Adversarial Attacks and Defenses in Explainable Artificial Intelligence: A Survey
Keywords: interpretability, explainable machine learning, fooling, fairwashing, systemization of knowledge
TL;DR: We survey 50 papers concerning adversarial attacks on explanations of machine learning models and defense mechanisms against these attacks.
Abstract: Explainable artificial intelligence (XAI) methods are portrayed as a remedy for debugging and trusting statistical and deep learning models, as well as interpreting their predictions. However, recent advances in adversarial machine learning highlight the limitations and vulnerabilities of state-of-the-art explanations, putting their security and trustworthiness into question. The possibility of manipulating, fooling or fairwashing evidence of the model's reasoning has detrimental consequences when applied in high-stakes decision-making and knowledge discovery. This *concise survey* of over 50 papers summarizes research concerning adversarial attacks on explanations of machine learning models, as well as fairness metrics. We discuss how to defend against attacks and design robust interpretation methods. We contribute a list of existing insecurities in XAI and outline the emerging research directions in adversarial XAI (AdvXAI).
Submission Number: 8
Loading