mlsanityData to 14 Oct 2026

Forward Learning for Gradient-based Black-box Saliency Map Generation

arXiv 2403.15603 ↗First posted 22 Mar 2024cs.CV cs.AIcited by 2

Not on the map. Why?

Abstract (arXiv)

Gradient-based saliency maps are widely used to explain deep neural network decisions. However, as models become deeper and more black-box, such as in closed-source APIs like ChatGPT, computing gradients become challenging, hindering conventional explanation methods. In this work, we introduce a novel unified framework for estimating gradients in black-box settings and generating saliency maps to interpret model decisions. We employ the likelihood ratio method to estimate output-to-input gradients and utilize them for saliency map generation. Additionally, we propose blockwise computation techniques to enhance estimation accuracy. Extensive experiments in black-box settings validate the effectiveness of our method, demonstrating accurate gradient estimation and explainability of generated saliency maps. Furthermore, we showcase the scalability of our approach by applying it to explain GPT-Vision, revealing the continued relevance of gradient-based explanation methods in the era of large, closed-source, and black-box models.

Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Builds on 54 of its 80 references that are in the map. First posted on arXiv 22 Mar 2024.

Builds on

54 of 80 references.

References · 54

  1. 2015Deep Residual Learning for Image Recognitioncited by 52,096
  2. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
  3. 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
  4. 2023GPT-4 Technical Reportcited by 18,396
  5. 2014ImageNet Large Scale Visual Recognition Challengecited by 8,498
  6. 2016Densely Connected Convolutional Networkscited by 6,720
  7. 2017Axiomatic Attribution for Deep Networkscited by 3,384
  8. 2016Aggregated Residual Transformations for Deep Neural Networkscited by 2,546
  9. 2015Learning Deep Features for Discriminative Localizationcited by 2,436
  10. 2013Deep Inside Convolutional Networks: Visualising Image Classification Models and Saliency Mapscited by 2,371
  11. 2016Inception-v4, Inception-ResNet and the Impact of Residual Connections on Learningcited by 1,512
  12. 2017SmoothGrad: removing noise by adding noisecited by 1,109
38 more
  1. 2017Grad-CAM++: Improved Visual Explanations for Deep Convolutional Networkscited by 939
  2. 2018RISE: Randomized Input Sampling for Explanation of Black-box Modelscited by 838
  3. 2017ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Modelscited by 666
  4. 2019Explaining Machine Learning Classifiers through Diverse Counterfactual Explanationscited by 614
  5. 2019Score-CAM: Score-Weighted Visual Explanations for Convolutional Neural Networkscited by 582
  6. 2017Evolution Strategies as a Scalable Alternative to Reinforcement Learningcited by 574
  7. 2019A Survey of Deep Learning Techniques for Autonomous Drivingcited by 403
  8. 2019HopSkipJumpAttack: A Query-Efficient Decision-Based Attackcited by 333
  9. 2022From Anecdotal Evidence to Quantitative Evaluation Methods: A Systematic Review on Evaluating Explainable AIcited by 302
  10. 2022From Attribution Maps to Human-Understandable Explanations through Concept Relevance Propagationcited by 141
  11. 2021Benchmarking and Survey of Explanation Methods for Black Box Modelscited by 136
  12. 2018Query-Efficient Hard-label Black-box Attack:An Optimization-based Approachcited by 130
  13. 2019Sign-OPT: A Query-Efficient Hard-label Adversarial Attackcited by 120
  14. 2019Smooth Grad-CAM++: An Enhanced Inference Level Visualization Technique for Deep Convolutional Neural Network Modelscited by 118
  15. 2021Counterfactual Explanations Can Be Manipulatedcited by 113
  16. 2020QEBA: Query-Efficient Boundary-Based Blackbox Attackcited by 104
  17. 2021Guided Integrated Gradients: An Adaptive Path Method for Removing Noisecited by 102
  18. 2019ZO-AdaMM: Zeroth-Order Adaptive Momentum Method for Black-Box Optimizationcited by 76
  19. 2020GeoDA: a geometric framework for black-box adversarial attackscited by 66
  20. 2022A Rigorous Study of Integrated Gradients Method and Extensions to Internal Neuron Attributionscited by 64
  21. 2017Stochastic Zeroth-order Optimization in High Dimensionscited by 63
  22. 2023Structure Invariant Transformation for better Adversarial Transferabilitycited by 62
  23. 2020There and Back Again: Revisiting Backpropagation Saliency Methodscited by 60
  24. 2021Triangle Attack: A Query-efficient Decision-based Adversarial Attackcited by 48
  25. 2019Gradientless Descent: High-Dimensional Zeroth-Order Optimizationcited by 43
  26. 2020Autonomous Driving with Deep Learning: A Survey of State-of-Art Technologiescited by 41
  27. 2021How to Certify Machine Learning Based Safety-critical Systems? A Systematic Literature Reviewcited by 39
  28. 2018Safely Entering the Deep: A Review of Verification and Validation for Machine Learning and a Challenge Elicitation in the Automotive Industrycited by 38
  29. 2017Google's Cloud Vision API Is Not Robust To Noisecited by 37
  30. 2023Diversifying the High-level Features for better Adversarial Transferabilitycited by 34
  31. 2020What Do You See? Evaluation of Explainable Artificial Intelligence (XAI) Interpretability through Neural Backdoorscited by 32
  32. 2016Gradients of Counterfactualscited by 31
  33. 2019Contrasting Exploration in Parameter and Action Space: A Zeroth-Order Optimization Perspectivecited by 27
  34. 2021F-CAM: Full Resolution Class Activation Maps via Guided Parametric Upscalingcited by 26
  35. 2020An Explainable Machine Learning Model for Early Detection of Parkinson's Disease using LIME on DaTscan Imagerycited by 25
  36. 2016A Comprehensive Analysis of Deep Learning Based Representation for Face Recognitioncited by 23
  37. 2021Zeroth order optimization with orthogonal random directionscited by 21
  38. 2020iGOS++: Integrated Gradient Optimized Saliency by Bilateral Perturbationscited by 19

50 most cited of 54 All 54 (JSON)

Built on by

Cited by year

Citing papers per year: 2024: 2.

2 papers.