Robust Conformal Prediction Using Privileged Information

We develop a method to generate prediction sets with a guaranteed coverage rate that is robust to corruptions in the training data, such as missing or noisy variables. Our approach builds on conformal prediction, a powerful framework to construct prediction sets that are valid under the i.i.d assumption. Importantly, naively applying conformal prediction does not provide reliable predictions in this setting, due to the distribution shift induced by the corruptions. To account for the distribution shift, we assume access to privileged information (PI). The PI is formulated as additional features that explain the distribution shift, however, they are only available during training and absent at test time. We approach this problem by introducing a novel generalization of weighted conformal prediction and support our method with theoretical coverage guarantees. Empirical experiments on both real and synthetic datasets indicate that our approach achieves a valid coverage rate and constructs more informative predictions compared to existing methods, which are not supported by theoretical guarantees.

Paper

References (55)

Scroll for more · 38 remaining

Similar papers

Peer review

Reviewer R7TW6/10 · confidence 4/52024-06-27

Summary

This paper focuses on conformal prediction with "privileged information" in constructing prediction intervals with missingness/noise. The proposed quantile-of-quantile approach handles the difficulty that the "privileged information" is not available for test data and achieves finite-sample coverage.

Strengths

The paper is well-written and organized, which presents both solid theoretical guarantees and comprehensive simulation studies. The presentation is very good.

Weaknesses

The intuition behind the notion of "privileged information" is not well explained. It would be better if examples of Z in real applications could be introduced and justified in the beginning. There are also hyperparameters, e.g. \beta, in the proposed approach, for which ablation studies are not provided.

Questions

1. [Conditional independence assumption] Consider the scenario with split conformal prediction and Z is a function of X that is probably determined with the first half of training data, e.g. Z is the feature from X that correlates the most with Y. In this case, the conditional independence assumption may not hold precisely and a robustness result would be better to make theory complete. 2. [Choice of beta] Ablation study on the choice of the hyperparameter beta in the simulation would be helpful in understanding the role of beta and a tradeoff in terms of accuracy could be expected. 3. [Definition of Z] In some real applications, the "privileged information" is not pre-defined, and instead, it is usually learned from data. It would be very interesting to investigate the "optimal" partition of information in X into features and "privileged information". Sufficient dimension reduction, self-supervised training, and relevant techniques could be promising.

Rating

6

Confidence

4

Soundness

3

Presentation

3

Contribution

2

Limitations

Limitations are discussed in the paper.

Authorsrebuttal2024-08-06

We appreciate your review of our work and thank you for the helpful suggestions and interest in our work. In what follows we respond to your concerns in detail. ## The privileged information We thank the reviewer for raising this point which is related to the one raised by Reviewer 3YMV. For the convenience of the reviewer, we repeat our answer below. In the updated manuscript, in Example 1 and Example 2 we expanded about the intuition behind the privileged information. Specifically, in the noisy response setup outlined in Example 1, we explained that since the PI, $Z_i$, is the information about the annotator, it is likely to explain the corruption appearances $M_i$. That is, in this example, the features $X_i(0)$ and the ground truth label $Y_i(0)$ do not provide additional knowledge about the corruption indicator given $Z_i$, i.e., $ X_i(0), Y_i(0) \indep M_i \mid Z_i=z$. Additionally, we added the following example inspired by a real-world medical task. Consider a medical setup where patients are being selected for a costly diagnosis, such as an MRI scan. Here, $X_i(0)=X_i(1)$ is the more standard medical measurements of the i-th patient, such as age, gender, medical history, and disease-specific measurements. The PI $Z_i$ is the information manually collected by the doctor to choose whether the patient should be examined by an MRI scan. This information is obtained through, e.g., a discussion of the doctor with the patient, or a physical examination, and could include, for instance, shortness of breath, swelling, blurred vision, etc. The response $Y_i(0)$ is the disease diagnosis obtained by the MRI scan, and $Y_i(1)=’\texttt{NA}’$. The missingness indicator $M_i$ equals 0 if the doctor decides to conduct an MRI scan, and 1 otherwise. At test time, our goal is to assist the doctors in future decisions before examining the patients, and hence the test PI $Z_\text{test}$ is unavailable. This task is relevant in situations where the number of available doctors is insufficient to examine all patients. Here, $Z_i$ explains the missingness $M_i$, and $M_i$ does not depend on $X_i$ or $Y_i$ given $Z_i$. Finally, we note that PCP can produce valid uncertainty sets even if the independence assumption $(X \indep M) \mid Z$ is not satisfied. In this case, we instead assume that both $X,Z$ explain the corruption indicator, namely, $(Y \indep M) \mid (Z,X) $, and that the features are uncorrupted $X(0)=X(1)$. Also, the weights $w_i$ are instead defined as: $w_i = \frac{\mathbb{P}(M=0)}{ \mathbb{P}(M=0 \mid X=x_i, Z=z_i)}$. We will clarify this point in the revised manuscript as well. ## The choice of $\beta$ Thank you for bringing up this important point, which was also raised by reviewer hB3A. First, we emphasize that Theorem 1 holds for any choice of $\beta\in (0,\alpha)$. Therefore, $\beta$ only affects the sizes of the uncertainty sets. Intuitively, as $\beta \rightarrow \alpha$, a higher quantile of the weighted distribution of the scores is taken, and a lower quantile of the $Q_i$’s is taken. Similarly, as $\beta \rightarrow 0$ a lower quantile of the weighted distribution of the scores is taken, and a higher quantile of the $Q_i$’s is taken. An optimal $\beta$ can be considered as the $\beta$ that leads to the narrowest intervals. Such optimal $\beta$ can be practically computed with a grid of values for $\beta$ in $(0,\alpha)$, using a validation set. Nonetheless, to maintain Algorithm 1 (PCP) simple and intuitive, we did not optimize for $\beta$ in the paper. In our experiments, we chose $\beta$ that is close to 0, so the quantile of the weighted distribution of the scores chosen by PCP is close to the quantile chosen by (the infeasible) WCP. In response to this comment, we added this discussion to the text, and we conducted an ablation study for the choice of $\beta$ on a synthetic dataset. The results of the ablation study are provided in the PDF file in the global response. This experiment indicates that the smallest intervals are achieved for $\beta$ that is close to 0, and the interval sizes are an increasing function of $\beta$. Yet, it is important to understand that different results could be obtained for different datasets. Therefore, we recommend choosing $\beta$ using a validation set, as explained above. Thank you for the opportunity to discuss this issue. ## Definition of Z Definitely! We agree that in some tasks it might be difficult to collect privileged information. Indeed, we view the problem of choosing an “ideal” privileged information that satisfies the conditional independence assumption as a thrilling future research direction.

Reviewer R7TW2024-08-10

Follow-up comment

Thank you for the comments! I'll maintain my score at this moment. I think it is a very interesting paper and it raises the idea of using side information to leverage (conformal) inference. I'll be more than happy to see a discussion section on (1) how to identify privileged information and (2) potential extension beyond the conditional independence assumption. Thanks!

Authorsrebuttal2024-08-11

We are appreciative of the reviewer's comments and for acknowledging our previous response. We are thankful for the opportunity to further clarify and expand on the points raised. Below, we address each comment in detail. ## Identifying privileged information Identifying appropriate privileged information is indeed a challenging task. In general, this requires expert knowledge, similar to the unconfoundedness assumption in causal inference applications used for treatment effect estimation, for example. In more detail, our solution lies in the conditional independence assumption: $(X(0), Y(0)) \indep M \mid Z=z$. In words, $Z$ should explain the information about the corruption appearances that is encapsulated in $X(0)$ and $Y(0)$. For instance, in our noisy labels setup in Example 1, the information about the annotator is a good candidate for privileged information, as the noise pattern depends directly on the annotator. Yet, the challenge here is that the conditional independence requirement cannot be directly tested in practice, as we only observe $(X(0), Y(0)) \mid M=0$. In view of unconfoundedness, our work introduces a relaxation of this assumption as we do not assume that $Z$ is observed at test time. From a practical perspective, we found that PCP can produce valid uncertainty sets even if the independence assumption is not satisfied. For example, in our real-world noisy response experiment from Section 4.3, PCP attained the target coverage rate even though the conditional independence assumption was not confirmed. We believe this is attributed to our formulation of $Z$, being a variable that is highly correlated to $M$. Intuitively, when $Z$ explains the corruption indicator $M$ well, it is sensible to believe that the conditional independence requirement is approximately satisfied. More formally, below we analyze the setting where the conditional independence assumption is violated and provide a lower bound for the coverage rate attained by PCP. In simple words, this new result reveals that PCP achieves a coverage rate that is closer to the nominal level as the conditional independence assumption violation is smaller. ## Extension beyond the conditional independence assumption We are grateful for the opportunity to discuss this topic. We propose an initial extension of Theorem 1 to a setting where the conditional independence assumption is not fully satisfied. For the simplicity of this initial extension, we assume $X(0) \indep M \mid Z=z$. The independence assumption $ Y(0) \indep M \mid Z=z$ is equivalent to assuming that the density of $Y(0) \mid M=m, Z=z$ is the same for $m \in \\{0,1\\}$, formally: $$f_{Y(0) \mid M=0, X=x,Z=z}(y; 0,x,z) = f_{Y(0) \mid M=1,X=x, Z=z}(y; 1,x,z). $$ In our extension, we relax this assumption and instead require that $\forall x\in \mathcal{X}$, there exists $\varepsilon_x \in\mathbb{R}$ such that the difference between the two densities is bounded by $\varepsilon_x$: $$\forall y\in\mathcal{Y}, z\in\mathcal{Z}: | f_{Y(0) \mid M=0, X=x,Z=z}(y; 0,x,z) - f_{Y(0) \mid M=1,X=x, Z=z}(y; 1,x,z) | \leq \varepsilon_x .$$ $\textbf{Theorem [Robustness of PCP to conditional independence violation]}$ Suppose that $\\{(X_i(0),X_i(1), Y_i(0),Y_i(1),Z_i, M_i)\\}\_{i=1}^{n+1}$ are exchangeable, $P_{Z}$ is absolutely continuous with respect to $P_{Z \mid M=0}$, and $\forall x\in\mathcal{X}$ there exists $\varepsilon_x \in\mathbb{R} $ such that: $$ \forall y\in\mathcal{Y}, z\in\mathcal{Z}: | f_{Y(0) \mid M=0, X=x,Z=z}(y; 0,x,z) - f_{Y(0) \mid M=1,X=x, Z=z}(y; 1,x,z) | \leq \varepsilon_x .$$ Then, the coverage rate of the prediction set $C^{PCP}(X^\textup{test})$ constructed according to Algorithm 1 is lower bounded by: $$ \mathbb{P}(Y^\textup{test} \in C^{PCP}(X^\textup{test})) \geq 1-\alpha- \mathbb{E}_{X,Z}[ | C^\texttt{PCP} (X) | \varepsilon_X \mathbb{P}(M=1\mid X,Z)] . $$ We omit the proof due to the limitation of space. We can send the proof in a separate comment. This result provides a lower bound for the coverage rate of PCP in the setting where the conditional independence assumption is not exactly satisfied. Intuitively, as $\varepsilon_x$ decreases, i.e., as the two distributions $Y(0) \mid M=m, Z=z$ for $m\in \\{0,1\\}$ are closer to each other, the lower bound is tighter, and closer to the target level. Similarly, as the two distributions diverge, the lower bound becomes looser. We once again thank the reviewer for these insightful suggestions, which significantly improve our paper. We will include these discussions in the revised manuscript.

Reviewer 3YMV8/10 · confidence 4/52024-07-11

Summary

This paper introduces a method to create prediction sets with guaranteed coverage in the presence of training data that is corrupted by missing or noisy variables. The approach is an extension of conformal prediction that works by assuming access to privileged information available during training. This information is used to account for distribution shifts caused by the corruptions. The proposed method is supported by theoretical coverage guarantees and empirical examples are used to demonstrate that the approach produces more reliable and informative predictions compared to existing methods on real and synthetic datasets.

Strengths

This paper stands out for its originality in addressing issues caused by corrupted training data through a novel extension of conformal prediction. Through a rather common assumption of access to privileged information the authors are able to develop an effective solution for obtaining conformal prediction sets despite the distribution shift cased by the corrupted data. The main results are rigorously proven and the presentation of the results and proofs are clear. The difficulty in proving Theorem 1 is well-explained and thus the the quality and significance in obtaining the result is evident. The practically of this result is apparent in that it potentially opens new possibilities for applying conformal prediction in high-stakes applications where there may be corrupted data.

Weaknesses

The empirical evaluation, though comprehensive, could benefit from a broader range of real-world datasets. Also some discussion around access to and potential surrogates for the privileged information could better highlight the scope of the work. For example, some discussion on what could constitute privileged information and ideally even what characteristics of the information would make it most useful to the method would be interesting and really enhance the work.

Questions

Could some discussion around what constitutes "ideal" privileged information for this particular method be possible?

Rating

8

Confidence

4

Soundness

4

Presentation

4

Contribution

4

Limitations

Yes, sufficiently addressed.

Reviewer UnMc7/10 · confidence 2/52024-07-22

Summary

The authors introduce a calibration method called Privileged Conformal Prediction (PCP) to generate prediction sets that guarantee coverage on uncorrupted test data, even when the target label (Y) and/or input features (X) in the calibration data samples are corrupted (e.g., missing or noisy variables). The key innovation is leveraging privileged information (PI)—additional features (Z) available during training but not at test time—to handle distribution shifts induced by corruptions. They assume that the input and target features of clean data (X(0),Y(0)) are independent of the corruption indicator variable (M) given the privileged information (Z). This allows the authors to treat this setting as a specific case of covariate shift (and weighted conformal prediction), with the added challenge that the PI variable is not available at test time (Ztest). To address this, they propose a reformulation of the weighted conformal prediction framework, where an estimate of the non-conformity score threshold without Ztest is obtained by considering a conservative estimate based on a quantile of the calibration thresholds. Experiments on real and synthetic datasets show that PCP achieves valid coverage rates and constructs more informative predictions than existing methods that lack theoretical guarantees

Strengths

The paper is well-presented, motivated, clear, and easy to follow. The problem seems relevant and novel within the context of conformal prediction, as far as I know. The authors effectively present the hypothesis and challenges of their problem. Discussing the two-stage approach before introducing the proposed solution is beneficial, as one might initially consider estimating Ztest from the input features and building the weight based on that estimate. I think the proposed method, where the authors estimate the non-conformity score threshold without Ztest by considering a conservative estimate based on a quantile of the calibration thresholds, is well-motivated and supported by theoretical guarantees, as presented in Theorem 1. Moreover, experimental results show the benefits of the proposed approach.

Weaknesses

I do not see major weaknesses with this work, authors address the limitations of their approach in Section 5.

Questions

.

Rating

7

Confidence

2

Soundness

3

Presentation

3

Contribution

3

Limitations

Yes.

Reviewer hB3A6/10 · confidence 4/52024-07-28

Summary

This paper is studying the problem of conformal prediction in the presence of data (covariate or label) corruption leveraging privileged data. They build upon the framework of weighted conformal prediction by introducing a novel leave-one-out weighting technique which produces a conservative (upper-bound) estimate of the original threshold of the weighted conformal prediction. They further theoretically and experimentally evaluate the coverage validity of their method.

Strengths

- The presented framework is very general and can potentially be applied in a range of problems in practice. - Their method is very intuitive and insightful in the sense that their leave-one-out technique can potentially be applied to adjacent problems in conformal prediction. - The presentation of the paper is very nice. I particularly like the authors decision to present the "two-stage naive" method first to prepare the readers to fully absorb the underlying challenge of the problem.

Weaknesses

I am willing to show a thumb up for this paper. However, before that I would appreciate if the authors can respond to the following concerns: 1) I dont understand how one can compute the quantiles (Q_i) using the eq.(8). It looks like one need to know the values of w_i in order to compute Q_i. However, I can not find an explanation in the paper on how to compute w_i using data. A formulation of w_i is given in the paper using the probability distribution of M and Z. Are the authors assuming that the distribution of (Z, M) are known? if not how one can compute w_i? If the w_i is meant to be estimated from data, first how to do that estimation and second how does that estimation affects the coverage validity theorems? This is an important concern, and either way, this should be clearly stated before presenting the algorithm. In the current format, the algorithm is not complete! 2) It is interesting, yet concerning, that there is no trace of the choice of \beta in the presented theory. Can the authors comment on the choice of \beta from point of views of theory and practice? It is odd to me how the algorithm might produce meaningful prediction sets for both \beta = 0.00001 and \beta = 0.99999! It is then a natural question/expectation that how one should tune \beta in practice and how that choice affect the prediction set size and coverage validity.

Questions

- How to compute w_i? - How to tune \beta? I might ask more questions after i hear the response of the authors.

Rating

6

Confidence

4

Soundness

3

Presentation

3

Contribution

3

Limitations

There is a limitation section that covers most of the limitations. However, I believe some of the limitations discussed in the very last section of the paper (specifically all the theoretical assumptions) must be presented and discussed much earlier in the paper.

Reviewer hB3A2024-08-07

I thank the authors for their responses. The argument and the numerical evaluation for the value of $\beta$ is well taken. I also encourage the revisions with respect to the values of $w_i$, as suggested by authors. What is still missing for me is a principled way of estimating $w_i:=\frac{\mathbb{P}(M=0)}{\mathbb{P}\left(M=0 \mid Z=Z_i\right)}$. In the case of WCP, the estimated ratios are likelihood ratios of the two distributions, which can be effectively done by unlabeled data (at least when the covariates are low dimensional) and there is a rich literature on that matter. Here one has to estimate a specific ratio. Therefore, I would appreciate if authors can elaborate more on their comment "this conditional probability can be estimated from the training data, using any off-the-shelf classifier".

Authorsrebuttal2024-08-08

We thank the reviewer for their comments and for acknowledging our previous response. Below, we provide a detailed explanation of the approach we recommend for estimating $w_i$, which we also employed in our experiments. First, we estimate the conditional corruption probability given $Z$, i.e., $\mathbb{P}(M=0 \mid Z=z)$, using the training and validation sets with any off-the-shelf classifier, such as random forest, XGBoost, or a neural network. This classifier takes the PI $Z$ as an input and outputs an estimate for the conditional corruption probability, which we denote by $\hat{p}(M=0 \mid Z=z)$. Notice that this classifier can be fit on unlabeled data, similar to the approach suggested by the reviewer. In our experiments, we primarily used neural networks, and occasionally random forests or XGBoost. The specific models used for each dataset are detailed in Table 2 of Appendix D1. Next, we estimate the marginal corruption probability directly from the data: $$\hat{p}(M=0)=\frac{1}{n}\sum_{i=1}^{n} M_i$$ Finally, the estimated weights are computed according to equation (3), using the estimated probabilities: $$ \hat{w}_i = \hat{w}(z_i) = \frac{\hat{p}(M=0)}{\hat{p}(M=0 \mid Z=z_i)} $$ We appreciate the opportunity to elaborate on this integral aspect of our method and we will clarify this point in the revised manuscript. We apologize for any confusion and hope this discussion resolves the reviewer’s concerns. Please let us know if there are any questions, comments, or concerns left.

Reviewer hB3A2024-08-12

I thank the authors for their detailed responses. My major concerns are addressed and I would like to increase my score and vote for acceptance.

Program Chairsdecision2024-09-25

Decision

Accept (poster)

© 2026 NYSGPT2525 LLC