Privacy Meets Explainability: A Comprehensive Impact Benchmark
Not on the map. Why?
Abstract (arXiv)
Since the mid-10s, the era of Deep Learning (DL) has continued to this day, bringing forth new superlatives and innovations each year. Nevertheless, the speed with which these innovations translate into real applications lags behind this fast pace. Safety-critical applications, in particular, underlie strict regulatory and ethical requirements which need to be taken care of and are still active areas of debate. eXplainable AI (XAI) and privacy-preserving machine learning (PPML) are both crucial research fields, aiming at mitigating some of the drawbacks of prevailing data-hungry black-box models in DL. Despite brisk research activity in the respective fields, no attention has yet been paid to their interaction. This work is the first to investigate the impact of private learning techniques on generated explanations for DL-based models. In an extensive experimental analysis covering various image and time series datasets from multiple domains, as well as varying privacy techniques, XAI methods, and model architectures, the effects of private training on generated explanations are studied. The findings suggest non-negligible changes in explanations through the introduction of privacy. Apart from reporting individual effects of PPML on XAI, the paper gives clear recommendations for the choice of techniques in real applications. By unveiling the interdependencies of these pivotal technologies, this work is a first step towards overcoming the remaining hurdles for practically applicable AI in safety-critical domains.
Key facts. Cited by 9 papers in the map (data through 14 Oct 2026). Builds on 44 of its 87 references that are in the map. First posted on arXiv 8 Nov 2022.
Builds on
44 of 87 references.
References · 44
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2014Adam: A Method for Stochastic Optimizationcited by 37,240
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,364
- 2017A Unified Approach to Interpreting Model Predictionscited by 6,555
- 2019EfficientNet: Rethinking Model Scaling for Convolutional Neural Networkscited by 6,442
- 2016"Why Should I Trust You?": Explaining the Predictions of Any Classifiercited by 5,070
- 2022A ConvNet for the 2020scited by 3,579
- 2017Axiomatic Attribution for Deep Networkscited by 3,384
- 2016Deep Learning with Differential Privacycited by 2,728
- 2013Deep Inside Convolutional Networks: Visualising Image Classification Models and Saliency Mapscited by 2,371
- 2013Visualizing and Understanding Convolutional Networkscited by 2,290
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
32 more
- 2016Federated Learning: Strategies for Improving Communication Efficiencycited by 1,475
- 2017Learning Important Features Through Propagating Activation Differencescited by 1,458
- 2017Interpretability Beyond Feature Attribution: Quantitative Testing with Concept Activation Vectors (TCAV)cited by 1,319
- 2017Explanation in Artificial Intelligence: Insights from the Social Sciencescited by 1,206
- 2014Striving for Simplicity: The All Convolutional Netcited by 990
- 2019Adversarial Examples Are Not Bugs, They Are Featurescited by 953
- 2018This Looks Like That: Deep Learning for Interpretable Image Recognitioncited by 737
- 2018Deep learning for time series classification: a reviewcited by 576
- 2020Time Series Forecasting With Deep Learning: A Surveycited by 459
- 2015Evaluating the visualization of what a Deep Neural Network has learnedcited by 419
- 2019InceptionTime: Finding AlexNet for Time Series Classificationcited by 387
- 2021High-Performance Large-Scale Image Recognition Without Normalizationcited by 360
- 2019On the (In)fidelity and Sensitivity for Explanationscited by 310
- 2016Not Just a Black Box: Learning Important Features Through Propagating Activation Differencescited by 297
- 2020Opportunities and Challenges in Explainable Artificial Intelligence (XAI): A Surveycited by 254
- 2017Deep Learning for Case-Based Reasoning through Prototypes: A Neural Network that Explains Its Predictionscited by 234
- 2015Evaluation of Deep Convolutional Nets for Document Image Classification and Retrievalcited by 213
- 2018Visual Interpretability for Deep Learning: a Surveycited by 155
- 2015Should we really use post-hoc tests based on mean-ranks?cited by 116
- 2020On Interpretability of Artificial Neural Networks: A Surveycited by 88
- 2018Privacy Preserving Machine Learning: Threats and Solutionscited by 79
- 2020Explainable Artificial Intelligence: a Systematic Reviewcited by 79
- 2021Exploiting Explanations for Model Inversion Attackscited by 49
- 2021Robust Explainability: A Tutorial on Gradient-Based Attribution Methods for Deep Neural Networkscited by 48
- 2018TSViz: Demystification of Deep Learning Models for Time-Series Analysiscited by 25
- 2020Model Explanations with Differential Privacycited by 23
- 2022The privacy issue of counterfactual explanations: explanation linkage attackscited by 20
- 2020Explaining AI-based Decision Support Systems using Concept Localization Mapscited by 16
- 2021Understanding Training-Data Leakage from Gradients in Neural Networks for Image Classificationcited by 16
- 2020Bias in Data-driven AI Systems -- An Introductory Surveycited by 10
- 2021When Differential Privacy Meets Interpretability: A Case Studycited by 8
- 2021Evaluating Privacy-Preserving Machine Learning in Critical Infrastructures: A Case Study on Time-Series Classificationcited by 6
Built on by
Citing papers per year: 2023: 4; 2024: 2; 2025: 1; 2026: 2.
9 papers.
- 2023A Survey on Explainable Artificial Intelligence for Cybersecuritycited by 9
- 2025Trustworthy AI Must Account for Interactionscited by 5
- 2023Unraveling the Interconnected Axes of Heterogeneity in Machine Learning for Democratic and Inclusive Advancementscited by 2
- 2023PrIeD-KIE: Towards Privacy Preserved Document Key Information Extractioncited by 2
- 2024Reconciling Privacy and Explainability in High-Stakes: A Systematic Inquirycited by 1
- 2026Explanations Leak: Membership Inference with Differential Privacy and Active Learning Defensecited by 1
- 2023Beyond XAI:Obstacles Towards Responsible AIcited by 0
- 2024Privacy-Preserving Federated Learning with Differentially Private Hyperdimensional Computingcited by 0
- 2026DANCE: Dynamic, Available, Neighbor-gated Condensation for Federated Text-Attributed Graphscited by 0
- 2026Explanations Leak: Membership Inference with Differential Privacy and Active Learning Defense3 Feb 2026
- 2026DANCE: Dynamic, Available, Neighbor-gated Condensation for Federated Text-Attributed Graphs23 Jan 2026
- 2025Trustworthy AI Must Account for Interactions9 Apr 2025
- 2024Reconciling Privacy and Explainability in High-Stakes: A Systematic Inquiry30 Dec 2024
- 2024Privacy-Preserving Federated Learning with Differentially Private Hyperdimensional Computing2 Nov 2024
- 2023PrIeD-KIE: Towards Privacy Preserved Document Key Information Extraction5 Oct 2023
- 2023Beyond XAI:Obstacles Towards Responsible AI7 Sep 2023
- 2023Unraveling the Interconnected Axes of Heterogeneity in Machine Learning for Democratic and Inclusive Advancements11 Jun 2023
- 2023A Survey on Explainable Artificial Intelligence for Cybersecurity7 Mar 2023