ExplainableGuard: Interpretable Adversarial Defense for Large Language Models Using Chain-of-Thought Reasoning
On the map: LLM reasoning → Reasoning for agents, planning and code
Abstract (arXiv)
Large Language Models (LLMs) are increasingly vulnerable to adversarial attacks that can subtly manipulate their outputs. While various defense mechanisms have been proposed, many operate as black boxes, lacking transparency in their decision-making. This paper introduces ExplainableGuard, an interpretable adversarial defense framework leveraging the chain-of-thought (CoT) reasoning capabilities of DeepSeek-Reasoner. Our approach not only detects and neutralizes adversarial perturbations in text but also provides step-by-step explanations for each defense action. We demonstrate how tailored CoT prompts guide the LLM to perform a multi-faceted analysis (character, word, structural, and semantic) and generate a purified output along with a human-readable justification. Preliminary results on the GLUE Benchmark and IMDB Movie Reviews dataset show promising defense efficacy. Additionally, a human evaluation study reveals that ExplainableGuard's explanations outperform ablated variants in clarity, specificity, and actionability, with a 72.5% deployability-trust rating, underscoring its potential for more trustworthy LLM deployments.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Reasoning for agents, planning and code, one of 17 directions in LLM reasoning. Builds on 10 of its 25 references that are in the map. First posted on arXiv 15 Nov 2025.
Builds on
10 of 25 references.
References · 10
- 2023GPT-4 Technical Reportcited by 18,396
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,459
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2018GLUE: A Multi-Task Benchmark and Analysis Platform for Natural Language Understandingcited by 4,899
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
- 2023An LLM can Fool Itself: A Prompt-Based Adversarial Attackcited by 116
- 2023AttentionViz: A Global View of Transformer Attentioncited by 50
- 2024Large Language Model Sentinel: LLM Agent for Adversarial Purificationcited by 10
- 2023Adversarial Attacks and Defenses in Machine Learning-Powered Networks: A Contemporary Surveycited by 5
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2025AprielGuard
- 2025Turning Logic Against Itself : Probing Model Defenses Through Contrastive Questions
- 2026RedVisor: Reasoning-Aware Prompt Injection Defense via Zero-Copy KV Cache Reuse
- 2025Chain-of-Thought Driven Adversarial Scenario Extrapolation for Robust Language Models
- 2026Critical-CoT: A Robust Defense Framework against Reasoning-Level Backdoor Attacks in Large Language Models
- 2025Attack and defense techniques in large language models: A survey and new perspectives
- 2024Towards Assurance of LLM Adversarial Robustness using Ontology-Driven Argumentation
- 2026Mechanistic Interpretability of LLM Jailbreaks via Internal Attribution Graphs