Pixel-level Certified Explanations via Randomized Smoothing

Fuente: arXiv
Salvato in:
Dettagli Bibliografici
Autori principali: Anani, Alaa, Lorenz, Tobias, Fritz, Mario, Schiele, Bernt
Natura: Preprint
Pubblicazione: 2025
Soggetti:
Accesso online:
Tags: Aggiungi Tag
Nessun Tag, puoi essere il primo ad aggiungerne!!
_version_ 1866908412807217152
author Anani, Alaa
Lorenz, Tobias
Fritz, Mario
Schiele, Bernt
author_facet Anani, Alaa
Lorenz, Tobias
Fritz, Mario
Schiele, Bernt
contents Post-hoc attribution methods aim to explain deep learning predictions by highlighting influential input pixels. However, these explanations are highly non-robust: small, imperceptible input perturbations can drastically alter the attribution map while maintaining the same prediction. This vulnerability undermines their trustworthiness and calls for rigorous robustness guarantees of pixel-level attribution scores. We introduce the first certification framework that guarantees pixel-level robustness for any black-box attribution method using randomized smoothing. By sparsifying and smoothing attribution maps, we reformulate the task as a segmentation problem and certify each pixel's importance against $\ell_2$-bounded perturbations. We further propose three evaluation metrics to assess certified robustness, localization, and faithfulness. An extensive evaluation of 12 attribution methods across 5 ImageNet models shows that our certified attributions are robust, interpretable, and faithful, enabling reliable use in downstream tasks. Our code is at https://github.com/AlaaAnani/certified-attributions.
format Preprint
id arxiv_https___arxiv_org_abs_2506_15499
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle Pixel-level Certified Explanations via Randomized Smoothing
Anani, Alaa
Lorenz, Tobias
Fritz, Mario
Schiele, Bernt
Machine Learning
Artificial Intelligence
Computer Vision and Pattern Recognition
Post-hoc attribution methods aim to explain deep learning predictions by highlighting influential input pixels. However, these explanations are highly non-robust: small, imperceptible input perturbations can drastically alter the attribution map while maintaining the same prediction. This vulnerability undermines their trustworthiness and calls for rigorous robustness guarantees of pixel-level attribution scores. We introduce the first certification framework that guarantees pixel-level robustness for any black-box attribution method using randomized smoothing. By sparsifying and smoothing attribution maps, we reformulate the task as a segmentation problem and certify each pixel's importance against $\ell_2$-bounded perturbations. We further propose three evaluation metrics to assess certified robustness, localization, and faithfulness. An extensive evaluation of 12 attribution methods across 5 ImageNet models shows that our certified attributions are robust, interpretable, and faithful, enabling reliable use in downstream tasks. Our code is at https://github.com/AlaaAnani/certified-attributions.
title Pixel-level Certified Explanations via Randomized Smoothing
topic Machine Learning
Artificial Intelligence
Computer Vision and Pattern Recognition
url https://arxiv.org/abs/2506.15499