Unifying Image Counterfactuals and Feature Attributions with Latent-Space Adversarial Attacks

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Goldwasser, Jeremy, Hooker, Giles
Format: Preprint
Published: 2025
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866912340452048896
author Goldwasser, Jeremy
Hooker, Giles
author_facet Goldwasser, Jeremy
Hooker, Giles
contents Counterfactuals are a popular framework for interpreting machine learning predictions. These what if explanations are notoriously challenging to create for computer vision models: standard gradient-based methods are prone to produce adversarial examples, in which imperceptible modifications to image pixels provoke large changes in predictions. We introduce a new, easy-to-implement framework for counterfactual images that can flexibly adapt to contemporary advances in generative modeling. Our method, Counterfactual Attacks, resembles an adversarial attack on the representation of the image along a low-dimensional manifold. In addition, given an auxiliary dataset of image descriptors, we show how to accompany counterfactuals with feature attribution that quantify the changes between the original and counterfactual images. These importance scores can be aggregated into global counterfactual explanations that highlight the overall features driving model predictions. While this unification is possible for any counterfactual method, it has particular computational efficiency for ours. We demonstrate the efficacy of our approach with the MNIST and CelebA datasets.
format Preprint
id arxiv_https___arxiv_org_abs_2504_15479
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle Unifying Image Counterfactuals and Feature Attributions with Latent-Space Adversarial Attacks
Goldwasser, Jeremy
Hooker, Giles
Machine Learning
Computer Vision and Pattern Recognition
Counterfactuals are a popular framework for interpreting machine learning predictions. These what if explanations are notoriously challenging to create for computer vision models: standard gradient-based methods are prone to produce adversarial examples, in which imperceptible modifications to image pixels provoke large changes in predictions. We introduce a new, easy-to-implement framework for counterfactual images that can flexibly adapt to contemporary advances in generative modeling. Our method, Counterfactual Attacks, resembles an adversarial attack on the representation of the image along a low-dimensional manifold. In addition, given an auxiliary dataset of image descriptors, we show how to accompany counterfactuals with feature attribution that quantify the changes between the original and counterfactual images. These importance scores can be aggregated into global counterfactual explanations that highlight the overall features driving model predictions. While this unification is possible for any counterfactual method, it has particular computational efficiency for ours. We demonstrate the efficacy of our approach with the MNIST and CelebA datasets.
title Unifying Image Counterfactuals and Feature Attributions with Latent-Space Adversarial Attacks
topic Machine Learning
Computer Vision and Pattern Recognition
url https://arxiv.org/abs/2504.15479