# Explainable deepfake and spoofing detection: an attack analysis using SHapley Additive exPlanations

arXiv: https://arxiv.org/abs/2202.13693 · HTML: https://mlsanity.com/paper/2202.13693/

## Key facts

- Cited by 5 papers in the map (data through 14 Oct 2026).
- First posted on arXiv 28 Feb 2022.

## Built on by (most cited first, 5 of 5)

- [How Do Neural Spoofing Countermeasures Detect Partially Spoofed Audio?](https://mlsanity.com/paper/2406.02483/) (2024)
- [What Does an Audio Deepfake Detector Focus on? A Study in the Time Domain](https://mlsanity.com/paper/2501.13887/) (2025)
- [A Data-Driven Diffusion-based Approach for Audio Deepfake Explanations](https://mlsanity.com/paper/2506.03425/) (2025)
- [Temporal Variability and Multi-Viewed Self-Supervised Representations to Tackle the ASVspoof5 Deepfake Challenge](https://mlsanity.com/paper/2408.06922/) (2024)
- [What Do Deepfake Speech Detectors Actually Hear?](https://mlsanity.com/paper/2606.10912/) (2026)

## Abstract (arXiv)

Despite several years of research in deepfake and spoofing detection for automatic speaker verification, little is known about the artefacts that classifiers use to distinguish between bona fide and spoofed utterances. An understanding of these is crucial to the design of trustworthy, explainable solutions. In this paper we report an extension of our previous work to better understand classifier behaviour to the use of SHapley Additive exPlanations (SHAP) to attack analysis. Our goal is to identify the artefacts that characterise utterances generated by different attacks algorithms. Using a pair of classifiers which operate either upon raw waveforms or magnitude spectrograms, we show that visualisations of SHAP results can be used to identify attack-specific artefacts and the differences and consistencies between synthetic speech and converted voice spoofing attacks.
