The Perceived Fragility of Explanations in Audio Models: Manipulation of Attribution with Unchanged Predictions
Piotr Kitłowski, Dominik Wiącek, Mateusz Modrzejewski
Abstract
This paper investigates the fragility of post-hoc explanation methods in audio deepfake detection. While previous work on explanation manipulation focused on images using standard $L_p$ metrics, we introduce a psychoacoustic framework that optimizes inaudible perturbations to decouple model attributions from final classifications. We evaluate this vulnerability across state-of-the-art architectures under strict prediction-preserving constraints. By evaluating the manipulation cost through domain-specific perceptual audio quality metrics alongside explanation alignment criteria, our framework demonstrates that an adversary can systematically distort automated explanation heatmaps while preserving the predicted deepfake label. Full code available at: https://github.com/cncPomper/Audio-XAI
Topics
Classified with taxonomy v2 on Sat, 5 Sept 2026.