A Backdoor-based Explainable AI Benchmark for High Fidelity Evaluation of Attributions
Not on the map. Why?
Abstract (arXiv)
Attribution methods compute importance scores for input features to explain model predictions. However, assessing the faithfulness of these methods remains challenging due to the absence of attribution ground truth to model predictions. In this work, we first identify a set of fidelity criteria that reliable benchmarks for attribution methods are expected to fulfill, thereby facilitating a systematic assessment of attribution benchmarks. Next, we introduce a Backdoor-based eXplainable AI benchmark (BackX) that adheres to the desired fidelity criteria. We theoretically establish the superiority of our approach over the existing benchmarks for well-founded attribution evaluation. With extensive analysis, we further establish a standardized evaluation setup that mitigates confounding factors such as post-processing techniques and explained predictions, thereby ensuring a fair and consistent benchmarking. This setup is ultimately employed for a comprehensive comparison of existing methods using BackX. Finally, our analysis also offers insights into defending against neural Trojans by utilizing the attributions.
Key facts. Cited by 2 papers in the map (data through 7 Oct 2026). Builds on 46 of its 66 references that are in the map. First posted on arXiv 2 May 2024.
Builds on
46 of 66 references.
References · 46
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
- 2015Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networkscited by 9,617
- 2014ImageNet Large Scale Visual Recognition Challengecited by 8,441
- 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,690
- 2017A Unified Approach to Interpreting Model Predictionscited by 6,488
- 2013Intriguing properties of neural networkscited by 5,114
- 2016"Why Should I Trust You?": Explaining the Predictions of Any Classifiercited by 5,040
- 2018MobileNetV2: Inverted Residuals and Linear Bottleneckscited by 4,773
- 2017Axiomatic Attribution for Deep Networkscited by 3,350
- 2015Learning Deep Features for Discriminative Localizationcited by 2,430
34 more
- 2013Deep Inside Convolutional Networks: Visualising Image Classification Models and Saliency Mapscited by 2,348
- 2013Visualizing and Understanding Convolutional Networkscited by 2,278
- 2017Learning Important Features Through Propagating Activation Differencescited by 1,454
- 2018Sanity Checks for Saliency Mapscited by 1,149
- 2017SmoothGrad: removing noise by adding noisecited by 1,097
- 2017Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoningcited by 1,012
- 2014Striving for Simplicity: The All Convolutional Netcited by 983
- 2018RISE: Randomized Input Sampling for Explanation of Black-box Modelscited by 825
- 2017Interpretable Explanations of Black Boxes by Meaningful Perturbationcited by 611
- 2016Ups and Downs: Modeling the Visual Evolution of Fashion Trends with One-Class Collaborative Filteringcited by 517
- 2018A Benchmark for Interpretability Methods in Deep Neural Networkscited by 467
- 2015Evaluating the visualization of what a Deep Neural Network has learnedcited by 416
- 2019A Survey on Explainable Artificial Intelligence (XAI): Towards Medical XAIcited by 403
- 2020Invisible Backdoor Attack with Sample-Specific Triggerscited by 338
- 2016Top-down Neural Attention by Excitation Backpropcited by 318
- 2019On the (In)fidelity and Sensitivity for Explanationscited by 309
- 2019Label-Consistent Backdoor Attackscited by 285
- 2019A new Backdoor Attack in CNNs by training set corruption without label poisoningcited by 237
- 2016Layer-wise Relevance Propagation for Neural Networks with Local Renormalization Layerscited by 197
- 2019Full-Gradient Representation for Neural Network Visualizationcited by 189
- 2020Eigen-CAM: Class Activation Map using Principal Componentscited by 188
- 2018SentiNet: Detecting Localized Universal Attacks Against Deep Learning Systemscited by 148
- 2020Ground Truth Evaluation of Neural Network Explanations with CLEVR-XAIcited by 125
- 2022A Consistent and Efficient Evaluation Strategy for Attribution Methodscited by 100
- 2022A Unified Evaluation of Textual Backdoor Learning: Frameworks and Benchmarkscited by 70
- 2015A Review of Feature Selection Methods Based on Mutual Informationcited by 67
- 2021Do Input Gradients Highlight Discriminative Features?cited by 52
- 2019NeuronInspect: Detecting Backdoors in Neural Networks via Output Explanationscited by 49
- 2021An Overview of Backdoor Attacks Against Deep Neural Networks and Possible Defencescited by 41
- 2022Making Sense of Dependence: Efficient Black-box Explanations Using Dependence Measurecited by 33
- 2020What Do You See? Evaluation of Explainable Artificial Intelligence (XAI) Interpretability through Neural Backdoorscited by 32
- 2022Towards Better Understanding Attribution Methodscited by 28
- 2023Defending against Insertion-based Textual Backdoor Attacks via Attributioncited by 24
- 2022Do Explanations Explain? Model Knows Bestcited by 20
Built on by
Citing papers per year: 2024: 2.
2 papers.