Mitigating Downstream Model Risks via Model Provenance

Fuente: arXiv
Enregistré dans:
Détails bibliographiques
Auteurs principaux: Wang, Keyu, Iranzad, Abdullah Norozi, Schaffter, Scott, Risdal, Meg, Precup, Doina, Lebensold, Jonathan
Format: Preprint
Publié: 2024
Sujets:
Accès en ligne:
Tags: Ajouter un tag
Pas de tags, Soyez le premier à ajouter un tag!
_version_ 1866913611270586368
author Wang, Keyu
Iranzad, Abdullah Norozi
Schaffter, Scott
Risdal, Meg
Precup, Doina
Lebensold, Jonathan
author_facet Wang, Keyu
Iranzad, Abdullah Norozi
Schaffter, Scott
Risdal, Meg
Precup, Doina
Lebensold, Jonathan
contents Research and industry are rapidly advancing the innovation and adoption of foundation model-based systems, yet the tools for managing these models have not kept pace. Understanding the provenance and lineage of models is critical for researchers, industry, regulators, and public trust. While model cards and system cards were designed to provide transparency, they fall short in key areas: tracing model genealogy, enabling machine readability, offering reliable centralized management systems, and fostering consistent creation incentives. This challenge mirrors issues in software supply chain security, but AI/ML remains at an earlier stage of maturity. Addressing these gaps requires industry-standard tooling that can be adopted by foundation model publishers, open-source model innovators, and major distribution platforms. We propose a machine-readable model specification format to simplify the creation of model records, thereby reducing error-prone human effort, notably when a new model inherits most of its design from a foundation model. Our solution explicitly traces relationships between upstream and downstream models, enhancing transparency and traceability across the model lifecycle. To facilitate the adoption, we introduce the unified model record (UMR) repository , a semantically versioned system that automates the publication of model records to multiple formats (PDF, HTML, LaTeX) and provides a hosted web interface (https://modelrecord.com/). This proof of concept aims to set a new standard for managing foundation models, bridging the gap between innovation and responsible model management.
format Preprint
id arxiv_https___arxiv_org_abs_2410_02230
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle Mitigating Downstream Model Risks via Model Provenance
Wang, Keyu
Iranzad, Abdullah Norozi
Schaffter, Scott
Risdal, Meg
Precup, Doina
Lebensold, Jonathan
Machine Learning
Cryptography and Security
Research and industry are rapidly advancing the innovation and adoption of foundation model-based systems, yet the tools for managing these models have not kept pace. Understanding the provenance and lineage of models is critical for researchers, industry, regulators, and public trust. While model cards and system cards were designed to provide transparency, they fall short in key areas: tracing model genealogy, enabling machine readability, offering reliable centralized management systems, and fostering consistent creation incentives. This challenge mirrors issues in software supply chain security, but AI/ML remains at an earlier stage of maturity. Addressing these gaps requires industry-standard tooling that can be adopted by foundation model publishers, open-source model innovators, and major distribution platforms. We propose a machine-readable model specification format to simplify the creation of model records, thereby reducing error-prone human effort, notably when a new model inherits most of its design from a foundation model. Our solution explicitly traces relationships between upstream and downstream models, enhancing transparency and traceability across the model lifecycle. To facilitate the adoption, we introduce the unified model record (UMR) repository , a semantically versioned system that automates the publication of model records to multiple formats (PDF, HTML, LaTeX) and provides a hosted web interface (https://modelrecord.com/). This proof of concept aims to set a new standard for managing foundation models, bridging the gap between innovation and responsible model management.
title Mitigating Downstream Model Risks via Model Provenance
topic Machine Learning
Cryptography and Security
url https://arxiv.org/abs/2410.02230