Explaining to defend: SHAP-based defense mechanism against adversarial attacks in P2P credit risk

• SHAP-based mechanism detects adversarial attacks in P2P credit risk models. • Dynamic model switching preserves accuracy while boosting adversarial robustness. • We combine explainability and defense to secure AI-driven credit scoring systems. Peer-to-peer (P2P) lending platforms, much like traditional financial institutions, rely heavily on credit risk assessment models to estimate the likelihood of borrower default. With the increasing integration of Artificial Intelligence (AI), particularly Machine Learning (ML), these institutions have embraced neural networks to enhance predictive performance. However, this technological shift introduces a critical vulnerability: susceptibility to adversarial attacks, intentional perturbations in input data designed to mislead ML models. This paper evaluates how such adversarial manipulations affect the reliability of neural network-based credit risk models in P2P lending and proposes a defense framework to mitigate these risks. Specifically, we develop and test a dual defense strategy combining adversarial training with a novel SHAP-based model-switching mechanism. The adversarial training improves resilience under attack but slightly reduces accuracy on clean data, whereas the SHAP-based switch compensates for this loss by detecting and redirecting perturbed inputs to a robust classifier. Compared to adversarial training alone, the proposed SHAP-based defense improves ROC AUC by +0.0541 on clean data while maintaining identical robustness under attack, demonstrating its superior ability to balance predictive performance and security. This quantitative gain highlights the efficiency of our hybrid defense relative to traditional single-model approaches. Experimental results show that the proposed approach preserves predictive accuracy on raw inputs while maintaining robustness against adversarial perturbations. Overall, our findings highlight a practical pathway toward building interpretable and secure AI-driven credit scoring systems for digital lending platforms.

Authors

Institutions

Publication Details

Journal
Expert Systems with Applications
Published
2025-11-22
DOI
https://doi.org/10.1016/j.eswa.2025.130432
Primary Topic
Adversarial Robustness in Machine Learning
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

Explaining to defend: SHAP-based defense mechanism against adversarial attacks in P2P credit risk

Jiří Straus, Vladimir Andreev, Marcos Machado, Thomas Sepanosian et al.
Expert Systems with Applications
Adversarial Robustness in Machine Learning
article

Explaining to defend: SHAP-based defense mechanism against adversarial attacks in P2P credit risk

Jiří Straus, Vladimir Andreev, Marcos Machado, Thomas Sepanosian, Tijn Koeleman
article en

Abstract

• SHAP-based mechanism detects adversarial attacks in P2P credit risk models. • Dynamic model switching preserves accuracy while boosting adversarial robustness. • We combine explainability and defense to secure AI-driven credit scoring systems. Peer-to-peer (P2P) lending platforms, much like traditional financial institutions, rely heavily on credit risk assessment models to estimate the likelihood of borrower default. With the increasing integration of Artificial Intelligence (AI), particularly Machine Learning (ML), these institutions have embraced neural networks to enhance predictive performance. However, this technological shift introduces a critical vulnerability: susceptibility to adversarial attacks, intentional perturbations in input data designed to mislead ML models. This paper evaluates how such adversarial manipulations affect the reliability of neural network-based credit risk models in P2P lending and proposes a defense framework to mitigate these risks. Specifically, we develop and test a dual defense strategy combining adversarial training with a novel SHAP-based model-switching mechanism. The adversarial training improves resilience under attack but slightly reduces accuracy on clean data, whereas the SHAP-based switch compensates for this loss by detecting and redirecting perturbed inputs to a robust classifier. Compared to adversarial training alone, the proposed SHAP-based defense improves ROC AUC by +0.0541 on clean data while maintaining identical robustness under attack, demonstrating its superior ability to balance predictive performance and security. This quantitative gain highlights the efficiency of our hybrid defense relative to traditional single-model approaches. Experimental results show that the proposed approach preserves predictive accuracy on raw inputs while maintaining robustness against adversarial perturbations. Overall, our findings highlight a practical pathway toward building interpretable and secure AI-driven credit scoring systems for digital lending platforms.

Expert Systems with ApplicationsVol. 301
University of Twente (NL)
Openalex Percentile: Top 81%
Adversarial Robustness in Machine Learning
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.