mlsanityData to 7 Oct 2026

A Backdoor-based Explainable AI Benchmark for High Fidelity Evaluation of Attributions

arXiv 2405.02344 ↗First posted 2 May 2024cs.CR cs.AI cs.LGcited by 2

Not on the map. Why?

Abstract (arXiv)

Attribution methods compute importance scores for input features to explain model predictions. However, assessing the faithfulness of these methods remains challenging due to the absence of attribution ground truth to model predictions. In this work, we first identify a set of fidelity criteria that reliable benchmarks for attribution methods are expected to fulfill, thereby facilitating a systematic assessment of attribution benchmarks. Next, we introduce a Backdoor-based eXplainable AI benchmark (BackX) that adheres to the desired fidelity criteria. We theoretically establish the superiority of our approach over the existing benchmarks for well-founded attribution evaluation. With extensive analysis, we further establish a standardized evaluation setup that mitigates confounding factors such as post-processing techniques and explained predictions, thereby ensuring a fair and consistent benchmarking. This setup is ultimately employed for a comprehensive comparison of existing methods using BackX. Finally, our analysis also offers insights into defending against neural Trojans by utilizing the attributions.

Key facts. Cited by 2 papers in the map (data through 7 Oct 2026). Builds on 46 of its 66 references that are in the map. First posted on arXiv 2 May 2024.

Builds on

46 of 66 references.

References · 46

  1. 2015Deep Residual Learning for Image Recognitioncited by 51,809
  2. 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
  3. 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
  4. 2015Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networkscited by 9,617
  5. 2014ImageNet Large Scale Visual Recognition Challengecited by 8,441
  6. 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,690
  7. 2017A Unified Approach to Interpreting Model Predictionscited by 6,488
  8. 2013Intriguing properties of neural networkscited by 5,114
  9. 2016"Why Should I Trust You?": Explaining the Predictions of Any Classifiercited by 5,040
  10. 2018MobileNetV2: Inverted Residuals and Linear Bottleneckscited by 4,773
  11. 2017Axiomatic Attribution for Deep Networkscited by 3,350
  12. 2015Learning Deep Features for Discriminative Localizationcited by 2,430
34 more
  1. 2013Deep Inside Convolutional Networks: Visualising Image Classification Models and Saliency Mapscited by 2,348
  2. 2013Visualizing and Understanding Convolutional Networkscited by 2,278
  3. 2017Learning Important Features Through Propagating Activation Differencescited by 1,454
  4. 2018Sanity Checks for Saliency Mapscited by 1,149
  5. 2017SmoothGrad: removing noise by adding noisecited by 1,097
  6. 2017Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoningcited by 1,012
  7. 2014Striving for Simplicity: The All Convolutional Netcited by 983
  8. 2018RISE: Randomized Input Sampling for Explanation of Black-box Modelscited by 825
  9. 2017Interpretable Explanations of Black Boxes by Meaningful Perturbationcited by 611
  10. 2016Ups and Downs: Modeling the Visual Evolution of Fashion Trends with One-Class Collaborative Filteringcited by 517
  11. 2018A Benchmark for Interpretability Methods in Deep Neural Networkscited by 467
  12. 2015Evaluating the visualization of what a Deep Neural Network has learnedcited by 416
  13. 2019A Survey on Explainable Artificial Intelligence (XAI): Towards Medical XAIcited by 403
  14. 2020Invisible Backdoor Attack with Sample-Specific Triggerscited by 338
  15. 2016Top-down Neural Attention by Excitation Backpropcited by 318
  16. 2019On the (In)fidelity and Sensitivity for Explanationscited by 309
  17. 2019Label-Consistent Backdoor Attackscited by 285
  18. 2019A new Backdoor Attack in CNNs by training set corruption without label poisoningcited by 237
  19. 2016Layer-wise Relevance Propagation for Neural Networks with Local Renormalization Layerscited by 197
  20. 2019Full-Gradient Representation for Neural Network Visualizationcited by 189
  21. 2020Eigen-CAM: Class Activation Map using Principal Componentscited by 188
  22. 2018SentiNet: Detecting Localized Universal Attacks Against Deep Learning Systemscited by 148
  23. 2020Ground Truth Evaluation of Neural Network Explanations with CLEVR-XAIcited by 125
  24. 2022A Consistent and Efficient Evaluation Strategy for Attribution Methodscited by 100
  25. 2022A Unified Evaluation of Textual Backdoor Learning: Frameworks and Benchmarkscited by 70
  26. 2015A Review of Feature Selection Methods Based on Mutual Informationcited by 67
  27. 2021Do Input Gradients Highlight Discriminative Features?cited by 52
  28. 2019NeuronInspect: Detecting Backdoors in Neural Networks via Output Explanationscited by 49
  29. 2021An Overview of Backdoor Attacks Against Deep Neural Networks and Possible Defencescited by 41
  30. 2022Making Sense of Dependence: Efficient Black-box Explanations Using Dependence Measurecited by 33
  31. 2020What Do You See? Evaluation of Explainable Artificial Intelligence (XAI) Interpretability through Neural Backdoorscited by 32
  32. 2022Towards Better Understanding Attribution Methodscited by 28
  33. 2023Defending against Insertion-based Textual Backdoor Attacks via Attributioncited by 24
  34. 2022Do Explanations Explain? Model Knows Bestcited by 20

Built on by

Cited by year

Citing papers per year: 2024: 2.

2 papers.