Zum Hauptinhalt springen
Echtzeit-Radar & Feeds
Alle RSS Feeds ➔
👥 Community & Social
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Intelligence View
⚡ tsecurity.de Intelligence

Uncertainty Estimates of Predictions via a General Bias-Variance Decomposition

A General Bias‑Variance Decomposition for Proper Scoring Rules – Finally! Or: Why your ensemble works, how to build confidence regions in logit space, and what Bregman information really does for uncertainty estimation. If you’ve ever …

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!




A General Bias‑Variance Decomposition for Proper Scoring Rules – Finally!




Or: Why your ensemble works, how to build confidence regions in logit space, and what Bregman information really does for uncertainty estimation.




If you’ve ever trained a classifier, you’ve heard the mantra:




Bias‑variance trade‑off.




But look closely – the classical decomposition works for squared error only.


What about log‑loss? Brier score? CRPS?


For years, we had no general, closed‑form bias‑variance decomposition for strictly proper scoring rules.



Until now.



In their AISTATS 2023 paper, Gruber & Buettner (PDF) finally fill this gap.


And they give us practical tools:




  • Explain ensembles via a law of total Bregman variance.

  • Build confidence regions directly in logit space.

  • Detect out‑of‑distribution inputs better than raw softmax confidence.



Let’s dive in.







The problem: Uncertainty under domain drift



Your model says “cat” with 0.99 probability – but the image is heavily corrupted.


You know from Ovadia et al. (2019) that softmax confidence is not reliable under dataset shift.



What we need is a variance‑based uncertainty measure that works for any proper loss.


And we need a theory that explains why – for example – ensembling always helps.



Missing piece: A general bias‑variance decomposition for strictly proper scoring rules.







Background: Bregman divergences & proper scoring rules





Bregman divergence



Given a differentiable convex function


ϕ\phiϕ

, the Bregman divergence is





dϕ(x,y)=ϕ(y)−ϕ(x)−⟨∇ϕ(x),y−x⟩.
d_\phi(x, y) = \phi(y) - \phi(x) - \langle \nabla \phi(x), y-x \rangle.
dϕ​(x,y)=ϕ(y)−ϕ(x)−⟨∇ϕ(x),y−x⟩.




Example:

ϕ(x)=x2\phi(x)=x^2ϕ(x)=x2

gives

dϕ(x,y)=(x−y)2d_\phi(x,y)=(x-y)^2dϕ​(x,y)=(x−y)2

(squared error).



Example:

ϕ(x)=xln⁡x\phi(x)=x\ln xϕ(x)=xlnx

gives the KL divergence.





Strictly proper scoring rule



A scoring rule

S(P,y)S(P, y)S(P,y)

is strictly proper if the expected score is maximised only when

PPP

equals the true data distribution

QQQ

.



Common examples:




  • Log score:

    S(P,y)=log⁡p(y)S(P,y)=\log p(y)S(P,y)=logp(y)



  • Brier score:

    S(P,y)=−∣δy−P∣2S(P,y)=-|\delta_y - P|^2S(P,y)=−∣δy​−P∣2



  • CRPS (continuous ranked probability score)



Every strictly proper scoring rule corresponds to a Bregman divergence generated by the negative entropy

GGG

(Ovcharov, 2018).







The main result: A general bias‑variance decomposition



Let

f^\hat{f}f^​

be a random prediction (e.g., from different training sets), and

Y∼QY \sim QY∼Q

the true outcome.


Let

SSS

be a strictly proper scoring rule with negative entropy

GGG

, and

G∗G^*G∗

its convex conjugate.



Theorem (Gruber & Buettner, 2023)





ParseError: KaTeX parse error: Expected group after '^' at position 98: …\underbrace{B{G^̲}[S(\hat{f})]}{…



What does each term mean?







  • BG∗[X]B_{G^*}[X]BG∗​[X]

    – Bregman information (generalised variance).
    For

    ϕ(x)=x2\phi(x)=x^2ϕ(x)=x2

    ,

    Bϕ[X]=Var(X)B_\phi[X] = \mathrm{Var}(X)Bϕ​[X]=Var(X)

    .




  • dG∗,S−1d_{G^*, S^{-1}}dG∗,S−1​

    – Bregman divergence in the dual space – that’s the squared bias.



So the classical MSE decomposition (

error=noise+var+bias2\text{error} = \text{noise} + \text{var} + \text{bias}^2error=noise+var+bias2

) is a special case of this theorem.







Bregman information – the “variance” term



Definition (Banerjee et al., 2005):





Bϕ[X]=E[dϕ(E[X],X)]=E[ϕ(X)]−ϕ(E[X]).
B_\phi[X] = \mathbb{E}[d_\phi(\mathbb{E}[X], X)] = \mathbb{E}[\phi(X)] - \phi(\mathbb{E}[X]).
Bϕ​[X]=E[dϕ​(E[X],X)]=E[ϕ(X)]−ϕ(E[X]).




It measures spread around the mean in the sense of a Bregman divergence.



Figure 2 in the paper shows

Bσ+B_{\sigma_+}Bσ+​​

for the softplus function

σ+(x)=ln⁡(1+ex)\sigma_+(x)=\ln(1+e^x)σ+​(x)=ln(1+ex)

– this controls variance for binary classification in logit space.






[!NOTE]

When

ϕ\phiϕ

is the squared function,

BϕB_\phiBϕ​

is the classical variance.


When

ϕ\phiϕ

is the log‑sum‑exp function (LSE),

BϕB_\phiBϕ​

is the variance in logit space.








Special case: Exponential families



For an exponential family

pθ(y)=exp⁡(⟨θ,T(y)⟩−A(θ))h(y)p_\theta(y) = \exp(\langle \theta, T(y)\rangle - A(\theta))h(y)pθ​(y)=exp(⟨θ,T(y)⟩−A(θ))h(y)

, the decomposition becomes:





E[−ln⁡pθ^(Y)]=A(θ)+BA[θ^]+dA(θ,E[θ^]).
\mathbb{E}[-\ln p_{\hat{\theta}}(Y)] = A(\theta) + B_A[\hat{\theta}] + d_A(\theta, \mathbb{E}[\hat{\theta}]).
E[−lnpθ^​(Y)]=A(θ)+BA​[θ^]+dA​(θ,E[θ^]).







  • BA[θ^]B_A[\hat{\theta}]BA​[θ^]

    – variance in the natural parameter space (classical variance weighted by the log‑partition function

    AAA

    ).

  • Perfectly recovers the classical MSE case when

    A(θ)=θ2/2A(\theta)=\theta^2/2A(θ)=θ2/2

    .









Special case: Classification (logit space) – this is huge



Let

z^∈Rk\hat{z} \in \mathbb{R}^kz^∈Rk

be the logits (before softmax).


Let

sm(z)\text{sm}(z)sm(z)

be the softmax probabilities.


Use the negative log‑likelihood (log loss) as scoring rule.



Corollary:





E[−ln⁡smY(z^)]=H(Q)  +  BLSE[z^]  +  dLSE(sm−1(Q), E[z^]),
\mathbb{E}[-\ln \text{sm}Y(\hat{z})] = H(Q) \;+\; B{\mathrm{LSE}}[\hat{z}] \;+\; d_{\mathrm{LSE}}\big(\mathrm{sm}^{-1}(Q),\,\mathbb{E}[\hat{z}]\big),
E[−lnsmY(z^)]=H(Q)+BLSE[z^]+dLSE​(sm−1(Q),E[z^]),




where

LSE(x)=ln⁡∑exi\mathrm{LSE}(x) = \ln\sum e^{x_i}LSE(x)=ln∑exi​

(LogSumExp).



Why is this surprising?




  • The variance term

    BLSE[z^]B_{\mathrm{LSE}}[\hat{z}]BLSE​[z^]

    is computed directly on the logits, without applying softmax.

  • No normalisation to probabilities needed – numerically stable and conceptually clean.



This is perfect for deep neural networks:




To estimate predictive uncertainty, just compute the Bregman information of the logits over an ensemble or multiple forward passes.








Applications





1. Why ensembles reduce uncertainty



The law of total Bregman information:





BG[X]=E[BG[X∣Y]]+BG[E[X∣Y]].
B_G[X] = \mathbb{E}[B_G[X \mid Y]] + B_G[\mathbb{E}[X \mid Y]].
BG​[X]=E[BG​[X∣Y]]+BG​[E[X∣Y]].




For an ensemble that averages over random initialisations

WWW

:



As number of ensemble members

n→∞n \to \inftyn→∞

,





BA[θ^D(n)]→BA[EW[θ^W,D]],
B_A[\hat{\theta}D^{(n)}] \to B_A[\mathbb{E}_W[\hat{\theta}{W,D}]],
BA​[θ^D(n)]→BA​[EW​[θ^W,D]],




i.e., the variance due to

WWW

disappears
.


The expected score strictly improves.

This is the first general theoretical justification for why ensembles are almost always beneficial.







2. Confidence regions via Markov’s inequality



Using Markov’s inequality on the Bregman divergence:





P(dG(E[X],X)≥1αBG[X])≤α.
P\Big(d_G(\mathbb{E}[X], X) \ge \frac{1}{\alpha} B_G[X]\Big) \le \alpha.
P(dG​(E[X],X)≥α1​BG​[X])≤α.




Thus a

(1−α)(1-\alpha)(1−α)

-confidence region is:





ParseError: KaTeX parse error: Expected group as argument to '\big' at position 92: …]}{\alpha} \big}̲.




Figure 3 & 4 in the paper:




  • Binary classification – confidence intervals on the probability simplex.

  • Iris dataset – convex confidence regions for three classes.



No need for normality assumptions – works with any proper score.














3. Out‑of‑distribution detection (CIFAR‑10C / ImageNet‑C)



Setup: Train on clean images, test on corrupted versions (CIFAR‑10C).


We want to discard uncertain predictions so that the remaining predictions have high accuracy.



Result (Figure 1 in the paper):




  • To reach 90% validation accuracy, using max softmax confidence you must discard ≈14% of data.

  • Using Bregman information

    BLSEB_{\mathrm{LSE}}BLSE​

    you only discard ≈7% of data.



→ Bregman information is a superior uncertainty measure under domain drift.











Limitations (real talk)





  • Computational cost: Estimating Bregman information requires multiple predictions per input (ensemble, MC dropout, or multi‑epoch sampling).


  • Proper scoring rules only: Doesn’t directly apply to 0‑1 loss (accuracy). But for probabilistic forecasting that’s fine – use log‑loss.


  • Not Bayesian: It gives a frequentist variance measure, not a full posterior.



Future work: extend to Bayesian neural networks and large language models (uncertainty for hallucinations).









Take‑away





  • First general closed‑form bias‑variance decomposition for strictly proper scoring rules.


  • Bregman information emerges as the universal variance term – generalising classical variance.


  • Logit‑space formulation makes it practical for deep learning.


  • Demonstrated benefits: ensembling theory, confidence regions, OOD detection.



Code available: GitHub – MLO‑lab/Uncertainty_Estimates_via_BVD






If you liked this, check out my previous post on Bayesian Neural Networks under covariate shift.


And let me know: how do you estimate uncertainty in your models today?

1. Sofort-Triage & Abwehrmaßnahmen

SOC Incident Playbook: Vulnerability Remediation & Verification
Syntax validiert (0 Fehler)
title: Detect Exploitation - Uncertainty Estimates of Predictions via a General Bias-Variance Decomposition
id: c10815f5-36ba-429b-ad3f-b248caf7e35b
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-26
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
Syntax validiert (0 Fehler)
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-26"
        description = "YARA Signature for "
    strings:
        $str = "Uncertainty Estimates of Predi" ascii wide
    condition:
        any of them
}
Syntax validiert (0 Fehler)
index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
("Uncertainty Estimates of Predictions via")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - count
Syntax validiert (0 Fehler)
message: "*Uncertainty Estimates of Predictions via*"
Syntax validiert (0 Fehler)
CommonSecurityLog
| where Message has "Uncertainty Estimates of Predictions via"
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount desc

2. Cyber Threat Intelligence & Forensik

CTI Threat Relationship Graph3 Knoten / 2 Relationen
CVE / Incident Software MITRE ATT&CK CWE Weakness IoC
🎯
MITRE ATT&CK Matrix Navigator 14 Taktiken
Reconnaissance
-
Resource Development
-
Initial Access
Execution
Persistence
-
Privilege Escalation
Defense Evasion
Credential Access
-
Discovery
-
Lateral Movement
-
Collection
-
Command and Control
Exfiltration
-
Impact
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich Uncertainty Estimates of Predictions via.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten Uncertainty Estimates of Predictions via a General Bias-Variance Decomposition

Thematisch verwandte Begriffe: Uncertainty, Estimates, Predictions, General · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

💬 Kommentare werden geladen…
Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-100620 | Capgo CLI (npm package @capgo/cli) through 7.98.2 is affected by an ove…
Advisory →
tsecurity.de Icon
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag