Pulling Back the Curtain on Deep Networks
Not on the map. Why?
Abstract (arXiv)
In linear models, visualizing a weight vector naturally reveals the model's preferred input direction, but extending this intuition to deep networks via gradients or gradient ascent often yields brittle or adversarial-looking features. We argue that deep networks are better understood as input-conditioned affine operators, whose natural adjoint action pulls a neuron's preferred direction back to input space. We further refine this representation by backward-only softening and iterative enhancement to reconstruct coherent local structures encoded by the target neuron. This provides a unifying perspective on previously disparate ideas such as SmoothGrad, B-cos-style alignment, and Feature Accentuation. The resulting Semantic Pullbacks (SP) generate perceptually aligned, class-conditional post-hoc explanations that emphasize semantically meaningful features, facilitate coherent counterfactual perturbations, and remain theoretically grounded. Across convolutional architectures (ResNet50, VGG) and transformer-based models (PVT), Semantic Pullbacks achieve the best overall trade-off across faithfulness, stability, and target-sensitivity benchmarks, while remaining general, computationally efficient, and readily integrable into existing deep learning pipelines.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 46 of its 53 references that are in the map. First posted on arXiv 30 Jul 2025.
Builds on
46 of 53 references.
References · 46
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,364
- 2015Batch Normalization: Accelerating Deep Network Training by Reducing Internal Covariate Shiftcited by 7,005
- 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,733
- 2017A Unified Approach to Interpreting Model Predictionscited by 6,555
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2013Intriguing properties of neural networkscited by 5,155
- 2016"Why Should I Trust You?": Explaining the Predictions of Any Classifiercited by 5,070
- 2017Axiomatic Attribution for Deep Networkscited by 3,384
- 2013Deep Inside Convolutional Networks: Visualising Image Classification Models and Saliency Mapscited by 2,371
- 2013Visualizing and Understanding Convolutional Networkscited by 2,290
- 2021Pyramid Vision Transformer: A Versatile Backbone for Dense Prediction without Convolutionscited by 1,962
34 more
- 2017Learning Important Features Through Propagating Activation Differencescited by 1,458
- 2023Sparse Autoencoders Find Highly Interpretable Features in Language Modelscited by 1,420
- 2018Sanity Checks for Saliency Mapscited by 1,156
- 2017SmoothGrad: removing noise by adding noisecited by 1,109
- 2018Robustness May Be at Odds with Accuracycited by 880
- 2020Captum: A unified and generic model interpretability library for PyTorchcited by 547
- 2018Towards Robust Interpretability with Self-Explaining Neural Networkscited by 505
- 2017Interpretation of Neural Networks is Fragilecited by 444
- 2014Understanding Deep Image Representations by Inverting Themcited by 403
- 2018How Does Batch Normalization Help Optimization?cited by 357
- 2019On the (In)fidelity and Sensitivity for Explanationscited by 310
- 2016Not Just a Black Box: Learning Important Features Through Propagating Activation Differencescited by 297
- 2019Explanations can be manipulated and geometry is to blamecited by 216
- 2013k-Sparse Autoencoderscited by 215
- 2020Evaluating and Aggregating Feature-based Model Explanationscited by 188
- 2022Quantus: An Explainable AI Toolkit for Responsible Evaluation of Neural Network Explanations and Beyondcited by 171
- 2019Fooling Neural Network Interpretations via Adversarial Model Manipulationcited by 112
- 2019When Explanations Lie: Why Many Modified BP Attributions Failcited by 92
- 2020On quantitative aspects of model interpretabilitycited by 71
- 2023Adversarial attacks and defenses in explainable artificial intelligence: A surveycited by 48
- 2019Are Perceptually-Aligned Gradients a General Property of Robust Classifiers?cited by 43
- 2023Don't trust your eyes: on the (un)reliability of feature visualizationscited by 32
- 2023B-cos Alignment for Inherently Interpretable CNNs and Vision Transformerscited by 31
- 2021NoiseGrad: Enhancing Explanations by Introducing Stochasticity to Model Weightscited by 28
- 2021How Well do Feature Visualizations Support Causal Understanding of CNN Activations?cited by 28
- 2025Interpretable and Testable Vision Features via Sparse Autoencoderscited by 25
- 2023Which Models have Perceptually-Aligned Gradients? An Explanation via Off-Manifold Robustnesscited by 20
- 2024B-cosification: Transforming Deep Neural Networks to be Inherently Interpretablecited by 12
- 2020Neural Path Features and Neural Path Kernel : Understanding the role of gates in deep learningcited by 8
- 2025The Resurrection of the ReLUcited by 6
- 2024Feature Accentuation: Revealing 'What' Features Respond to in Natural Imagescited by 5
- 2025B-cos LM: Efficiently Transforming Pre-trained Language Models for Improved Explainabilitycited by 4
- 2024Flexible and Efficient Surrogate Gradient Modeling with Forward Gradient Injectioncited by 2
- 2024Leaky ReLUs That Differ in Forward and Backward Pass Facilitate Activation Maximization in Deep Neural Networkscited by 2
Built on by
Not cited yet.