used by Large Language Models (LLMs) for judgment in a case study on legal LLMs, so as to identify potential incorrect representations of the LLM, according to human domain knowledge. Unlike traditional evaluations on language generation…

Cited by 0SourceScholar
2026

UniDrag: Unified Multi-Field Prediction and Robust Shape Optimization for Vehicle Aerodynamics

ICML 2026poster

High-fidelity vehicle aerodynamics analysis is bottlenecked by costly CFD simulations. Neural surrogates accelerate prediction but lack inverse design capabilities, while existing generative optimization methods suffer from unstable convergence and frequent engineering constraint violations. We pres…

Cited by 0SourceScholar
2025

Monitoring Primitive Interactions During the Training of DNNs

AAAI 2025technical

This paper focuses on the newly emerged research topic, i.e., whether the complex decision-making logic of a DNN can be mathematically summarized into a few simple logics. Beyond the explanation of a static DNN, in this paper, we hope to show that the seemingly complex learning dynamics of a DNN can…

Cited by 0SourcePDFScholar
2025

Towards the Resistance of Neural Network Fingerprinting to Fine-tuning

NeurIPS 2025poster

This paper proves a new fingerprinting method to embed the ownership information into a deep neural network (DNN) with theoretically guaranteed robustness to fine-tuning. Specifically, we prove that when the input feature of a convolutional layer only contains low-frequency components, specific freq…

Cited by 0SourceScholar
2024

Batch Normalization Is Blind to the First and Second Derivatives of the Loss

AAAI 2024technical

We prove that when we do the Taylor series expansion of the loss function, the BN operation will block the influence of the first-order term and most influence of the second-order term of the loss. We also find that such a problem is caused by the standardization phase of the BN operation. We believ…

Cited by 0SourcePDFScholar
2024

Clarifying the Behavior and the Difficulty of Adversarial Training

AAAI 2024technical

Adversarial training is usually difficult to optimize. This paper provides conceptual and analytic insights into the difficulty of adversarial training via a simple theoretical study, where we derive an approximate dynamics of a recursive multi-step attack in a simple setting. Despite the simplicity…

Cited by 0SourcePDFScholar
2024

Defining and extracting generalizable interaction primitives from DNNs

ICLR 2024poster

Faithfully summarizing the knowledge encoded by a deep neural network (DNN) into a few symbolic primitive patterns without losing much information represents a core challenge in explainable AI. To this end, Ren et al. (2024) have derived a series of theorems to prove that the inference score of a DN…

2024

Explaining Generalization Power of a DNN Using Interactive Concepts

AAAI 2024technical

This paper explains the generalization power of a deep neural network (DNN) from the perspective of interactions. Although there is no universally accepted definition of the concepts encoded by a DNN, the sparsity of interactions in a DNN has been proved, i.e., the output score of a DNN can be well…

Cited by 18SourcePDFScholar
2024

Identifying Semantic Induction Heads to Understand In-Context Learning

ACL 2024findings

Although large language models (LLMs) have demonstrated remarkable performance, the lack of transparency in their inference logic raises concerns about their trustworthiness. To gain a better understanding of LLMs, we conduct a detailed analysis of the operations of attention heads and aim to better…

2024

Layerwise Change of Knowledge in Neural Networks

ICML 2024poster

This paper aims to explain how a deep neural network (DNN) gradually extracts new knowledge and forgets noisy features through layers in forward propagation. Up to now, although how to define knowledge encoded by the DNN has not reached a consensus so far, previous studies have derived a series of m…

Cited by 5SourcePDFScholar
2024

Towards the Dynamics of a DNN Learning Symbolic Interactions

NeurIPS 2024poster

This study proves the two-phase dynamics of a deep neural network (DNN) learning interactions. Despite the long disappointing view of the faithfulness of post-hoc explanation of a DNN, a series of theorems have been proven [27] in recent years to show that for a given input sample, a small set of in…

Cited by 5SourcePDFScholar
2024

Where We Have Arrived in Proving the Emergence of Sparse Interaction Primitives in DNNs

ICLR 2024poster

This study aims to prove the emergence of symbolic concepts (or more precisely, sparse primitive inference patterns) in well-trained deep neural networks (DNNs). Specifically, we prove the following three conditions for the emergence. (i) The high-order derivatives of the network output with respect…

Cited by 13SourcePDFScholar
2023

Bayesian Neural Networks Avoid Encoding Complex and Perturbation-Sensitive Concepts

ICML 2023poster

In this paper, we focus on mean-field variational Bayesian Neural Networks (BNNs) and explore the representation capacity of such BNNs by investigating which types of concepts are less likely to be encoded by the BNN. It has been observed and studied that a relatively small set of interactive concep…

2023

Can We Faithfully Represent Absence States to Compute Shapley Values on a DNN?

ICLR 2023poster

Masking some input variables of a deep neural network (DNN) and computing output changes on the masked input sample represent a typical way to compute attributions of input variables in the sample. People usually mask an input variable using its baseline value. However, there is no theory to examine…

Cited by 27SourcePDFScholar
2023

Defects of Convolutional Decoder Networks in Frequency Representation

ICML 2023poster

In this paper, we prove the representation defects of a cascaded convolutional decoder network, considering the capacity of representing different frequency components of an input sample. We conduct the discrete Fourier transform on each channel of the feature map in an intermediate layer of the dec…

Cited by 16SourcePDFScholar
2023

Defining and Quantifying the Emergence of Sparse Concepts in DNNs

CVPR 2023poster

This paper aims to illustrate the concept-emerging phenomenon in a trained DNN. Specifically, we find that the inference score of a DNN can be disentangled into the effects of a few interactive concepts. These concepts can be understood as inference patterns in a sparse, symbolic graphical model, wh…

2023

HarsanyiNet: Computing Accurate Shapley Values in a Single Forward Propagation

ICML 2023poster

The Shapley value is widely regarded as a trustworthy attribution metric. However, when people use Shapley values to explain the attribution of input variables of a deep neural network (DNN), it usually requires a very high computational cost to approximate relatively accurate Shapley values in real…

2023

Towards the Difficulty for a Deep Neural Network to Learn Concepts of Different Complexities

NeurIPS 2023poster

This paper theoretically explains the intuition that simple concepts are more likely to be learned by deep neural networks (DNNs) than complex concepts. In fact, recent studies have observed [24, 15] and proved [26] the emergence of interactive concepts in a DNN, i.e., it is proven that a DNN usuall…

Cited by 19SourcePDFScholar
2022

DISCOVERING AND EXPLAINING THE REPRESENTATION BOTTLENECK OF DNNS

ICLR 2022oral

This paper explores the bottleneck of feature representations of deep neural networks (DNNs), from the perspective of the complexity of interactions between input variables encoded in DNNs. To this end, we focus on the multi-order interaction between input variables, where the order represents the c…

2022

Interpretable Generative Adversarial Networks

AAAI 2022technical

Learning a disentangled representation is still a challenge in the field of the interpretability of generative adversarial networks (GANs). This paper proposes a generic method to modify a traditional GAN into an interpretable GAN, which ensures that filters in an intermediate layer of the generator…

2022

Quantification and Analysis of Layer-wise and Pixel-wise Information Discarding

ICML 2022spotlight

This paper presents a method to explain how the information of each input variable is gradually discarded during the forward propagation in a deep neural network (DNN), which provides new perspectives to explain DNNs. We define two types of entropy-based metrics, i.e. (1) the discarding of pixel-wis…

2022

RASAT: Integrating Relational Structures into Pretrained Seq2Seq Model for Text-to-SQL

EMNLP 2022main

Relational structures such as schema linking and schema encoding have been validated as a key component to qualitatively translating natural language into SQL queries. However, introducing these structural relations comes with prices: they often result in a specialized model structure, which largely…

2022

Towards Theoretical Analysis of Transformation Complexity of ReLU DNNs

ICML 2022spotlight

This paper aims to theoretically analyze the complexity of feature transformations encoded in piecewise linear DNNs with ReLU layers. We propose metrics to measure three types of complexities of transformations based on the information theory. We further discover and prove the strong correlation bet…

2021

A Unified Approach to Interpreting and Boosting Adversarial Transferability

ICLR 2021poster

In this paper, we use the interaction inside adversarial perturbations to explain and boost the adversarial transferability. We discover and prove the negative correlation between the adversarial transferability and the interaction inside adversarial perturbations. The negative correlation is furthe…

2021

Building Interpretable Interaction Trees for Deep NLP Models

AAAI 2021technical

This paper proposes a method to disentangle and quantify interactions among words that are encoded inside a DNN for natural language processing. We construct a tree to encode salient interactions extracted by the DNN. Six metrics are proposed to analyze properties of interactions between constituent…

Cited by 43SourcePDFScholar
2021

Interpretable Compositional Convolutional Neural Networks

IJCAI 2021poster

This paper proposes a method to modify a traditional convolutional neural network (CNN) into an interpretable compositional CNN, in order to learn filters that encode meaningful visual patterns in intermediate convolutional layers. In a compositional CNN, each filter is supposed to consistently repr…

2021

Interpreting Attributions and Interactions of Adversarial Attacks

ICCV 2021poster

This paper aims to explain adversarial attacks in terms of how adversarial perturbations contribute to the attacking task. We estimate attributions of different image regions to the decrease of the attacking cost based on the Shapley value. We define and quantify interactions among adversarial pertu…

Cited by 13PDFScholar
2021

Interpreting Multivariate Shapley Interactions in DNNs

AAAI 2021technical

This paper aims to explain deep neural networks (DNNs) from the perspective of multivariate interactions. In this paper, we define and quantify the significance of interactions among multiple input variables of the DNN. Input variables with strong interactions usually form a coalition and reflect pr…

Cited by 79SourcePDFScholar
2021

Interpreting Representation Quality of DNNs for 3D Point Cloud Processing

NeurIPS 2021poster

In this paper, we evaluate the quality of knowledge representations encoded in deep neural networks (DNNs) for 3D point cloud processing. We propose a method to disentangle the overall model vulnerability into the sensitivity to the rotation, the translation, the scale, and local 3D structures. Besi…

Cited by 19SourcePDFScholar
2021

Interpreting and Boosting Dropout from a Game-Theoretic View

ICLR 2021poster

This paper aims to understand and improve the utility of the dropout operation from the perspective of game-theoretical interactions. We prove that dropout can suppress the strength of interactions between input variables of deep neural networks (DNNs). The theoretical proof is also verified by vari…

Cited by 55SourcePDFScholar
2021

Interpreting and Disentangling Feature Components of Various Complexity from DNNs

ICML 2021spotlight

This paper aims to define, visualize, and analyze the feature complexity that is learned by a DNN. We propose a generic definition for the feature complexity. Given the feature of a certain layer in the DNN, our method decomposes and visualizes feature components of different complexity orders from…

Cited by 22SourcePDFScholar
2021

Towards a Unified Game-Theoretic View of Adversarial Perturbations and Robustness

NeurIPS 2021poster

This paper provides a unified view to explain different adversarial attacks and defense methods, i.e. the view of multi-order interactions between input variables of DNNs. Based on the multi-order interaction, we discover that adversarial attacks mainly affect high-order interactions to fool the DNN…

2021

Verifiability and Predictability: Interpreting Utilities of Network Architectures for Point Cloud Processing

CVPR 2021poster

In this paper, we diagnose deep neural networks for 3D point cloud processing to explore utilities of different network architectures. We propose a number of hypotheses on the effects of specific network architectures on the representation capacity of DNNs. In order to prove the hypotheses, we desig…

Cited by 4PDFScholar
2020

3D-Rotation-Equivariant Quaternion Neural Networks

ECCV 2020poster

This paper proposes a set of rules to revise various neural networks for 3D point cloud processing to rotation-equivariant quaternion neural networks (REQNNs). We find that when a neural network uses quaternion features, the network feature naturally has the rotation-equivariance property. Rotation…

Cited by 68SourcePDFScholar
2020

Interpretable Complex-Valued Neural Networks for Privacy Protection

ICLR 2020poster

Previous studies have found that an adversary attacker can often infer unintended input information from intermediate-layer features. We study the possibility of preventing such adversarial inference, yet without too much accuracy degradation. We propose a generic method to revise the neural network…

Cited by 45SourceScholar
2020

Knowledge Consistency between Neural Networks and Beyond

ICLR 2020poster

This paper aims to analyze knowledge consistency between pre-trained deep neural networks. We propose a generic definition for knowledge consistency between neural networks at different fuzziness levels. A task-agnostic method is designed to disentangle feature components, which represent the consis…

Cited by 41SourceScholar
2019

Towards a Deep and Unified Understanding of Deep Neural Models in NLP

ICML 2019oral

We define a unified information-based measure to provide quantitative explanations on how intermediate layers of deep Natural Language Processing (NLP) models leverage information of input words. Our method advances existing explanation methods by addressing issues in coherency and generality. Expla…

Cited by 139SourcePDFScholar