Fairwashing: the risk of rationalization
Not on the map. Why?
Abstract (arXiv)
Black-box explanation is the problem of explaining how a machine learning model -- whose internal logic is hidden to the auditor and generally complex -- produces its outcomes. Current approaches for solving this problem include model explanation, outcome explanation as well as model inspection. While these techniques can be beneficial by providing interpretability, they can be used in a negative manner to perform fairwashing, which we define as promoting the false perception that a machine learning model respects some ethical values. In particular, we demonstrate that it is possible to systematically rationalize decisions taken by an unfair black-box model using the model explanation as well as the outcome explanation approaches with a given fairness metric. Our solution, LaundryML, is based on a regularized rule list enumeration algorithm whose objective is to search for fair rule lists approximating an unfair black-box model. We empirically evaluate our rationalization technique on black-box models trained on real-world datasets and show that one can obtain rule lists with high fidelity to the black-box model while being considerably less unfair at the same time.
Key facts. Cited by 81 papers in the map (data through 7 Oct 2026). First posted on arXiv 28 Jan 2019.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 16; 2022: 15; 2023: 19; 2024: 9; 2025: 13; 2026: 9.
81 papers.
Sort:
By area:
- 2022The Disagreement Problem in Explainable Machine Learning: A Practitioner's Perspectivecited by 156
- 2022OpenXAI: Towards a Transparent Evaluation of Model Explanationscited by 125
- 2024Black-Box Access is Insufficient for Rigorous AI Auditscited by 123
- 2021Counterfactual Explanations Can Be Manipulatedcited by 113
- 2021Identifying and Mitigating Spurious Correlations for Improving Robustness in NLP Modelscited by 76
- 2023Connecting the Dots in Trustworthy Artificial Intelligence: From AI Principles, Ethics, and Key Requirements to Responsible AI Systems and Regulationcited by 60
- 2024Fairness Feedback Loops: Training on Synthetic Data Amplifies Biascited by 55
- 2021S-LIME: Stabilized-LIME for Model Explanationcited by 52
- 2023Adversarial attacks and defenses in explainable artificial intelligence: A surveycited by 47
- 2022The Road to Explainability is Paved with Bias: Measuring the Fairness of Explanationscited by 41
- 2022Fairness via Explanation Quality: Evaluating Disparities in the Quality of Post hoc Explanationscited by 40
- 2021Probing GNN Explainers: A Rigorous Theoretical and Empirical Analysis of GNN Explanation Methodscited by 36
38 more
- 2023Don't trust your eyes: on the (un)reliability of feature visualizationscited by 32
- 2022Explanations, Fairness, and Appropriate Reliance in Human-AI Decision-Makingcited by 25
- 2021A Sociotechnical View of Algorithmic Fairnesscited by 24
- 2021Characterizing the risk of fairwashingcited by 21
- 2022Challenges in Applying Explainability Methods to Improve the Fairness of NLP Modelscited by 20
- 2022SoK: Explainable Machine Learning for Computer Security Applicationscited by 20
- 2025Reality Check: A New Evaluation Ecosystem Is Necessary to Understand AI's Real World Effectscited by 18
- 2021Fooling Partial Dependence via Data Poisoningcited by 16
- 2021Can Explainable AI Explain Unfairness? A Framework for Evaluating Explainable AIcited by 16
- 2023A Critical Survey on Fairness Benefits of Explainable AIcited by 16
- 2022A Sandbox Tool to Bias(Stress)-Test Fairness Algorithmscited by 12
- 2023One Model Many Scores: Using Multiverse Analysis to Prevent Fairness Hacking and Evaluate the Influence of Model Design Decisionscited by 12
- 2021When and How to Fool Explainable Models (and Humans) with Adversarial Examplescited by 10
- 2021SoK: Machine Learning Governancecited by 9
- 2022Algorithmic audits of algorithms, and the lawcited by 9
- 2023Why is plausibility surprisingly problematic as an XAI criterion?cited by 9
- 2023Characterizing Large Language Models as Rationalizers of Knowledge-intensive Taskscited by 9
- 2022A Survey on XAI for 5G and Beyond Security: Technical Aspects, Challenges and Research Directionscited by 8
- 2023Learning Optimal Fair Scoring Systems for Multi-Class Classificationcited by 8
- 2024Feature Responsiveness Scores: Model-Agnostic Explanations for Recoursecited by 8
- 2023Manipulation Risks in Explainable AI: The Implications of the Disagreement Problemcited by 7
- 2023Probabilistic Dataset Reconstruction from Interpretable Modelscited by 7
- 2024Secure and Confidential Certificates of Online Fairnesscited by 7
- 2021Understanding Prediction Discrepancies in Machine Learning Classifierscited by 6
- 2021What will it take to generate fairness-preserving explanations?cited by 6
- 2022Fool SHAP with Stealthily Biased Samplingcited by 6
- 2024Why do explanations fail? A typology and discussion on failures in XAIcited by 6
- 2025Robust ML Auditing using Prior Knowledgecited by 6
- 2025Red Teaming AI Policy: A Taxonomy of Avoision and the EU AI Actcited by 6
- 2021Some Critical and Ethical Perspectives on the Empirical Turn of AI Interpretabilitycited by 5
- 2024X Hacking: The Threat of Misguided AutoMLcited by 5
- 2021Seven challenges for harmonizing explainability requirementscited by 4
- 2022Backdooring Explainable Machine Learningcited by 4
- 2023Survey on AI Ethics: A Socio-technical Perspectivecited by 4
- 2023SoK: Taming the Triangle -- On the Interplays between Fairness, Interpretability and Privacy in Machine Learningcited by 4
- 2025Fairness and Sparsity within Rashomon sets: Enumeration-Free Exploration and Characterizationcited by 4
- 2025Crowding Out The Noise: Algorithmic Collective Action Under Differential Privacycited by 4
- 2021Partially Interpretable Estimators (PIE): Black-Box-Refined Interpretable Machine Learningcited by 3
50 most cited of 81 All 81 (JSON)
- 2026ExplainGuard: A Zero Trust Framework for Post-Hoc Explanation Integrity Guarantees in Blackbox XAI Models22 Aug 2026
- 2026Manipulation-Proof Oblivious Audits against Deceptive Model Providers5 Aug 2026
- 2026"Trust Junk" Leads to Unjustified Support for Highly Discriminatory Predictive Models14 Jul 2026
- 2026Model Stealing Through the Lens of Model Multiplicity13 Jun 2026
- 2026Computational Orientalism: Measuring Structural Discourse Bias in Large Language Models Using the Middle East Cultural Sensitivity Score (MECSS)9 Jun 2026
- 2026Towards Verifiable AI with Lightweight Cryptographic Proofs of Inference19 Mar 2026
- 2026This Looks Distinctly Like That: Grounding Interpretable Recognition in Stiefel Geometry against Neural Collapse9 Mar 2026
- 2026Mixtures of Transparent Local Models15 Jan 2026
- 2026On the Definition and Detection of Cherry-Picking in Counterfactual Explanations8 Jan 2026
- 2025Interpretable Model-Aware Counterfactual Explanations for Random Forest31 Oct 2025
- 2025Restricted Receptive Fields for Face Verification12 Oct 2025
- 2025Exposing the Illusion of Fairness: Auditing Vulnerabilities to Distributional Manipulation Attacks28 Jul 2025
38 more
- 2025Red Teaming AI Policy: A Taxonomy of Avoision and the EU AI Act2 Jun 2025
- 2025Reality Check: A New Evaluation Ecosystem Is Necessary to Understand AI's Real World Effects24 May 2025
- 2025Fair Play for Individuals, Foul Play for Groups? Auditing Anonymization's Impact on ML Fairness12 May 2025
- 2025Crowding Out The Noise: Algorithmic Collective Action Under Differential Privacy9 May 2025
- 2025Robust ML Auditing using Prior Knowledge7 May 2025
- 2025Beware of "Explanations" of AI9 Apr 2025
- 2025EquiPy: Sequential Fairness using Optimal Transport in Python12 Mar 2025
- 2025What's in a Query: Polarity-Aware Distribution-Based Fair Ranking17 Feb 2025
- 2025Fairness and Sparsity within Rashomon sets: Enumeration-Free Exploration and Characterization7 Feb 2025
- 2025ExpProof : Operationalizing Explanations for Confidential Models with ZKPs6 Feb 2025
- 2024Feature Responsiveness Scores: Model-Agnostic Explanations for Recourse29 Oct 2024
- 2024Secure and Confidential Certificates of Online Fairness17 Sep 2024
- 2024Why do explanations fail? A typology and discussion on failures in XAI22 May 2024
- 2024Mapping the Potential of Explainable AI for Fairness Along the AI Lifecycle29 Apr 2024
- 2024SIDEs: Separating Idealization from Deceptive Explanations in xAI25 Apr 2024
- 2024Uncertainty-Aware Explanations Through Probabilistic Self-Explainable Neural Networks20 Mar 2024
- 2024Fairness Feedback Loops: Training on Synthetic Data Amplifies Bias12 Mar 2024
- 2024Black-Box Access is Insufficient for Rigorous AI Audits25 Jan 2024
- 2024X Hacking: The Threat of Misguided AutoML16 Jan 2024
- 2023SoK: Taming the Triangle -- On the Interplays between Fairness, Interpretability and Privacy in Machine Learning22 Dec 2023
- 2023Survey on AI Ethics: A Socio-technical Perspective28 Nov 2023
- 2023Fair Enough? A map of the current limitations of the requirements to have fair algorithms21 Nov 2023
- 2023Characterizing Large Language Models as Rationalizers of Knowledge-intensive Tasks9 Nov 2023
- 2023A Critical Survey on Fairness Benefits of Explainable AI15 Oct 2023
- 2023One Model Many Scores: Using Multiverse Analysis to Prevent Fairness Hacking and Evaluate the Influence of Model Design Decisions31 Aug 2023
- 2023Probabilistic Dataset Reconstruction from Interpretable Models29 Aug 2023
- 2023Fairness Explainability using Optimal Transport with Applications in Image Classification22 Aug 2023
- 2023Manipulation Risks in Explainable AI: The Implications of the Disagreement Problem24 Jun 2023
- 2023Don't trust your eyes: on the (un)reliability of feature visualizations7 Jun 2023
- 2023Adversarial attacks and defenses in explainable artificial intelligence: A survey6 Jun 2023
- 2023Leveraging Imperfect Sources to Detect Fairwashing in Black-Box Auditing23 May 2023
- 2023Connecting the Dots in Trustworthy Artificial Intelligence: From AI Principles, Ethics, and Key Requirements to Responsible AI Systems and Regulation2 May 2023
- 2023Disagreement amongst counterfactual explanations: How transparency can be deceptive25 Apr 2023
- 2023Learning Optimal Fair Scoring Systems for Multi-Class Classification11 Apr 2023
- 2023Why is plausibility surprisingly problematic as an XAI criterion?30 Mar 2023
- 2023Learning Hybrid Interpretable Models: Theory, Taxonomy, and Methods8 Mar 2023
- 2023Five policy uses of algorithmic transparency and explainability6 Feb 2023
- 2023Explainable AI does not provide the explanations end-users are asking for25 Jan 2023
50 newest of 81 All 81 (JSON)
- 2021Fooling Partial Dependence via Data Poisoningcited by 16
- 2021Fooling Partial Dependence via Data Poisoning26 May 2021
- 2022The Disagreement Problem in Explainable Machine Learning: A Practitioner's Perspectivecited by 156
- 2022OpenXAI: Towards a Transparent Evaluation of Model Explanationscited by 125
- 2024Black-Box Access is Insufficient for Rigorous AI Auditscited by 123
- 2021Counterfactual Explanations Can Be Manipulatedcited by 113
- 2021Identifying and Mitigating Spurious Correlations for Improving Robustness in NLP Modelscited by 76
- 2023Connecting the Dots in Trustworthy Artificial Intelligence: From AI Principles, Ethics, and Key Requirements to Responsible AI Systems and Regulationcited by 60
- 2024Fairness Feedback Loops: Training on Synthetic Data Amplifies Biascited by 55
- 2021S-LIME: Stabilized-LIME for Model Explanationcited by 52
- 2023Adversarial attacks and defenses in explainable artificial intelligence: A surveycited by 47
- 2022The Road to Explainability is Paved with Bias: Measuring the Fairness of Explanationscited by 41
- 2022Fairness via Explanation Quality: Evaluating Disparities in the Quality of Post hoc Explanationscited by 40
- 2021Probing GNN Explainers: A Rigorous Theoretical and Empirical Analysis of GNN Explanation Methodscited by 36
12 most cited of 80 All 80 (JSON)
- 2026ExplainGuard: A Zero Trust Framework for Post-Hoc Explanation Integrity Guarantees in Blackbox XAI Models22 Aug 2026
- 2026Manipulation-Proof Oblivious Audits against Deceptive Model Providers5 Aug 2026
- 2026"Trust Junk" Leads to Unjustified Support for Highly Discriminatory Predictive Models14 Jul 2026
- 2026Model Stealing Through the Lens of Model Multiplicity13 Jun 2026
- 2026Computational Orientalism: Measuring Structural Discourse Bias in Large Language Models Using the Middle East Cultural Sensitivity Score (MECSS)9 Jun 2026
- 2026Towards Verifiable AI with Lightweight Cryptographic Proofs of Inference19 Mar 2026
- 2026This Looks Distinctly Like That: Grounding Interpretable Recognition in Stiefel Geometry against Neural Collapse9 Mar 2026
- 2026Mixtures of Transparent Local Models15 Jan 2026
- 2026On the Definition and Detection of Cherry-Picking in Counterfactual Explanations8 Jan 2026
- 2025Interpretable Model-Aware Counterfactual Explanations for Random Forest31 Oct 2025
- 2025Restricted Receptive Fields for Face Verification12 Oct 2025
- 2025Exposing the Illusion of Fairness: Auditing Vulnerabilities to Distributional Manipulation Attacks28 Jul 2025
12 newest of 80 All 80 (JSON)