Forward Learning for Gradient-based Black-box Saliency Map Generation
Not on the map. Why?
Abstract (arXiv)
Gradient-based saliency maps are widely used to explain deep neural network decisions. However, as models become deeper and more black-box, such as in closed-source APIs like ChatGPT, computing gradients become challenging, hindering conventional explanation methods. In this work, we introduce a novel unified framework for estimating gradients in black-box settings and generating saliency maps to interpret model decisions. We employ the likelihood ratio method to estimate output-to-input gradients and utilize them for saliency map generation. Additionally, we propose blockwise computation techniques to enhance estimation accuracy. Extensive experiments in black-box settings validate the effectiveness of our method, demonstrating accurate gradient estimation and explainability of generated saliency maps. Furthermore, we showcase the scalability of our approach by applying it to explain GPT-Vision, revealing the continued relevance of gradient-based explanation methods in the era of large, closed-source, and black-box models.
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Builds on 54 of its 80 references that are in the map. First posted on arXiv 22 Mar 2024.
Builds on
54 of 80 references.
References · 54
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
- 2023GPT-4 Technical Reportcited by 18,396
- 2014ImageNet Large Scale Visual Recognition Challengecited by 8,498
- 2016Densely Connected Convolutional Networkscited by 6,720
- 2017Axiomatic Attribution for Deep Networkscited by 3,384
- 2016Aggregated Residual Transformations for Deep Neural Networkscited by 2,546
- 2015Learning Deep Features for Discriminative Localizationcited by 2,436
- 2013Deep Inside Convolutional Networks: Visualising Image Classification Models and Saliency Mapscited by 2,371
- 2016Inception-v4, Inception-ResNet and the Impact of Residual Connections on Learningcited by 1,512
- 2017SmoothGrad: removing noise by adding noisecited by 1,109
38 more
- 2017Grad-CAM++: Improved Visual Explanations for Deep Convolutional Networkscited by 939
- 2018RISE: Randomized Input Sampling for Explanation of Black-box Modelscited by 838
- 2017ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Modelscited by 666
- 2019Explaining Machine Learning Classifiers through Diverse Counterfactual Explanationscited by 614
- 2019Score-CAM: Score-Weighted Visual Explanations for Convolutional Neural Networkscited by 582
- 2017Evolution Strategies as a Scalable Alternative to Reinforcement Learningcited by 574
- 2019A Survey of Deep Learning Techniques for Autonomous Drivingcited by 403
- 2019HopSkipJumpAttack: A Query-Efficient Decision-Based Attackcited by 333
- 2022From Anecdotal Evidence to Quantitative Evaluation Methods: A Systematic Review on Evaluating Explainable AIcited by 302
- 2022From Attribution Maps to Human-Understandable Explanations through Concept Relevance Propagationcited by 141
- 2021Benchmarking and Survey of Explanation Methods for Black Box Modelscited by 136
- 2018Query-Efficient Hard-label Black-box Attack:An Optimization-based Approachcited by 130
- 2019Sign-OPT: A Query-Efficient Hard-label Adversarial Attackcited by 120
- 2019Smooth Grad-CAM++: An Enhanced Inference Level Visualization Technique for Deep Convolutional Neural Network Modelscited by 118
- 2021Counterfactual Explanations Can Be Manipulatedcited by 113
- 2020QEBA: Query-Efficient Boundary-Based Blackbox Attackcited by 104
- 2021Guided Integrated Gradients: An Adaptive Path Method for Removing Noisecited by 102
- 2019ZO-AdaMM: Zeroth-Order Adaptive Momentum Method for Black-Box Optimizationcited by 76
- 2020GeoDA: a geometric framework for black-box adversarial attackscited by 66
- 2022A Rigorous Study of Integrated Gradients Method and Extensions to Internal Neuron Attributionscited by 64
- 2017Stochastic Zeroth-order Optimization in High Dimensionscited by 63
- 2023Structure Invariant Transformation for better Adversarial Transferabilitycited by 62
- 2020There and Back Again: Revisiting Backpropagation Saliency Methodscited by 60
- 2021Triangle Attack: A Query-efficient Decision-based Adversarial Attackcited by 48
- 2019Gradientless Descent: High-Dimensional Zeroth-Order Optimizationcited by 43
- 2020Autonomous Driving with Deep Learning: A Survey of State-of-Art Technologiescited by 41
- 2021How to Certify Machine Learning Based Safety-critical Systems? A Systematic Literature Reviewcited by 39
- 2018Safely Entering the Deep: A Review of Verification and Validation for Machine Learning and a Challenge Elicitation in the Automotive Industrycited by 38
- 2017Google's Cloud Vision API Is Not Robust To Noisecited by 37
- 2023Diversifying the High-level Features for better Adversarial Transferabilitycited by 34
- 2020What Do You See? Evaluation of Explainable Artificial Intelligence (XAI) Interpretability through Neural Backdoorscited by 32
- 2016Gradients of Counterfactualscited by 31
- 2019Contrasting Exploration in Parameter and Action Space: A Zeroth-Order Optimization Perspectivecited by 27
- 2021F-CAM: Full Resolution Class Activation Maps via Guided Parametric Upscalingcited by 26
- 2020An Explainable Machine Learning Model for Early Detection of Parkinson's Disease using LIME on DaTscan Imagerycited by 25
- 2016A Comprehensive Analysis of Deep Learning Based Representation for Face Recognitioncited by 23
- 2021Zeroth order optimization with orthogonal random directionscited by 21
- 2020iGOS++: Integrated Gradient Optimized Saliency by Bilateral Perturbationscited by 19
50 most cited of 54 All 54 (JSON)
Built on by
Citing papers per year: 2024: 2.
2 papers.