Explainable Adversarial Attacks in Deep Neural Networks Using Activation Profiles
Not on the map. Why?
Abstract (arXiv)
As neural networks become the tool of choice to solve an increasing variety of problems in our society, adversarial attacks become critical. The possibility of generating data instances deliberately designed to fool a network's analysis can have disastrous consequences. Recent work has shown that commonly used methods for model training often result in fragile abstract representations that are particularly vulnerable to such attacks. This paper presents a visual framework to investigate neural network models subjected to adversarial examples, revealing how models' perception of the adversarial data differs from regular data instances and their relationships with class perception. Through different use cases, we show how observing these elements can quickly pinpoint exploited areas in a model, allowing further study of vulnerable features in input data and serving as a guide to improving model training and architecture.
Key facts. Cited by 6 papers in the map (data through 7 Oct 2026). Builds on 52 of its 91 references that are in the map. First posted on arXiv 18 Mar 2021.
Builds on
52 of 91 references.
References · 52
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,690
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2013Intriguing properties of neural networkscited by 5,114
- 2016"Why Should I Trust You?": Explaining the Predictions of Any Classifiercited by 5,040
- 2018MobileNetV2: Inverted Residuals and Linear Bottleneckscited by 4,773
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
- 2018UMAP: Uniform Manifold Approximation and Projection for Dimension Reductioncited by 2,841
- 2013Deep Inside Convolutional Networks: Visualising Image Classification Models and Saliency Mapscited by 2,348
- 2013Visualizing and Understanding Convolutional Networkscited by 2,278
- 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,315
- 2019Adversarial Examples Are Not Bugs, They Are Featurescited by 950
38 more
- 2020Fast is better than free: Revisiting adversarial trainingcited by 723
- 2019Adversarial Training for Free!cited by 638
- 2017One pixel attack for fooling deep neural networkscited by 579
- 2017Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methodscited by 542
- 2018Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Surveycited by 459
- 2019STRIP: A Defence Against Trojan Attacks on Deep Neural Networkscited by 437
- 2015Evaluating the visualization of what a Deep Neural Network has learnedcited by 416
- 2017Wild Patterns: Ten Years After the Rise of Adversarial Machine Learningcited by 411
- 2019A Survey of Deep Learning Techniques for Autonomous Drivingcited by 401
- 2019Hidden Trigger Backdoor Attackscited by 359
- 2017Adversarial Examples: Attacks and Defenses for Deep Learningcited by 350
- 2015Understanding Neural Networks Through Deep Visualizationcited by 332
- 2018Adversarial Attacks and Defences: A Surveycited by 259
- 2018Generating Adversarial Examples with Adversarial Networkscited by 256
- 2015Visualizing and Understanding Neural Models in NLPcited by 199
- 2017Towards Poisoning of Deep Learning Algorithms with Back-gradient Optimizationcited by 188
- 2015Visualizing and Understanding Recurrent Networkscited by 158
- 2018Backdoor Embedding in Convolutional Neural Network Models via Invisible Perturbationcited by 131
- 2018Visual Analytics in Deep Learning: An Interrogative Survey for the Next Frontierscited by 117
- 2016Multifaceted Feature Visualization: Uncovering the Different Types of Features Learned By Each Neuron in Deep Neural Networkscited by 106
- 2017Learning how to explain neural networks: PatternNet and PatternAttributioncited by 84
- 2019Summit: Scaling Deep Learning Interpretability by Visualizing Activation and Attribution Summarizationscited by 72
- 2018RetainVis: Visual Analytics with Interpretable and Interactive Recurrent Neural Networks on Electronic Medical Recordscited by 61
- 2020CNN Explainer: Learning Convolutional Neural Networks with Interactive Visualizationcited by 57
- 2017ActiVis: Visual Exploration of Industry-Scale Deep Neural Network Modelscited by 56
- 2016Towards Better Analysis of Deep Convolutional Neural Networkscited by 51
- 2017Towards better understanding of gradient-based attribution methods for Deep Neural Networkscited by 51
- 2018Manifold: A Model-Agnostic Framework for Interpretation and Diagnosis of Machine Learning Modelscited by 50
- 2017Understanding Hidden Memories of Recurrent Neural Networkscited by 43
- 2018GAN Lab: Understanding Complex Deep Generative Models using Interactive Visual Experimentationcited by 40
- 2018Visual Analytics for Explainable Deep Learningcited by 39
- 2017Towards Better Analysis of Machine Learning Models: A Visual Analytics Perspectivecited by 36
- 2020Analyzing the Noise Robustness of Deep Neural Networkscited by 31
- 2019Explaining Vulnerabilities to Adversarial Machine Learning through Visual Analyticscited by 23
- 2017A Workflow for Visual Diagnostics of Binary Classifiers using Instance-Level Explanationscited by 20
- 2017Adversarial Robustness: Softmax versus Openmaxcited by 7
- 2018DeepTracker: Visualizing the Training Process of Convolutional Neural Networkscited by 7
- 2017An Introduction to Deep Visual Explanationcited by 4
50 most cited of 52 All 52 (JSON)
Built on by
Citing papers per year: 2021: 1; 2022: 2; 2023: 0; 2024: 2; 2025: 1.
6 papers.
- 2022Generalizing Adversarial Explanations with Grad-CAMcited by 9
- 2022VisCUIT: Visual Auditor for Bias in CNN Image Classifiercited by 8
- 2024EvolvED: Evolutionary Embeddings to Understand the Generation Process of Diffusion Modelscited by 3
- 2025The Structural Safety Generalization Problemcited by 2
- 2021TESDA: Transform Enabled Statistical Detection of Attacks in Deep Neural Networkscited by 0
- 2024Searching for internal symbols underlying deep learningcited by 0
- 2025The Structural Safety Generalization Problem13 Apr 2025
- 2024EvolvED: Evolutionary Embeddings to Understand the Generation Process of Diffusion Models25 Jun 2024
- 2024Searching for internal symbols underlying deep learning31 May 2024
- 2022VisCUIT: Visual Auditor for Bias in CNN Image Classifier12 Apr 2022
- 2022Generalizing Adversarial Explanations with Grad-CAM11 Apr 2022
- 2021TESDA: Transform Enabled Statistical Detection of Attacks in Deep Neural Networks16 Oct 2021