On the interplay of Explainability, Privacy and Predictive Performance with Explanation-assisted Model Extraction
Fuente:
arXiv
Saved in:
| Main Authors: | , , , , , |
|---|---|
| Format: | Preprint |
| Published: |
2025
|
| Subjects: | |
| Online Access: | |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866915286624501760 |
|---|---|
| author | Ezzeddine, Fatima Akel, Rinad Sbeity, Ihab Giordano, Silvia Langheinrich, Marc Ayoub, Omran |
| author_facet | Ezzeddine, Fatima Akel, Rinad Sbeity, Ihab Giordano, Silvia Langheinrich, Marc Ayoub, Omran |
| contents | Machine Learning as a Service (MLaaS) has gained important attraction as a means for deploying powerful predictive models, offering ease of use that enables organizations to leverage advanced analytics without substantial investments in specialized infrastructure or expertise. However, MLaaS platforms must be safeguarded against security and privacy attacks, such as model extraction (MEA) attacks. The increasing integration of explainable AI (XAI) within MLaaS has introduced an additional privacy challenge, as attackers can exploit model explanations particularly counterfactual explanations (CFs) to facilitate MEA. In this paper, we investigate the trade offs among model performance, privacy, and explainability when employing Differential Privacy (DP), a promising technique for mitigating CF facilitated MEA. We evaluate two distinct DP strategies: implemented during the classification model training and at the explainer during CF generation. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2505_08847 |
| institution | arXiv |
| publishDate | 2025 |
| record_format | arxiv |
| spellingShingle | On the interplay of Explainability, Privacy and Predictive Performance with Explanation-assisted Model Extraction Ezzeddine, Fatima Akel, Rinad Sbeity, Ihab Giordano, Silvia Langheinrich, Marc Ayoub, Omran Cryptography and Security Artificial Intelligence Machine Learning as a Service (MLaaS) has gained important attraction as a means for deploying powerful predictive models, offering ease of use that enables organizations to leverage advanced analytics without substantial investments in specialized infrastructure or expertise. However, MLaaS platforms must be safeguarded against security and privacy attacks, such as model extraction (MEA) attacks. The increasing integration of explainable AI (XAI) within MLaaS has introduced an additional privacy challenge, as attackers can exploit model explanations particularly counterfactual explanations (CFs) to facilitate MEA. In this paper, we investigate the trade offs among model performance, privacy, and explainability when employing Differential Privacy (DP), a promising technique for mitigating CF facilitated MEA. We evaluate two distinct DP strategies: implemented during the classification model training and at the explainer during CF generation. |
| title | On the interplay of Explainability, Privacy and Predictive Performance with Explanation-assisted Model Extraction |
| topic | Cryptography and Security Artificial Intelligence |
| url | https://arxiv.org/abs/2505.08847 |