Abstract:Despite the recent advances in a wide spectrum of applications, machine learning models, especially deep neural networks, have been shown to be vulnerable to adversarial attacks. Attackers add carefully-crafted perturbations to input, where the perturbations are almost imperceptible to humans, but can cause models to make wrong predictions. Techniques to protect models against adversarial input are called adversarial defense methods. Although many approaches have been proposed to study adversarial attacks and defenses in different scenarios, an intriguing and crucial challenge remains that how to really understand model vulnerability? Inspired by the saying that "if you know yourself and your enemy, you need not fear the battles", we may tackle the aforementioned challenge after interpreting machine learning models to open the black-boxes. The goal of model interpretation, or interpretable machine learning, is to extract human-understandable terms for the working mechanism of models. Recently, some approaches start incorporating interpretation into the exploration of adversarial attacks and defenses. Meanwhile, we also observe that many existing methods of adversarial attacks and defenses, although not explicitly claimed, can be understood from the perspective of interpretation. In this paper, we review recent work on adversarial attacks and defenses, particularly from the perspective of machine learning interpretation. We categorize interpretation into two types, feature-level interpretation and model-level interpretation. For each type of interpretation, we elaborate on how it could be used for adversarial attacks and defenses. We then briefly illustrate additional correlations between interpretation and adversaries. Finally, we discuss the challenges and future directions along tackling adversary issues with interpretation.

Adversarial Attack and Interpretability of the Deep Neural Net-Work from the Geometric Perspective

Fooling Neural Network Interpretations - Adversarial Noise to Attack Images.

Adversarial Attacks and Defenses: An Interpretation Perspective

Understanding and Diagnosing Vulnerability under Adversarial Attacks

Interpretable Deep Learning under Fire

Interpreting Adversarial Examples in Deep Learning: A Review

Geometrization of deep networks for the interpretability of deep learning systems

Towards Interpretable Deep Neural Networks by Leveraging Adversarial Examples

An Empirical Study on the Relation between Network Interpretability and Adversarial Robustness

Interpretations Cannot Be Trusted: Stealthy and Effective Adversarial Perturbations against Interpretable Deep Learning

Proper Network Interpretability Helps Adversarial Robustness in Classification

Adversarial Attacks and Defenses in Deep Learning: From a Perspective of Cybersecurity

Defense Against Adversarial Attacks via Controlling Gradient Leaking on Embedded Manifolds

Adversarial Attack? Don't Panic

Understanding Adversarial Robustness Against On-manifold Adversarial Examples

Improving the Adversarial Robustness and Interpretability of Deep Neural Networks by Regularizing Their Input Gradients

Visual Interpretability forDeepLearning

Interpreting and Evaluating Neural Network Robustness

A Survey of Adversarial Attacks on Deep Neural Network in Computer Vision

Interpretation of Neural Networks Is Fragile

Toward Transparent AI: A Survey on Interpreting the Inner Structures of Deep Neural Networks