SCAAT: Improving Neural Network Interpretability via Saliency Constrained Adaptive Adversarial Training
Not on the map. Why?
Abstract (arXiv)
Deep Neural Networks (DNNs) are expected to provide explanation for users to understand their black-box predictions. Saliency map is a common form of explanation illustrating the heatmap of feature attributions, but it suffers from noise in distinguishing important features. In this paper, we propose a model-agnostic learning method called Saliency Constrained Adaptive Adversarial Training (SCAAT) to improve the quality of such DNN interpretability. By constructing adversarial samples under the guidance of saliency map, SCAAT effectively eliminates most noise and makes saliency maps sparser and more faithful without any modification to the model architecture. We apply SCAAT to multiple DNNs and evaluate the quality of the generated saliency maps on various natural and pathological image datasets. Evaluations on different domains and metrics show that SCAAT significantly improves the interpretability of DNNs by providing more faithful saliency maps without sacrificing their predictive power.
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Builds on 47 of its 59 references that are in the map. First posted on arXiv 9 Nov 2023.
Builds on
47 of 59 references.
References · 47
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,364
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,733
- 2017A Unified Approach to Interpreting Model Predictionscited by 6,555
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2013Intriguing properties of neural networkscited by 5,155
- 2016"Why Should I Trust You?": Explaining the Predictions of Any Classifiercited by 5,070
- 2017Axiomatic Attribution for Deep Networkscited by 3,384
- 2015Learning Deep Features for Discriminative Localizationcited by 2,436
- 2013Deep Inside Convolutional Networks: Visualising Image Classification Models and Saliency Mapscited by 2,371
- 2013Visualizing and Understanding Convolutional Networkscited by 2,290
35 more
- 2017Improved Regularization of Convolutional Neural Networks with Cutoutcited by 1,628
- 2017Learning Important Features Through Propagating Activation Differencescited by 1,458
- 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,318
- 2018Sanity Checks for Saliency Mapscited by 1,156
- 2017SmoothGrad: removing noise by adding noisecited by 1,109
- 2018RISE: Randomized Input Sampling for Explanation of Black-box Modelscited by 838
- 2019Adversarial Training for Free!cited by 643
- 2018A Benchmark for Interpretability Methods in Deep Neural Networkscited by 476
- 2013Do Deep Nets Really Need to be Deep?cited by 474
- 2017Interpretation of Neural Networks is Fragilecited by 444
- 2018Rotation Equivariant CNNs for Digital Pathologycited by 422
- 2015Evaluating the visualization of what a Deep Neural Network has learnedcited by 419
- 2017The (Un)reliability of saliency methodscited by 333
- 2017Right for the Right Reasons: Training Differentiable Models by Constraining their Explanationscited by 294
- 2021Recent Advances in Adversarial Training for Adversarial Robustnesscited by 279
- 2017Distilling a Neural Network Into a Soft Decision Treecited by 236
- 2017Hide-and-Seek: Forcing a Network to be Meticulous for Weakly-supervised Object and Action Localizationcited by 207
- 2017Object Region Mining with Adversarial Erasing: A Simple Classification to Semantic Segmentation Approachcited by 201
- 2020Bag of Tricks for Adversarial Trainingcited by 200
- 2019You Only Propagate Once: Accelerating Adversarial Training via Maximal Principlecited by 183
- 2018Tell Me Where to Look: Guided Attention Inference Networkcited by 169
- 2020Debugging Tests for Model Explanationscited by 147
- 2019Sanity Checks for Saliency Metricscited by 119
- 2018Towards the first adversarially robust neural network model on MNISTcited by 104
- 2018Self-Erasing Network for Integral Object Attentioncited by 95
- 2019Adversarial Robustness Against the Union of Multiple Perturbation Modelscited by 88
- 2017Beyond Sparsity: Tree Regularization of Deep Models for Interpretabilitycited by 68
- 2021Improving Deep Learning Interpretability by Saliency Guided Trainingcited by 68
- 2017Clinical Intervention Prediction and Understanding using Deep Networkscited by 35
- 2019Saliency Learning: Teaching the Model Where to Pay Attentioncited by 23
- 2019Input-Cell Attention Reduces Vanishing Saliency of Recurrent Neural Networkscited by 20
- 2018Sharpen Focus: Learning with Attention Separability and Consistencycited by 18
- 2019Interpretable Deep Learning in Drug Discoverycited by 14
- 2023What a Whole Slide Image Can Tell? Subtype-guided Masked Transformer for Pathological Image Captioningcited by 8
- 2023Assessing and Enhancing Robustness of Deep Learning Models with Corruption Emulation in Digital Pathologycited by 6
Built on by
Citing papers per year: 2024: 1; 2025: 0; 2026: 1.
2 papers.