ATEX-CF: Attack-Informed Counterfactual Explanations for Graph Neural Networks
Not on the map. Why?
Abstract (arXiv)
Counterfactual explanations offer an intuitive way to interpret graph neural networks (GNNs) by identifying minimal changes that alter a model's prediction, thereby answering "what must differ for a different outcome?". In this work, we propose a novel framework, ATEX-CF that unifies adversarial attack techniques with counterfactual explanation generation-a connection made feasible by their shared goal of flipping a node's prediction, yet differing in perturbation strategy: adversarial attacks often rely on edge additions, while counterfactual methods typically use deletions. Unlike traditional approaches that treat explanation and attack separately, our method efficiently integrates both edge additions and deletions, grounded in theory, leveraging adversarial insights to explore impactful counterfactuals. In addition, by jointly optimizing fidelity, sparsity, and plausibility under a constrained perturbation budget, our method produces instance-level explanations that are both informative and realistic. Experiments on synthetic and real-world node classification benchmarks demonstrate that ATEX-CF generates faithful, concise, and plausible explanations, highlighting the effectiveness of integrating adversarial insights into counterfactual reasoning for GNNs.
Key facts. Cited by 2 papers in the map (data through 7 Oct 2026). Builds on 46 of its 58 references that are in the map. First posted on arXiv 5 Feb 2026.
Builds on
46 of 58 references.
References · 46
- 2016Semi-Supervised Classification with Graph Convolutional Networkscited by 11,282
- 2017Graph Attention Networkscited by 8,854
- 2020Open Graph Benchmark: Datasets for Machine Learning on Graphscited by 2,148
- 2013Estimating or Propagating Gradients Through Stochastic Neurons for Conditional Computationcited by 2,031
- 2017Counterfactual Explanations without Opening the Black Box: Automated Decisions and the GDPRcited by 1,086
- 2020Geom-GCN: Geometric Graph Convolutional Networkscited by 821
- 2019GNNExplainer: Generating Explanations for Graph Neural Networkscited by 735
- 2019Multi-scale Attributed Node Embeddingcited by 543
- 2020Masked Label Prediction: Unified Message Passing Model for Semi-Supervised Classificationcited by 500
- 2020Parameterized Explainer for Graph Neural Networkcited by 423
- 2018Adversarial Attacks on Neural Networks for Graph Datacited by 395
- 2020Explainability in Graph Neural Networks: A Taxonomic Surveycited by 383
34 more
- 2018Adversarial Attack and Defense on Graph Data: A Surveycited by 166
- 2020Multi-Objective Counterfactual Explanationscited by 157
- 2021CF-GNNExplainer: Counterfactual Explanations for Graph Neural Networkscited by 118
- 2021Robustness of Graph Neural Networks at Scalecited by 100
- 2022Evaluating Explainability for Graph Neural Networkscited by 85
- 2022Learning and Evaluating Graph Neural Network Explanations based on Counterfactual and Factual Reasoningcited by 78
- 2020Towards More Practical Adversarial Attacks on Graph Neural Networkscited by 76
- 2021Robust Counterfactual Explanations on Graph Neural Networkscited by 72
- 2019A Restricted Black-box Adversarial Framework Towards Attacking Graph Embedding Modelscited by 68
- 2021TDGIA:Effective Injection Attacks on Graph Neural Networkscited by 67
- 2018Fast Gradient Attack on Network Embeddingcited by 65
- 2018Learning-based Efficient Graph Similarity Computation via Multi-Scale Convolutional Set Matchingcited by 45
- 2020The Intriguing Relation Between Counterfactual Explanations and Adversarial Examplescited by 44
- 2020Adversarial Attack on Large Scale Graphcited by 39
- 2022Explaining the Explainers in Graph Neural Networks: a Comparative Studycited by 34
- 2021Counterfactual Graphs for Explainable Classification of Brain Networkscited by 33
- 2022Global Counterfactual Explainer for Graph Neural Networkscited by 30
- 2022A Survey on Graph Counterfactual Explanations: Definitions, Methods, Evaluation, and Research Challengescited by 30
- 2023A Survey on Privacy in Graph Neural Networks: Attacks, Preservation, and Applicationscited by 22
- 2021Jointly Attacking Graph Neural Network and its Explanationscited by 18
- 2024Graph Neural Network Explanations are Fragilecited by 18
- 2022On the Probability of Necessity and Sufficiency of Explaining Graph Neural Networks: A Lower Bound Optimization Approachcited by 11
- 2021Multi-objective Explanations of GNN Predictionscited by 10
- 2023Simple and Efficient Partial Graph Adversarial Attack: A New Perspectivecited by 8
- 2024View-based Explanations for Graph Neural Networkscited by 8
- 2024ADEdgeDrop: Adversarial Edge Dropping for Robust Graph Neural Networkscited by 7
- 2023Knowledge-augmented Graph Machine Learning for Drug Discovery: A Surveycited by 6
- 2025Provably Robust Explainable Graph Neural Networks against Graph Perturbation Attackscited by 6
- 2024Generating Robust Counterfactual Witnesses for Graph Neural Networkscited by 4
- 2025Robustness questions the interpretability of graph neural networks: what to do?cited by 4
- 2023Counterfactual Explanations for Graph Classification Through the Lenses of Densitycited by 2
- 2024Game-theoretic Counterfactual Explanation for Graph Neural Networkscited by 2
- 2023Explainability-Based Adversarial Attack on Graphs Through Edge Perturbationcited by 1
- 2025Finding Counterfactual Evidences for Node Classificationcited by 1
Built on by
Citing papers per year: 2026: 2.
2 papers.