Robust Attribution Regularization
Not on the map. Why?
Abstract (arXiv)
An emerging problem in trustworthy machine learning is to train models that produce robust interpretations for their predictions. We take a step towards solving this problem through the lens of axiomatic attribution of neural networks. Our theory is grounded in the recent work, Integrated Gradients (IG), in axiomatically attributing a neural network's output change to its input change. We propose training objectives in classic robust optimization models to achieve robust IG attributions. Our objectives give principled generalizations of previous objectives designed for robust predictions, and they naturally degenerate to classic soft-margin training for one-layer neural networks. We also generalize previous theory and prove that the objectives for different robust optimization models are closely related. Experiments demonstrate the effectiveness of our method, and also point to intriguing problems which hint at the need for better optimization techniques or better neural network architectures for robust attribution training.
Key facts. Cited by 47 papers in the map (data through 14 Oct 2026). First posted on arXiv 23 May 2019.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 8; 2022: 15; 2023: 10; 2024: 7; 2025: 4; 2026: 3.
47 papers.
Sort:
By area:
- 2021When Does Contrastive Learning Preserve Adversarial Robustness from Pretraining to Finetuning?cited by 77
- 2022Beyond Explaining: Opportunities and Challenges of XAI-Based Model Improvementcited by 48
- 2023Adversarial attacks and defenses in explainable artificial intelligence: A surveycited by 48
- 2021Fast Axiomatic Attribution for Neural Networkscited by 35
- 2023TANGOS: Regularizing Tabular Neural Networks through Gradient Orthogonalization and Specializationcited by 32
- 2021NoiseGrad: Enhancing Explanations by Introducing Stochasticity to Model Weightscited by 28
- 2022Robust Explanation Constraints for Neural Networkscited by 24
- 2022What Makes a Good Explanation?: A Harmonized View of Properties of Explanationscited by 22
- 2021Robust Models Are More Interpretable Because Attributions Look Normalcited by 21
- 2021On the Lack of Robust Interpretability of Neural Text Classifierscited by 17
- 2021Show or Suppress? Managing Input Uncertainty in Machine Learning Model Explanationscited by 15
- 2023Are Data-driven Explanations Robust against Out-of-distribution Data?cited by 14
35 more
- 2024DEAL: Disentangle and Localize Concept-level Explanations for VLMscited by 14
- 2022Fooling Explanations in Text Classifierscited by 13
- 2022Adversarial Training for Improving Model Robustness? Look at Both Prediction and Interpretationcited by 12
- 2021When and How to Fool Explainable Models (and Humans) with Adversarial Examplescited by 10
- 2023BadVFL: Backdoor Attacks in Vertical Federated Learningcited by 10
- 2024Regulating Model Reliance on Non-Robust Features by Smoothing Input Marginal Densitycited by 10
- 2023It Is All About Data: A Survey on the Effects of Data on Adversarial Robustnesscited by 9
- 2022Exploiting the Relationship Between Kendall's Rank Correlation and Cosine Similarity for Attribution Protectioncited by 6
- 2022On the Robustness of Explanations of Deep Neural Network Models: A Surveycited by 5
- 2022Towards More Robust Interpretation via Local Gradient Alignmentcited by 4
- 2023AttributionLab: Faithfulness of Feature Attribution Under Controllable Environmentscited by 3
- 2023Rethinking Robustness of Model Attributionscited by 3
- 2026Attribution-Guided Model Rectification of Unreliable Neural Network Behaviorscited by 3
- 2021More Than Words: Towards Better Quality Interpretations of Text Classifierscited by 2
- 2022Saliency Guided Adversarial Training for Learning Generalizable Features with Applications to Medical Imaging Classification Systemcited by 2
- 2022Identifying the Source of Vulnerability in Explanation Discrepancy: A Case Study in Neural Text Classificationcited by 2
- 2023A Practical Upper Bound for the Worst-Case Attribution Deviationscited by 2
- 2024Combining Machine Learning Defenses without Conflictscited by 2
- 2025Factor Graph-based Interpretable Neural Networkscited by 2
- 2022Locally Invariant Explanations: Towards Stable and Unidirectional Explanations through Local Invariant Learningcited by 1
- 2022Verifying Attention Robustness of Deep Neural Networks against Semantic Perturbationscited by 1
- 2022PointACL:Adversarial Contrastive Learning for Robust Point Clouds Representation under Adversarial Attackcited by 1
- 2022Estimating the Adversarial Robustness of Attributions in Text with Transformerscited by 1
- 2022Provable Robust Saliency-based Explanationscited by 1
- 2023DARE: Towards Robust Text Explanations in Biomedical and Healthcare Applicationscited by 1
- 2024Certified ℓ2 Attribution Robustness via Uniformly Smoothed Attributionscited by 1
- 2026Explanation-Guided Adversarial Training for Robust and Interpretable Modelscited by 1
- 2023Robust Ranking Explanationscited by 0
- 2024Are Classification Robustness and Explanation Robustness Really Strongly Correlated? An Analysis Through Input Loss Landscapecited by 0
- 2024Revealing Vulnerabilities of Neural Networks in Parameter Learning and Defense Against Explanation-Aware Backdoorscited by 0
- 2024Impact of Adversarial Attacks on Deep Learning Model Explainabilitycited by 0
- 2025Fixed Point Explainabilitycited by 0
- 2025Accuracy is Not Enough: Poisoning Interpretability in Federated Learning via Color Skewcited by 0
- 2025Rethinking Robustness: A New Approach to Evaluating Feature Attribution Methodscited by 0
- 2026WisdomNet: trustable machine learning toward error-free classificationcited by 0
- 2026WisdomNet: trustable machine learning toward error-free classification11 Oct 2026
- 2026Attribution-Guided Model Rectification of Unreliable Neural Network Behaviors8 Mar 2026
- 2026Explanation-Guided Adversarial Training for Robust and Interpretable Models2 Mar 2026
- 2025Rethinking Robustness: A New Approach to Evaluating Feature Attribution Methods7 Dec 2025
- 2025Accuracy is Not Enough: Poisoning Interpretability in Federated Learning via Color Skew17 Nov 2025
- 2025Fixed Point Explainability18 May 2025
- 2025Factor Graph-based Interpretable Neural Networks20 Feb 2025
- 2024Impact of Adversarial Attacks on Deep Learning Model Explainability15 Dec 2024
- 2024Combining Machine Learning Defenses without Conflicts14 Nov 2024
- 2024DEAL: Disentangle and Localize Concept-level Explanations for VLMs19 Jul 2024
- 2024Regulating Model Reliance on Non-Robust Features by Smoothing Input Marginal Density5 Jul 2024
- 2024Certified ℓ2 Attribution Robustness via Uniformly Smoothed Attributions10 May 2024
35 more
- 2024Revealing Vulnerabilities of Neural Networks in Parameter Learning and Defense Against Explanation-Aware Backdoors25 Mar 2024
- 2024Are Classification Robustness and Explanation Robustness Really Strongly Correlated? An Analysis Through Input Loss Landscape9 Mar 2024
- 2023Rethinking Robustness of Model Attributions16 Dec 2023
- 2023AttributionLab: Faithfulness of Feature Attribution Under Controllable Environments10 Oct 2023
- 2023Robust Ranking Explanations8 Jul 2023
- 2023DARE: Towards Robust Text Explanations in Biomedical and Healthcare Applications5 Jul 2023
- 2023Adversarial attacks and defenses in explainable artificial intelligence: A survey6 Jun 2023
- 2023BadVFL: Backdoor Attacks in Vertical Federated Learning18 Apr 2023
- 2023Are Data-driven Explanations Robust against Out-of-distribution Data?29 Mar 2023
- 2023It Is All About Data: A Survey on the Effects of Data on Adversarial Robustness17 Mar 2023
- 2023TANGOS: Regularizing Tabular Neural Networks through Gradient Orthogonalization and Specialization9 Mar 2023
- 2023A Practical Upper Bound for the Worst-Case Attribution Deviations1 Mar 2023
- 2022Provable Robust Saliency-based Explanations28 Dec 2022
- 2022Estimating the Adversarial Robustness of Attributions in Text with Transformers18 Dec 2022
- 2022Robust Explanation Constraints for Neural Networks16 Dec 2022
- 2022Identifying the Source of Vulnerability in Explanation Discrepancy: A Case Study in Neural Text Classification10 Dec 2022
- 2022Towards More Robust Interpretation via Local Gradient Alignment29 Nov 2022
- 2022What Makes a Good Explanation?: A Harmonized View of Properties of Explanations10 Nov 2022
- 2022On the Robustness of Explanations of Deep Neural Network Models: A Survey9 Nov 2022
- 2022PointACL:Adversarial Contrastive Learning for Robust Point Clouds Representation under Adversarial Attack14 Sep 2022
- 2022Saliency Guided Adversarial Training for Learning Generalizable Features with Applications to Medical Imaging Classification System9 Sep 2022
- 2022Verifying Attention Robustness of Deep Neural Networks against Semantic Perturbations13 Jul 2022
- 2022Fooling Explanations in Text Classifiers7 Jun 2022
- 2022Exploiting the Relationship Between Kendall's Rank Correlation and Cosine Similarity for Attribution Protection15 May 2022
- 2022Adversarial Training for Improving Model Robustness? Look at Both Prediction and Interpretation23 Mar 2022
- 2022Beyond Explaining: Opportunities and Challenges of XAI-Based Model Improvement15 Mar 2022
- 2022Locally Invariant Explanations: Towards Stable and Unidirectional Explanations through Local Invariant Learning28 Jan 2022
- 2021More Than Words: Towards Better Quality Interpretations of Text Classifiers23 Dec 2021
- 2021Fast Axiomatic Attribution for Neural Networks15 Nov 2021
- 2021When Does Contrastive Learning Preserve Adversarial Robustness from Pretraining to Finetuning?1 Nov 2021
- 2021When and How to Fool Explainable Models (and Humans) with Adversarial Examples5 Jul 2021
- 2021NoiseGrad: Enhancing Explanations by Introducing Stochasticity to Model Weights18 Jun 2021
- 2021On the Lack of Robust Interpretability of Neural Text Classifiers8 Jun 2021
- 2021Robust Models Are More Interpretable Because Attributions Look Normal20 Mar 2021
- 2021Show or Suppress? Managing Input Uncertainty in Machine Learning Model Explanations23 Jan 2021
- 2021When Does Contrastive Learning Preserve Adversarial Robustness from Pretraining to Finetuning?cited by 77
- 2022Beyond Explaining: Opportunities and Challenges of XAI-Based Model Improvementcited by 48
- 2023Adversarial attacks and defenses in explainable artificial intelligence: A surveycited by 48
- 2021Fast Axiomatic Attribution for Neural Networkscited by 35
- 2023TANGOS: Regularizing Tabular Neural Networks through Gradient Orthogonalization and Specializationcited by 32
- 2021NoiseGrad: Enhancing Explanations by Introducing Stochasticity to Model Weightscited by 28
- 2022Robust Explanation Constraints for Neural Networkscited by 24
- 2022What Makes a Good Explanation?: A Harmonized View of Properties of Explanationscited by 22
- 2021Robust Models Are More Interpretable Because Attributions Look Normalcited by 21
- 2021On the Lack of Robust Interpretability of Neural Text Classifierscited by 17
- 2021Show or Suppress? Managing Input Uncertainty in Machine Learning Model Explanationscited by 15
- 2023Are Data-driven Explanations Robust against Out-of-distribution Data?cited by 14
12 most cited of 46 All 46 (JSON)
- 2026WisdomNet: trustable machine learning toward error-free classification11 Oct 2026
- 2026Attribution-Guided Model Rectification of Unreliable Neural Network Behaviors8 Mar 2026
- 2026Explanation-Guided Adversarial Training for Robust and Interpretable Models2 Mar 2026
- 2025Rethinking Robustness: A New Approach to Evaluating Feature Attribution Methods7 Dec 2025
- 2025Accuracy is Not Enough: Poisoning Interpretability in Federated Learning via Color Skew17 Nov 2025
- 2025Fixed Point Explainability18 May 2025
- 2025Factor Graph-based Interpretable Neural Networks20 Feb 2025
- 2024Impact of Adversarial Attacks on Deep Learning Model Explainability15 Dec 2024
- 2024Combining Machine Learning Defenses without Conflicts14 Nov 2024
- 2024Regulating Model Reliance on Non-Robust Features by Smoothing Input Marginal Density5 Jul 2024
- 2024Certified ℓ2 Attribution Robustness via Uniformly Smoothed Attributions10 May 2024
- 2024Revealing Vulnerabilities of Neural Networks in Parameter Learning and Defense Against Explanation-Aware Backdoors25 Mar 2024
12 newest of 46 All 46 (JSON)