The Intriguing Relation Between Counterfactual Explanations and Adversarial Examples
Not on the map. Why?
Abstract (arXiv)
The same method that creates adversarial examples (AEs) to fool image-classifiers can be used to generate counterfactual explanations (CEs) that explain algorithmic decisions. This observation has led researchers to consider CEs as AEs by another name. We argue that the relationship to the true label and the tolerance with respect to proximity are two properties that formally distinguish CEs and AEs. Based on these arguments, we introduce CEs, AEs, and related concepts mathematically in a common framework. Furthermore, we show connections between current methods for generating CEs and AEs, and estimate that the fields will merge more and more as the number of common use-cases grows.
Key facts. Cited by 44 papers in the map (data through 7 Oct 2026). First posted on arXiv 11 Sep 2020.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 3; 2022: 8; 2023: 10; 2024: 10; 2025: 7; 2026: 6.
44 papers.
Sort:
By area:
- 2021CF-GNNExplainer: Counterfactual Explanations for Graph Neural Networkscited by 118
- 2021Contrastive Explanations for Model Interpretabilitycited by 75
- 2022On the Robustness of Sparse Counterfactual Explanations to Adverse Perturbationscited by 32
- 2022Green Learning: Introduction, Examples and Outlookcited by 30
- 2022Formalising the Robustness of Counterfactual Explanations for Neural Networkscited by 24
- 2022Improvement-Focused Causal Recourse (ICR)cited by 20
- 2022Towards Explainable Evaluation Metrics for Natural Language Generationcited by 15
- 2023Towards Explainable Evaluation Metrics for Machine Translationcited by 15
- 2022Interpretation of Black Box NLP Models: A Surveycited by 9
- 2023Generating collective counterfactual explanations in score-based classification via mathematical optimizationcited by 9
- 2023D4Explainer: In-Distribution GNN Explanations via Discrete Denoising Diffusioncited by 9
- 2023The Risks of Recourse in Binary Classificationcited by 8
32 more
- 2024Machine Learning Robustness: A Primercited by 8
- 2021DeDUCE: Generating Counterfactual Explanations Efficientlycited by 6
- 2023Diffusion-based Visual Counterfactual Explanations -- Towards Systematic Quantitative Evaluationcited by 6
- 2024CountARFactuals -- Generating plausible model-agnostic counterfactual explanations with adversarial random forestscited by 5
- 2023Artificial Neural Nets and the Representation of Human Conceptscited by 3
- 2024Guiding the generation of counterfactual explanations through temporal background knowledge for Predictive Process Monitoringcited by 3
- 2024Trustworthy Actionable Perturbationscited by 3
- 2025Robust Counterfactual Explanations under Model Multiplicity Using Multi-Objective Optimizationcited by 3
- 2022Testing robustness of predictions of trained classifiers against naturally occurring perturbationscited by 2
- 2023counterfactuals: An R Package for Counterfactual Explanation Methodscited by 2
- 2024Towards Non-Adversarial Algorithmic Recoursecited by 2
- 2024Faithfulness and the Notion of Adversarial Sensitivity in NLP Explanationscited by 2
- 2024GIFT: A Framework Towards Global Interpretable Faithful Textual Explanations of Vision Classifierscited by 2
- 2026Counterfactual Explanations on Robust Perceptual Geodesicscited by 2
- 2026ATEX-CF: Attack-Informed Counterfactual Explanations for Graph Neural Networkscited by 2
- 2023Fragility, Robustness and Antifragility in Deep Learningcited by 1
- 2024SoK: Analyzing Adversarial Examples: A Framework to Study Adversary Knowledgecited by 1
- 2024Do Counterfactual Examples Complicate Adversarial Training?cited by 1
- 2025Guidelines For The Choice Of The Baseline in XAI Attribution Methodscited by 1
- 2025Improving Counterfactual Truthfulness for Molecular Property Prediction through Uncertainty Quantificationcited by 1
- 2022Clarity: an improved gradient method for producing quality visual counterfactual explanationscited by 0
- 2023Adaptive Adversarial Training Does Not Increase Recourse Costscited by 0
- 2023On the Trade-offs between Adversarial Robustness and Actionable Explanationscited by 0
- 2024CF-OPT: Counterfactual Explanations for Structured Predictioncited by 0
- 2025Countering Overfitting with Counterfactual Examplescited by 0
- 2025Unifying Image Counterfactuals and Feature Attributions with Latent-Space Adversarial Attackscited by 0
- 2025Training on Plausible Counterfactuals Removes Spurious Correlationscited by 0
- 2025Generalizability vs. Counterfactual Explainability Trade-Offcited by 0
- 2026Counterfactual Training: Teaching Models Plausible and Actionable Explanationscited by 0
- 2026Explainable AI Isn't Enough! Rethinking Algorithmic Contestabilitycited by 0
- 2026Concept-based Visual Counterfactual Explanations with Diffusion Modelscited by 0
- 2026From Interpretability Methods to Interpretable Modelscited by 0
- 2026From Interpretability Methods to Interpretable Models4 Sep 2026
- 2026Explainable AI Isn't Enough! Rethinking Algorithmic Contestability15 May 2026
- 2026Concept-based Visual Counterfactual Explanations with Diffusion Models5 May 2026
- 2026ATEX-CF: Attack-Informed Counterfactual Explanations for Graph Neural Networks5 Feb 2026
- 2026Counterfactual Explanations on Robust Perceptual Geodesics26 Jan 2026
- 2026Counterfactual Training: Teaching Models Plausible and Actionable Explanations22 Jan 2026
- 2025Generalizability vs. Counterfactual Explainability Trade-Off29 May 2025
- 2025Training on Plausible Counterfactuals Removes Spurious Correlations22 May 2025
- 2025Unifying Image Counterfactuals and Feature Attributions with Latent-Space Adversarial Attacks21 Apr 2025
- 2025Improving Counterfactual Truthfulness for Molecular Property Prediction through Uncertainty Quantification3 Apr 2025
- 2025Guidelines For The Choice Of The Baseline in XAI Attribution Methods25 Mar 2025
- 2025Countering Overfitting with Counterfactual Examples13 Feb 2025
32 more
- 2025Robust Counterfactual Explanations under Model Multiplicity Using Multi-Objective Optimization10 Jan 2025
- 2024GIFT: A Framework Towards Global Interpretable Faithful Textual Explanations of Vision Classifiers23 Nov 2024
- 2024Faithfulness and the Notion of Adversarial Sensitivity in NLP Explanations26 Sep 2024
- 2024CF-OPT: Counterfactual Explanations for Structured Prediction28 May 2024
- 2024Trustworthy Actionable Perturbations18 May 2024
- 2024Do Counterfactual Examples Complicate Adversarial Training?16 Apr 2024
- 2024CountARFactuals -- Generating plausible model-agnostic counterfactual explanations with adversarial random forests4 Apr 2024
- 2024Machine Learning Robustness: A Primer1 Apr 2024
- 2024Guiding the generation of counterfactual explanations through temporal background knowledge for Predictive Process Monitoring18 Mar 2024
- 2024Towards Non-Adversarial Algorithmic Recourse15 Mar 2024
- 2024SoK: Analyzing Adversarial Examples: A Framework to Study Adversary Knowledge22 Feb 2024
- 2023Fragility, Robustness and Antifragility in Deep Learning15 Dec 2023
- 2023Artificial Neural Nets and the Representation of Human Concepts8 Dec 2023
- 2023D4Explainer: In-Distribution GNN Explanations via Discrete Denoising Diffusion30 Oct 2023
- 2023Generating collective counterfactual explanations in score-based classification via mathematical optimization19 Oct 2023
- 2023On the Trade-offs between Adversarial Robustness and Actionable Explanations28 Sep 2023
- 2023Adaptive Adversarial Training Does Not Increase Recourse Costs5 Sep 2023
- 2023Diffusion-based Visual Counterfactual Explanations -- Towards Systematic Quantitative Evaluation11 Aug 2023
- 2023Towards Explainable Evaluation Metrics for Machine Translation22 Jun 2023
- 2023The Risks of Recourse in Binary Classification1 Jun 2023
- 2023counterfactuals: An R Package for Counterfactual Explanation Methods13 Apr 2023
- 2022Clarity: an improved gradient method for producing quality visual counterfactual explanations22 Nov 2022
- 2022Improvement-Focused Causal Recourse (ICR)27 Oct 2022
- 2022Green Learning: Introduction, Examples and Outlook3 Oct 2022
- 2022Formalising the Robustness of Counterfactual Explanations for Neural Networks31 Aug 2022
- 2022Testing robustness of predictions of trained classifiers against naturally occurring perturbations21 Apr 2022
- 2022Interpretation of Black Box NLP Models: A Survey31 Mar 2022
- 2022Towards Explainable Evaluation Metrics for Natural Language Generation21 Mar 2022
- 2022On the Robustness of Sparse Counterfactual Explanations to Adverse Perturbations22 Jan 2022
- 2021DeDUCE: Generating Counterfactual Explanations Efficiently29 Nov 2021
- 2021Contrastive Explanations for Model Interpretability2 Mar 2021
- 2021CF-GNNExplainer: Counterfactual Explanations for Graph Neural Networks5 Feb 2021
- 2021CF-GNNExplainer: Counterfactual Explanations for Graph Neural Networkscited by 118
- 2021Contrastive Explanations for Model Interpretabilitycited by 75
- 2022On the Robustness of Sparse Counterfactual Explanations to Adverse Perturbationscited by 32
- 2022Green Learning: Introduction, Examples and Outlookcited by 30
- 2022Formalising the Robustness of Counterfactual Explanations for Neural Networkscited by 24
- 2022Improvement-Focused Causal Recourse (ICR)cited by 20
- 2022Towards Explainable Evaluation Metrics for Natural Language Generationcited by 15
- 2023Towards Explainable Evaluation Metrics for Machine Translationcited by 15
- 2022Interpretation of Black Box NLP Models: A Surveycited by 9
- 2023Generating collective counterfactual explanations in score-based classification via mathematical optimizationcited by 9
- 2023The Risks of Recourse in Binary Classificationcited by 8
- 2024Machine Learning Robustness: A Primercited by 8
12 most cited of 41 All 41 (JSON)
- 2026From Interpretability Methods to Interpretable Models4 Sep 2026
- 2026Explainable AI Isn't Enough! Rethinking Algorithmic Contestability15 May 2026
- 2026ATEX-CF: Attack-Informed Counterfactual Explanations for Graph Neural Networks5 Feb 2026
- 2026Counterfactual Explanations on Robust Perceptual Geodesics26 Jan 2026
- 2026Counterfactual Training: Teaching Models Plausible and Actionable Explanations22 Jan 2026
- 2025Generalizability vs. Counterfactual Explainability Trade-Off29 May 2025
- 2025Training on Plausible Counterfactuals Removes Spurious Correlations22 May 2025
- 2025Unifying Image Counterfactuals and Feature Attributions with Latent-Space Adversarial Attacks21 Apr 2025
- 2025Improving Counterfactual Truthfulness for Molecular Property Prediction through Uncertainty Quantification3 Apr 2025
- 2025Guidelines For The Choice Of The Baseline in XAI Attribution Methods25 Mar 2025
- 2025Countering Overfitting with Counterfactual Examples13 Feb 2025
- 2025Robust Counterfactual Explanations under Model Multiplicity Using Multi-Objective Optimization10 Jan 2025
12 newest of 41 All 41 (JSON)