Summary
This paper argues that distillation implicitly transfers many different behaviors from the teacher to the student, even though these are not explicitly matched via the distillation objective. These include:
1. The saliency map computed via Grad-CAM
2. Specific adversarial examples of the teacher
3. Invariance that the teacher has learned via data augmentations on color jitter, bridghtness, contrast etc.,
4. Performance on Out-of-Distribution (OoD) data
The distillation approaches studied here are:
- the standard K-divergence based loss,
- the Hint loss which matches embeddings and
- contrastive representation KD
The architectures covered are VGG, ResNet, ViT, and Swin (although not all these architectures are used in all experiments).
All main experiments are on ImageNet. A few additional experiments are on MNIST.
The paper also provides an intuitive argument for why such implicit knowledge is transferred: the distilled student learns the specific decision boundary of the teacher. This is verified for an MNIST setting where the network via some existing techniques for comparing decision boundaries.
The paper argues that these findings have practical implications in (a) allowing the student to generalizing to new domains, (b) but also in transferring harmful biases to the student.
Strengths
1. The questions explored in the paper are novel and interesting. This is a new perspective on what type of knowledge may be inadvertently transferred from the teacher to the student.
2. The paper covers various types of knowledge (namely, saliency maps, OOD, adversarial examples, invariances) and there is clear evidence across the board that the student typically imitates the teacher non-trivially.
3. The paper covers three fundamentally different types of distillation losses, which strengthens their claim.
4. The experiments are designed carefully. In all cases, an "independent" student is considered as a baseline so as to judge whether the distilled-student is indeed copying the teacher.
Weaknesses
1. My main concern is that all the main experiments appear to be limited to one (ImageNet) dataset. While this is certainly a non-trivial and sufficiently realistic dataset, one should be wary of drawing observations from a single dataset. Either a language dataset or another image dataset (say, CIFAR100) would have been ideal. But I understand that it would be hard to add these during the rebuttal.
2. The argument for "why does KD transfer such implicit knowledge" is not compelling and appears to be somewhat circular. The argument given is that "KD transfers various implicit behaviors of the teacher because the student inherits the decision boundary". The key puzzle however is why the KD objective is able transfer all of the decision boundary, and that too on OoD and adversarial regions the student isn't trained on. Overall, I find the claim that the paper's argument "explains" the phenomenon to be too strong.
### Summary
Overall, this paper presents is an interesting collection of observations, identifying an underlying pattern across various distillation algorithms. Although I have some concerns with (a) the specificity to ImageNet and (b) the paper's claim at explaining these phenomena, I believe future work would definitely find this useful.
### Post-rebuttal update
Increasing the score by 1 to acknowledge the authors' new experiments on adversarial vulnerability and domain adaptation that go beyond ImageNet.
Questions
1. Are there any types of knowledge that _do not_ get transferred? The main paper would benefit from a more balanced and scientific discussion of any such types knowledge.
2. One of the implications laid out in the paper, namely that the teacher may transfer biases to the student, may have also been captured in other work, which may have been prior to this paper [1].
[1] _Teacher's pet: understanding and mitigating biases in distillation_, Michal Lukasik, Srinadh Bhojanapalli, Aditya Krishna Menon, Sanjiv Kumar https://arxiv.org/abs/2106.10494
Rating
7: Accept: Technically solid paper, with high impact on at least one sub-area, or moderate-to-high impact on more than one areas, with good-to-excellent evaluation, resources, reproducibility, and no unaddressed ethical considerations.
Confidence
3: You are fairly confident in your assessment. It is possible that you did not understand some parts of the submission or that you are unfamiliar with some pieces of related work. Math/other details were not carefully checked.
Limitations
I couldn't find a limitation section in the paper. I'd appreciate explicitly listing out some limitations e.g., there is lack of clarity on
1. how this generalizes to other datasets
2. why these types of knowledge get transferred
3. what types of knowledge do/do not get transferred