Exploring Counterfactual Explanations Through the Lens of Adversarial Examples: A Theoretical and Empirical Analysis
Not on the map. Why?
Abstract (arXiv)
As machine learning (ML) models become more widely deployed in high-stakes applications, counterfactual explanations have emerged as key tools for providing actionable model explanations in practice. Despite the growing popularity of counterfactual explanations, a deeper understanding of these explanations is still lacking. In this work, we systematically analyze counterfactual explanations through the lens of adversarial examples. We do so by formalizing the similarities between popular counterfactual explanation and adversarial example generation methods identifying conditions when they are equivalent. We then derive the upper bounds on the distances between the solutions output by counterfactual explanation and adversarial example generation methods, which we validate on several real-world data sets. By establishing these theoretical and empirical similarities between counterfactual explanations and adversarial examples, our work raises fundamental questions about the design and development of existing counterfactual explanation algorithms.
Key facts. Cited by 52 papers in the map (data through 7 Oct 2026). Builds on 36 of its 45 references that are in the map. First posted on arXiv 18 Jun 2021.
Builds on
36 of 45 references.
References · 36
- 2014Adam: A Method for Stochastic Optimizationcited by 36,960
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2017A Unified Approach to Interpreting Model Predictionscited by 6,488
- 2013Intriguing properties of neural networkscited by 5,114
- 2016"Why Should I Trust You?": Explaining the Predictions of Any Classifiercited by 5,040
- 2017Axiomatic Attribution for Deep Networkscited by 3,350
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
- 2013Deep Inside Convolutional Networks: Visualising Image Classification Models and Saliency Mapscited by 2,348
- 2016Adversarial examples in the physical worldcited by 1,762
- 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,315
- 2017Counterfactual Explanations without Opening the Black Box: Automated Decisions and the GDPRcited by 1,086
- 2017Wasserstein GANcited by 635
24 more
- 2018Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networkscited by 500
- 2018Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Surveycited by 459
- 2017Compressed Sensing using Generative Modelscited by 337
- 2018Actionable Recourse in Linear Classificationcited by 327
- 2018Regularisation of Neural Networks by Enforcing Lipschitz Continuitycited by 311
- 2020Algorithmic Recourse: from Counterfactual Explanations to Interventionscited by 250
- 2019Interpretable Counterfactual Explanations Guided by Prototypescited by 223
- 2019Model-Agnostic Counterfactual Explanations for Consequential Decisionscited by 204
- 2017Generating Natural Adversarial Examplescited by 182
- 2019Learning Model-Agnostic Counterfactual Explanations for Tabular Datacited by 146
- 2020Algorithmic recourse under imperfect causal knowledge: a probabilistic approachcited by 139
- 2019Towards Realistic Individual Recourse and Actionable Explanations in Black-Box Decision Making Systemscited by 128
- 2020A survey of algorithmic recourse: definitions, formulations, solutions, and prospectscited by 118
- 2019The Hidden Assumptions Behind Counterfactual Explanations and Principal Reasonscited by 115
- 2016Identity Matters in Deep Learningcited by 107
- 2020Certified Robustness to Label-Flipping Attacks via Randomized Smoothingcited by 103
- 2020Explaining the Explainer: A First Theoretical Analysis of LIMEcited by 89
- 2020On Counterfactual Explanations under Predictive Multiplicitycited by 73
- 2017Houdini: Fooling Deep Structured Prediction Modelscited by 50
- 2021Adversarial Attacks for Tabular Data: Application to Fraud Detection and Imbalanced Datacited by 45
- 2019Imperceptible Adversarial Attacks on Tabular Datacited by 35
- 2020Semantics and explanation: why counterfactual explanations produce adversarial examples in deep neural networkscited by 24
- 2020Beyond Individualized Recourse: Interpretable and Interactive Summaries of Actionable Recoursescited by 7
- 2021Adversarial Poisoning Attacks and Defense for General Multi-Class Models Based On Synthetic Reduced Nearest Neighborscited by 1
Built on by
Citing papers per year: 2021: 2; 2022: 11; 2023: 14; 2024: 9; 2025: 5; 2026: 11.
52 papers.
Sort:
By area:
- 2022Diffusion Models for Counterfactual Explanationscited by 79
- 2021On the Adversarial Robustness of Causal Algorithmic Recoursecited by 56
- 2023Adversarial Counterfactual Visual Explanationscited by 47
- 2022Probabilistically Robust Recourse: Navigating the Trade-offs between Costs and Robustness in Algorithmic Recoursecited by 40
- 2022On the Robustness of Sparse Counterfactual Explanations to Adverse Perturbationscited by 32
- 2022On the Privacy Risks of Algorithmic Recoursecited by 32
- 2024Robust Counterfactual Explanations in Machine Learning: A Surveycited by 29
- 2022Formalising the Robustness of Counterfactual Explanations for Neural Networkscited by 24
- 2022On the Trade-Off between Actionable Explanations and the Right to be Forgottencited by 20
- 2021Estimating Categorical Counterfactuals via Deep Twin Networkscited by 18
- 2022The Manifold Hypothesis for Gradient-Based Explanationscited by 15
- 2023Robustness Implies Fairness in Causal Algorithmic Recoursecited by 12
38 more
- 2023Towards Bridging the Gaps between the Right to Explanation and the Right to be Forgottencited by 10
- 2022A.I. Robustness: a Human-Centered Perspective on Technological Challenges and Opportunitiescited by 8
- 2023The Risks of Recourse in Binary Classificationcited by 8
- 2023Adversarial Machine Learning for Social Good: Reframing the Adversary as an Allycited by 5
- 2024Learning-Augmented Robust Algorithmic Recoursecited by 4
- 2023On Minimizing the Impact of Dataset Shifts on Actionable Explanationscited by 3
- 2025Robust Counterfactual Explanations under Model Multiplicity Using Multi-Objective Optimizationcited by 3
- 2025Optimal Robust Recourse with Lp-Bounded Model Changecited by 3
- 2022Don't Explain Noise: Robust Counterfactuals for Randomized Ensemblescited by 2
- 2023Algorithmic Recourse with Missing Valuescited by 2
- 2023Unveiling the Potential of Counterfactuals Explanations in Employabilitycited by 2
- 2023Faithful and Robust Local Interpretability for Textual Predictionscited by 2
- 2024Towards Non-Adversarial Algorithmic Recoursecited by 2
- 2026Counterfactual Explanations on Robust Perceptual Geodesicscited by 2
- 2023Towards User Guided Actionable Recoursecited by 1
- 2023T-COL: Generating Counterfactual Explanations for General User Preferences on Variable Machine Learning Systemscited by 1
- 2024Do Counterfactual Examples Complicate Adversarial Training?cited by 1
- 2024Model-Based Counterfactual Explanations Incorporating Feature Space Attributes for Tabular Datacited by 1
- 2024Learning Actionable Counterfactual Explanations in Large State Spacescited by 1
- 2025Counterfactual Visual Explanation via Causally-Guided Adversarial Steeringcited by 1
- 2026Fair Recourse for All: Ensuring Individual and Group Fairness in Counterfactual Explanationscited by 1
- 2022Decomposing Counterfactual Explanations for Consequential Decision Makingcited by 0
- 2022Explainability of Text Processing and Retrieval Methods: A Surveycited by 0
- 2023Adaptive Adversarial Training Does Not Increase Recourse Costscited by 0
- 2023On the Trade-offs between Adversarial Robustness and Actionable Explanationscited by 0
- 2023ABIGX: A Unified Framework for eXplainable Fault Detection and Classificationcited by 0
- 2024Cost-Adaptive Recourse Recommendation by Adaptive Preference Elicitationcited by 0
- 2024Utilizing Adversarial Examples for Bias Mitigation and Accuracy Enhancementcited by 0
- 2024CF-OPT: Counterfactual Explanations for Structured Predictioncited by 0
- 2025Countering Overfitting with Counterfactual Examplescited by 0
- 2025Training on Plausible Counterfactuals Removes Spurious Correlationscited by 0
- 2026Counterfactual Training: Teaching Models Plausible and Actionable Explanationscited by 0
- 2026Structure-Aware Robust Counterfactual Explanations via Conditional Gaussian Network Classifierscited by 0
- 2026Minimum Specification Perturbation: Robustness as Distance-to-Falsification in Causal Inferencecited by 0
- 2026Agentic Search for Counterfactual Recourse under Fixed LLM Budgetscited by 0
- 2026Target-confidence Recourse Using tSeTlin machines: TRUSTcited by 0
- 2026TIER: Trajectory-Invariant Explanation Regularization for Membership Privacycited by 0
- 2026A Generalized-Bayes Perspective on Counterfactual Explanations: Posterior-Based Decision-Making and Evaluationcited by 0
50 most cited of 52 All 52 (JSON)
- 2026Towards A Unified Information Bottleneck Framework for Time Series Explanations26 Aug 2026
- 2026A Generalized-Bayes Perspective on Counterfactual Explanations: Posterior-Based Decision-Making and Evaluation31 Jul 2026
- 2026TIER: Trajectory-Invariant Explanation Regularization for Membership Privacy3 Jul 2026
- 2026Counterfactual Fragility Certificates: Exposing High-Confidence Brittleness under Structured Evidence Failure29 Jun 2026
- 2026Target-confidence Recourse Using tSeTlin machines: TRUST17 Jun 2026
- 2026Agentic Search for Counterfactual Recourse under Fixed LLM Budgets7 Jun 2026
- 2026Minimum Specification Perturbation: Robustness as Distance-to-Falsification in Causal Inference2 May 2026
- 2026Structure-Aware Robust Counterfactual Explanations via Conditional Gaussian Network Classifiers8 Feb 2026
- 2026Fair Recourse for All: Ensuring Individual and Group Fairness in Counterfactual Explanations28 Jan 2026
- 2026Counterfactual Explanations on Robust Perceptual Geodesics26 Jan 2026
- 2026Counterfactual Training: Teaching Models Plausible and Actionable Explanations22 Jan 2026
- 2025Optimal Robust Recourse with Lp-Bounded Model Change25 Sep 2025
38 more
- 2025Counterfactual Visual Explanation via Causally-Guided Adversarial Steering14 Jul 2025
- 2025Training on Plausible Counterfactuals Removes Spurious Correlations22 May 2025
- 2025Countering Overfitting with Counterfactual Examples13 Feb 2025
- 2025Robust Counterfactual Explanations under Model Multiplicity Using Multi-Objective Optimization10 Jan 2025
- 2024Learning-Augmented Robust Algorithmic Recourse2 Oct 2024
- 2024CF-OPT: Counterfactual Explanations for Structured Prediction28 May 2024
- 2024Learning Actionable Counterfactual Explanations in Large State Spaces25 Apr 2024
- 2024Model-Based Counterfactual Explanations Incorporating Feature Space Attributes for Tabular Data20 Apr 2024
- 2024Utilizing Adversarial Examples for Bias Mitigation and Accuracy Enhancement18 Apr 2024
- 2024Do Counterfactual Examples Complicate Adversarial Training?16 Apr 2024
- 2024Towards Non-Adversarial Algorithmic Recourse15 Mar 2024
- 2024Cost-Adaptive Recourse Recommendation by Adaptive Preference Elicitation23 Feb 2024
- 2024Robust Counterfactual Explanations in Machine Learning: A Survey2 Feb 2024
- 2023ABIGX: A Unified Framework for eXplainable Fault Detection and Classification9 Nov 2023
- 2023Faithful and Robust Local Interpretability for Textual Predictions30 Oct 2023
- 2023Adversarial Machine Learning for Social Good: Reframing the Adversary as an Ally5 Oct 2023
- 2023On the Trade-offs between Adversarial Robustness and Actionable Explanations28 Sep 2023
- 2023T-COL: Generating Counterfactual Explanations for General User Preferences on Variable Machine Learning Systems28 Sep 2023
- 2023Adaptive Adversarial Training Does Not Increase Recourse Costs5 Sep 2023
- 2023Towards User Guided Actionable Recourse5 Sep 2023
- 2023On Minimizing the Impact of Dataset Shifts on Actionable Explanations11 Jun 2023
- 2023The Risks of Recourse in Binary Classification1 Jun 2023
- 2023Unveiling the Potential of Counterfactuals Explanations in Employability17 May 2023
- 2023Algorithmic Recourse with Missing Values28 Apr 2023
- 2023Adversarial Counterfactual Visual Explanations17 Mar 2023
- 2023Towards Bridging the Gaps between the Right to Explanation and the Right to be Forgotten8 Feb 2023
- 2023Robustness Implies Fairness in Causal Algorithmic Recourse7 Feb 2023
- 2022Explainability of Text Processing and Retrieval Methods: A Survey14 Dec 2022
- 2022On the Privacy Risks of Algorithmic Recourse10 Nov 2022
- 2022Decomposing Counterfactual Explanations for Consequential Decision Making3 Nov 2022
- 2022A.I. Robustness: a Human-Centered Perspective on Technological Challenges and Opportunities17 Oct 2022
- 2022Formalising the Robustness of Counterfactual Explanations for Neural Networks31 Aug 2022
- 2022On the Trade-Off between Actionable Explanations and the Right to be Forgotten30 Aug 2022
- 2022The Manifold Hypothesis for Gradient-Based Explanations15 Jun 2022
- 2022Don't Explain Noise: Robust Counterfactuals for Randomized Ensembles27 May 2022
- 2022Diffusion Models for Counterfactual Explanations29 Mar 2022
- 2022Probabilistically Robust Recourse: Navigating the Trade-offs between Costs and Robustness in Algorithmic Recourse13 Mar 2022
- 2022On the Robustness of Sparse Counterfactual Explanations to Adverse Perturbations22 Jan 2022
50 newest of 52 All 52 (JSON)
- 2022Diffusion Models for Counterfactual Explanationscited by 79
- 2023Adversarial Counterfactual Visual Explanationscited by 47
- 2024Do Counterfactual Examples Complicate Adversarial Training?cited by 1
- 2024Do Counterfactual Examples Complicate Adversarial Training?16 Apr 2024
- 2023Adversarial Counterfactual Visual Explanations17 Mar 2023
- 2022Diffusion Models for Counterfactual Explanations29 Mar 2022
- 2022On the Privacy Risks of Algorithmic Recoursecited by 32
- 2022On the Privacy Risks of Algorithmic Recourse10 Nov 2022
- 2021On the Adversarial Robustness of Causal Algorithmic Recoursecited by 56
- 2022Probabilistically Robust Recourse: Navigating the Trade-offs between Costs and Robustness in Algorithmic Recoursecited by 40
- 2022On the Robustness of Sparse Counterfactual Explanations to Adverse Perturbationscited by 32
- 2024Robust Counterfactual Explanations in Machine Learning: A Surveycited by 29
- 2022Formalising the Robustness of Counterfactual Explanations for Neural Networkscited by 24
- 2022On the Trade-Off between Actionable Explanations and the Right to be Forgottencited by 20
- 2021Estimating Categorical Counterfactuals via Deep Twin Networkscited by 18
- 2022The Manifold Hypothesis for Gradient-Based Explanationscited by 15
- 2023Robustness Implies Fairness in Causal Algorithmic Recoursecited by 12
- 2023Towards Bridging the Gaps between the Right to Explanation and the Right to be Forgottencited by 10
- 2022A.I. Robustness: a Human-Centered Perspective on Technological Challenges and Opportunitiescited by 8
- 2023The Risks of Recourse in Binary Classificationcited by 8
12 most cited of 47 All 47 (JSON)
- 2026Towards A Unified Information Bottleneck Framework for Time Series Explanations26 Aug 2026
- 2026A Generalized-Bayes Perspective on Counterfactual Explanations: Posterior-Based Decision-Making and Evaluation31 Jul 2026
- 2026TIER: Trajectory-Invariant Explanation Regularization for Membership Privacy3 Jul 2026
- 2026Counterfactual Fragility Certificates: Exposing High-Confidence Brittleness under Structured Evidence Failure29 Jun 2026
- 2026Target-confidence Recourse Using tSeTlin machines: TRUST17 Jun 2026
- 2026Minimum Specification Perturbation: Robustness as Distance-to-Falsification in Causal Inference2 May 2026
- 2026Structure-Aware Robust Counterfactual Explanations via Conditional Gaussian Network Classifiers8 Feb 2026
- 2026Fair Recourse for All: Ensuring Individual and Group Fairness in Counterfactual Explanations28 Jan 2026
- 2026Counterfactual Explanations on Robust Perceptual Geodesics26 Jan 2026
- 2026Counterfactual Training: Teaching Models Plausible and Actionable Explanations22 Jan 2026
- 2025Optimal Robust Recourse with Lp-Bounded Model Change25 Sep 2025
- 2025Counterfactual Visual Explanation via Causally-Guided Adversarial Steering14 Jul 2025
12 newest of 47 All 47 (JSON)