Are Your Explanations Reliable? Investigating the Stability of LIME in Explaining Text Classifiers by Marrying XAI and Adversarial Attack
Not on the map. Why?
Abstract (arXiv)
LIME has emerged as one of the most commonly referenced tools in explainable AI (XAI) frameworks that is integrated into critical machine learning applications--e.g., healthcare and finance. However, its stability remains little explored, especially in the context of text data, due to the unique text-space constraints. To address these challenges, in this paper, we first evaluate the inherent instability of LIME on text data to establish a baseline, and then propose a novel algorithm XAIFooler to perturb text inputs and manipulate explanations that casts investigation on the stability of LIME as a text perturbation optimization problem. XAIFooler conforms to the constraints to preserve text semantics and original prediction with small perturbations, and introduces Rank-biased Overlap (RBO) as a key part to guide the optimization of XAIFooler that satisfies all the requirements for explanation similarity measure. Extensive experiments on real-world text datasets demonstrate that XAIFooler significantly outperforms all baselines by large margins in its ability to manipulate LIME's explanations with high semantic preservability.
Key facts. Cited by 10 papers in the map (data through 14 Oct 2026). Builds on 20 of its 41 references that are in the map. First posted on arXiv 21 May 2023.
Builds on
20 of 41 references.
References · 20
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
- 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,372
- 2016"Why Should I Trust You?": Explaining the Predictions of Any Classifiercited by 5,070
- 2019DistilBERT, a distilled version of BERT: smaller, faster, cheaper and lightercited by 4,307
- 2017Towards A Rigorous Science of Interpretable Machine Learningcited by 1,416
- 2019Is BERT Really Robust? A Strong Baseline for Natural Language Attack on Text Classification and Entailmentcited by 671
- 2018Universal Sentence Encodercited by 489
- 2017Interpretation of Neural Networks is Fragilecited by 444
- 2019Fooling LIME and SHAP: Adversarial Attacks on Post hoc Explanation Methodscited by 443
- 2019A Survey on Explainable Artificial Intelligence (XAI): Towards Medical XAIcited by 404
- 2018On the Robustness of Interpretability Methodscited by 314
- 2020The role of explainability in creating trustworthy artificial intelligence for health care: a comprehensive survey of the terminology, design choices, and evaluation strategiescited by 92
8 more
- 2020Explaining the Explainer: A First Theoretical Analysis of LIMEcited by 89
- 2020Multi-Dimensional Gender Bias Classificationcited by 80
- 2018Interpretable Deep Learning under Firecited by 74
- 2021Explanation-Based Human Debugging of NLP Models: A Surveycited by 53
- 2021Perturbing Inputs for Fragile Interpretations in Deep Natural Language Processingcited by 30
- 2020An Analysis of LIME for Text Datacited by 25
- 2020Looking Deeper into Tabular LIMEcited by 20
- 2022Fooling Explanations in Text Classifierscited by 13
Built on by
Citing papers per year: 2024: 3; 2025: 5; 2026: 2.
10 papers.
- 2024Evaluating Readability and Faithfulness of Concept-based Explanationscited by 10
- 2025Language Modeling for the Future of Finance: A Survey into Metrics, Tasks, and Data Opportunitiescited by 3
- 2025Local MDI+: Local Feature Importances for Tree-Based Modelscited by 3
- 2024Faithfulness and the Notion of Adversarial Sensitivity in NLP Explanationscited by 2
- 2024The Effect of Similarity Measures on Accurate Stability Estimates for Local Surrogate Models in Text-based Explainable AIcited by 1
- 2025Quantifying True Robustness: Synonymity-Weighted Similarity for Trustworthy XAI Evaluationcited by 1
- 2025Towards Robust and Accurate Stability Estimation of Local Surrogate Models in Text-based Explainable AIcited by 1
- 2025Q-FAKER: Query-free Hard Black-box Attack via Controlled Generationcited by 1
- 2026Focus-LIME: Surgical Interpretation of Long-Context Large Language Models via Proxy-Based Neighborhood Selectioncited by 0
- 2026Evaluating the Semantic-to-Geometric Gap in Adversarial Defenses Against Vision-Language Model-Based Plagiarismcited by 0
- 2026Evaluating the Semantic-to-Geometric Gap in Adversarial Defenses Against Vision-Language Model-Based Plagiarism22 Sep 2026
- 2026Focus-LIME: Surgical Interpretation of Long-Context Large Language Models via Proxy-Based Neighborhood Selection4 Feb 2026
- 2025Local MDI+: Local Feature Importances for Tree-Based Models10 Jun 2025
- 2025Q-FAKER: Query-free Hard Black-box Attack via Controlled Generation18 Apr 2025
- 2025Language Modeling for the Future of Finance: A Survey into Metrics, Tasks, and Data Opportunities9 Apr 2025
- 2025Towards Robust and Accurate Stability Estimation of Local Surrogate Models in Text-based Explainable AI3 Jan 2025
- 2025Quantifying True Robustness: Synonymity-Weighted Similarity for Trustworthy XAI Evaluation2 Jan 2025
- 2024Faithfulness and the Notion of Adversarial Sensitivity in NLP Explanations26 Sep 2024
- 2024The Effect of Similarity Measures on Accurate Stability Estimates for Local Surrogate Models in Text-based Explainable AI22 Jun 2024
- 2024Evaluating Readability and Faithfulness of Concept-based Explanations29 Apr 2024