Exploiting Explainability to Design Adversarial Attacks and Evaluate Attack Resilience in Hate-Speech Detection Models
Not on the map. Why?
Abstract (arXiv)
The advent of social media has given rise to numerous ethical challenges, with hate speech among the most significant concerns. Researchers are attempting to tackle this problem by leveraging hate-speech detection and employing language models to automatically moderate content and promote civil discourse. Unfortunately, recent studies have revealed that hate-speech detection systems can be misled by adversarial attacks, raising concerns about their resilience. While previous research has separately addressed the robustness of these models under adversarial attacks and their interpretability, there has been no comprehensive study exploring their intersection. The novelty of our work lies in combining these two critical aspects, leveraging interpretability to identify potential vulnerabilities and enabling the design of targeted adversarial attacks. We present a comprehensive and comparative analysis of adversarial robustness exhibited by various hate-speech detection models. Our study evaluates the resilience of these models against adversarial attacks using explainability techniques. To gain insights into the models' decision-making processes, we employ the Local Interpretable Model-agnostic Explanations (LIME) framework. Based on the explainability results obtained by LIME, we devise and execute targeted attacks on the text by leveraging the TextAttack tool. Our findings enhance the understanding of the vulnerabilities and strengths exhibited by state-of-the-art hate-speech detection models. This work underscores the importance of incorporating explainability in the development and evaluation of such models to enhance their resilience against adversarial attacks. Ultimately, this work paves the way for creating more robust and reliable hate-speech detection systems, fostering safer online environments and promoting ethical discourse on social media platforms.
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Builds on 23 of its 36 references that are in the map. First posted on arXiv 29 May 2023.
Builds on
23 of 36 references.
References · 23
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
- 2014Adam: A Method for Stochastic Optimizationcited by 37,240
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2017A Unified Approach to Interpreting Model Predictionscited by 6,555
- 2016"Why Should I Trust You?": Explaining the Predictions of Any Classifiercited by 5,070
- 2019DistilBERT, a distilled version of BERT: smaller, faster, cheaper and lightercited by 4,307
- 2020Longformer: The Long-Document Transformercited by 3,413
- 2015Learning Deep Features for Discriminative Localizationcited by 2,436
- 2017Towards A Rigorous Science of Interpretable Machine Learningcited by 1,416
- 2014Convolutional Neural Networks for Sentence Classificationcited by 1,127
- 2016The Mythos of Model Interpretabilitycited by 721
- 2020HateXplain: A Benchmark Dataset for Explainable Hate Speech Detectioncited by 407
11 more
- 2019Probing Neural Network Comprehension of Natural Language Argumentscited by 214
- 2018Reducing Gender Bias in Abusive Language Detectioncited by 152
- 2020Directions in Abusive Language Training Data: Garbage In, Garbage Outcited by 140
- 2019A BERT-Based Transfer Learning Approach for Hate Speech Detection in Online Social Mediacited by 96
- 2020Contextualizing Hate Speech Classifiers with Post-hoc Explanationcited by 84
- 2020Measuring a hate speech spectrum with faceted Rasch item response theory and perspective-aware, explainable-by-design deep learningcited by 68
- 2022Handling and Presenting Harmful Text in NLP Researchcited by 43
- 2022Necessity and Sufficiency for Explaining Text Classifiers: A Case Study in Hate Speech Detectioncited by 18
- 2019Content Removal as a Moderation Strategy: Compliance and Other Outcomes in the ChangeMyView Communitycited by 9
- 2021BERT is Robust! A Case Against Synonym-Based Adversarial Examples in Text Classificationcited by 9
- 2022Governing for Free: Rule Process Effects on Reddit Moderator Motivationscited by 3
Built on by
Citing papers per year: 2024: 1; 2025: 1.
2 papers.