DeepTest: Automated Testing of Deep-Neural-Network-driven Autonomous Cars
Not on the map. Why?
Abstract (arXiv)
Recent advances in Deep Neural Networks (DNNs) have led to the development of DNN-driven autonomous cars that, using sensors like camera, LiDAR, etc., can drive without any human intervention. Most major manufacturers including Tesla, GM, Ford, BMW, and Waymo/Google are working on building and testing different types of autonomous vehicles. The lawmakers of several US states including California, Texas, and New York have passed new legislation to fast-track the process of testing and deployment of autonomous vehicles on their roads. However, despite their spectacular progress, DNNs, just like traditional software, often demonstrate incorrect or unexpected corner case behaviors that can lead to potentially fatal collisions. Several such real-world accidents involving autonomous cars have already happened including one which resulted in a fatality. Most existing testing techniques for DNN-driven vehicles are heavily dependent on the manual collection of test data under different driving conditions which become prohibitively expensive as the number of test conditions increases. In this paper, we design, implement and evaluate DeepTest, a systematic testing tool for automatically detecting erroneous behaviors of DNN-driven vehicles that can potentially lead to fatal crashes. First, our tool is designed to automatically generated test cases leveraging real-world changes in driving conditions like rain, fog, lighting conditions, etc. DeepTest systematically explores different parts of the DNN logic by generating test inputs that maximize the numbers of activated neurons. DeepTest found thousands of erroneous behaviors under different realistic driving conditions (e.g., blurring, rain, fog, etc.) many of which lead to potentially fatal crashes in three top performing DNNs in the Udacity self-driving car challenge.
Key facts. Cited by 249 papers in the map (data through 7 Oct 2026). First posted on arXiv 28 Aug 2017.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 69; 2022: 51; 2023: 42; 2024: 38; 2025: 24; 2026: 25.
249 papers.
Sort:
By area:
- 2023A Survey on Evaluation of Large Language Modelscited by 1,227
- 2023Identifying the Risks of LM Agents with an LM-Emulated Sandboxcited by 514
- 2021Invisible for both Camera and LiDAR: Security of Multi-Sensor Fusion based Perception in Autonomous Driving Under Physical-World Attackscited by 101
- 2023Recent Advancements in End-to-End Autonomous Driving using Deep Learning: A Surveycited by 101
- 2023DyVal: Dynamic Evaluation of Large Language Models for Reasoning Taskscited by 100
- 2021Explainability of deep vision-based autonomous driving systems: Review and challengescited by 80
- 2021Software Engineering for AI-Based Systems: A Surveycited by 68
- 2023Emotionally Numb or Empathetic? Evaluating How LLMs Feel Using EmotionBenchcited by 54
- 2024Dynamic Evaluation of Large Language Models by Meta Probing Agentscited by 54
- 2023Evaluating Superhuman Models with Consistency Checkscited by 47
- 2021DeepPayload: Black-box Backdoor Attack on Deep Learning Models through Neural Payload Injectioncited by 42
- 2021A Comprehensive Evaluation Framework for Deep Model Robustnesscited by 41
38 more
- 2022Adversarial Robustness of Deep Neural Networks: A Survey from a Formal Verification Perspectivecited by 41
- 2021Robust Machine Learning Systems: Challenges, Current Trends, Perspectives, and the Road Aheadcited by 40
- 2021Guidance on the Assurance of Machine Learning in Autonomous Systems (AMLAS)cited by 40
- 2021STEEX: Steering Counterfactual Explanations with Semanticscited by 40
- 2021Provable Repair of Deep Neural Networkscited by 39
- 2021Vehicle trajectory prediction works, but not everywherecited by 39
- 2022Adaptive Testing of Computer Vision Modelscited by 39
- 2022Natural Color Fool: Towards Boosting Black-box Unrestricted Attackscited by 38
- 2021How to Certify Machine Learning Based Safety-critical Systems? A Systematic Literature Reviewcited by 36
- 2021Mind the Gap! A Study on the Transferability of Virtual vs Physical-world Testing of Autonomous Driving Systemscited by 36
- 2021Inspect, Understand, Overcome: A Survey of Practical Methods for AI Safetycited by 35
- 2021ModelDiff: Testing-Based DNN Similarity Comparison for Model Reuse Detectioncited by 33
- 2021DeepHyperion: Exploring the Feature Space of Deep Learning-Based Systems through Illumination Searchcited by 29
- 2021Deep Ensembles from a Bayesian Perspectivecited by 27
- 2023Choose Your Simulator Wisely: A Review on Open-source Simulators for Autonomous Drivingcited by 26
- 2021Can Offline Testing of Deep Neural Networks Replace Their Online Testing?cited by 24
- 2021Distribution-Aware Testing of Neural Networks Using Generative Modelscited by 22
- 2022SoK: On the Semantic AI Security in Autonomous Drivingcited by 22
- 2022Fairify: Fairness Verification of Neural Networkscited by 22
- 2021Boosting the Transferability of Video Adversarial Examples via Temporal Translationcited by 21
- 2021A Survey on Scenario-Based Testing for Automated Driving Systems in High-Fidelity Simulationcited by 21
- 2022Are You Stealing My Model? Sample Correlation for Fingerprinting Deep Neural Networkscited by 21
- 2021Efficient Out-of-Distribution Detection Using Latent Space of β-VAE for Cyber-Physical Systemscited by 19
- 2021Neural Network Guided Evolutionary Fuzzing for Finding Traffic Violations of Autonomous Vehiclescited by 19
- 2021DeepDiagnosis: Automatically Diagnosing Faults and Recommending Actionable Fixes in Deep Learning Programscited by 19
- 2021Black-Box Testing of Deep Neural Networks Through Test Case Diversitycited by 18
- 2022When and Why Test Generators for Deep Learning Produce Invalid Inputs: an Empirical Studycited by 18
- 2021DeepGuard: A Framework for Safeguarding Autonomous Driving Systems from Inconsistent Behaviorcited by 17
- 2022NPC: Neuron Path Coverage via Characterizing Decision Logic of Deep Neural Networkscited by 17
- 2022LLMEffiChecker: Understanding and Testing Efficiency Degradation of Large Language Modelscited by 16
- 2022DeepPerform: An Efficient Approach for Performance Testing of Resource-Constrained Neural Networkscited by 16
- 2022AEON: A Method for Automatic Evaluation of NLP Test Casescited by 15
- 2022Bugs in Machine Learning-based Systems: A Faultload Benchmarkcited by 15
- 2024New Job, New Gender? Measuring the Social Bias in Image Generation Modelscited by 15
- 2021Attack as Defense: Characterizing Adversarial Examples using Robustnesscited by 14
- 2021Automatic Fairness Testing of Neural Classifiers through Adversarial Samplingcited by 14
- 2022Ergo, SMIRK is Safe: A Safety Case for a Machine Learning Component in a Pedestrian Automatic Emergency Brake Systemcited by 14
- 2023Towards Fair Machine Learning Software: Understanding and Addressing Model Bias Through Counterfactual Thinkingcited by 14
50 most cited of 249 All 249 (JSON)
- 2026The Mask Is Not the Model: Auditing Prefix Invariance in Attention, State-Space, and Hybrid Sequence Models24 Aug 2026
- 2026TestifAI: Tomography-Based Testing for Deep Learning Systems19 Aug 2026
- 2026SSP: An Event-Matched Syn2Sim2Phy Cross-Domain Evaluation Framework for Autonomous Driving VLA Models14 Aug 2026
- 2026SeFaR: Semantic Feature-aware Robustness Testing of Deep Neural Networks10 Aug 2026
- 2026Old Tricks, New Models: How Simple Image Transformations Break Modern AI-based Content Moderation30 Jul 2026
- 2026Towards Trustworthy Embodied Intelligence: A Systems Framework and Graded Trustworthiness Levels28 Jul 2026
- 2026MetaSpace: Metamorphic Testing for Spatial Cognition in Embodied Agents26 Jul 2026
- 2026Gimitest: A Comprehensive Tool for Testing Reinforcement Learning Policies8 Jul 2026
- 2026Driving the Wrong Way: Leveraging Interpretability in End2End Autonomous Driving Models7 Jul 2026
- 2026Learnable Weighting of Intra-Attribute Distances for Categorical Data Clustering with Nominal and Ordinal Attributes6 Jul 2026
- 2026Real-World Perturbation Testing of Autonomous Driving Systems6 Jul 2026
- 2026AI Sandboxes: A Threat Model, Taxonomy, and Measurement Framework16 Jun 2026
38 more
- 2026Testing Neural Networks via Bayesian-Guided Exploration of Decision Landscapes3 Jun 2026
- 2026Latent Anchor-Driven Test Generation for Deep Neural Networks3 Jun 2026
- 2026Hierarchical Fault Detection and Diagnosis for Transformer Architectures30 Apr 2026
- 2026Regression Test Selection for Updated Capability Modules in Compositional ML Systems via Atomic-Quality Probes29 Apr 2026
- 2026UniAda: Universal Adaptive Multi-objective Adversarial Attack for End-to-End Autonomous Driving Systems25 Apr 2026
- 2026Towards Reliable Testing of Machine Unlearning16 Apr 2026
- 2026Spatiotemporal-Aware Bit-Flip Injection on DNN-based Advanced Driver Assistance Systems (extended version)4 Apr 2026
- 2026LLM-Generated Fault Scenarios for Evaluating Perception-Driven Lane Following in Autonomous Edge Systems1 Apr 2026
- 2026From Decoupled to Coupled: Robustness Verification for Learning-based Keypoint Detection with Joint Specifications5 Mar 2026
- 2026Metamorphic Testing of Vision-Language Action-Enabled Robots26 Feb 2026
- 2026Latent Regularization in Generative Test Input Generation17 Feb 2026
- 2026SETA: Statistical Fault Attribution for Compound AI Systems27 Jan 2026
- 2026HyperNet-Adaptation for Diffusion-Based Test Case Generation21 Jan 2026
- 2025A Comprehensive Study of Deep Learning Model Fixing Approaches26 Dec 2025
- 2025AutoMT: A Multi-Agent LLM Framework for Automated Metamorphic Testing of Autonomous Driving Systems22 Oct 2025
- 2025Learning-Based Testing for Deep Learning: Enhancing Model Robustness with Adversarial Input Prioritization28 Sep 2025
- 2025Clotho: Measuring Task-Specific Pre-Generation Test Adequacy for LLM Inputs22 Sep 2025
- 2025CAF'E: Causal Black-Box Testing of Machine Unlearning20 Sep 2025
- 2025Verifying Computational Graphs in Production-Grade Distributed Machine Learning Frameworks12 Sep 2025
- 2025Toward Reproducible Cross-Backend Compatibility for Deep Learning: A Configuration-First Framework with Three-Tier Verification29 Aug 2025
- 2025DiCriTest: Testing Scenario Generation for Decision-Making Agents Considering Diversity and Criticality15 Aug 2025
- 2025Efficient Neural Network Verification via Order Leading Exploration of Branch-and-Bound Trees23 Jul 2025
- 2025TigAug: Data Augmentation for Testing Traffic Light Detection in Autonomous Driving Systems8 Jul 2025
- 2025ASSURE: Metamorphic Testing for AI-powered Browser Extensions7 Jul 2025
- 2025Effort-Optimized, Accuracy-Driven Labelling and Validation of Test Inputs for DL Systems: A Mixed-Integer Linear Programming Approach7 Jul 2025
- 2025Training with Confidence: Catching Silent Errors in Deep Learning Training with Automated Proactive Checks6 Jun 2025
- 2025A Blueprint for AI-Driven Software Quality: Integrating LLMs with Established Standards19 May 2025
- 2025CORTEX-AVD: A Framework for CORner Case Testing and EXploration in Autonomous Vehicle Development4 Apr 2025
- 2025RBT4DNN: Requirements-based Testing of Neural Networks3 Apr 2025
- 2025Towards Assessing Deep Learning Test Input Generators3 Apr 2025
- 2025GAN-enhanced Simulation-driven DNN Testing in Absence of Ground Truth20 Mar 2025
- 2025Simulator Ensembles for Trustworthy Autonomous Driving Systems Testing11 Mar 2025
- 2025Navigating the Edge with the State-of-the-Art Insights into Corner Case Identification and Generation for Enhanced Autonomous Vehicle Safety27 Feb 2025
- 2025NeuroStrata: Harnessing Neurosymbolic Paradigms for Improved Design, Testability, and Verifiability of Autonomous CPS17 Feb 2025
- 2025DILLEMA: Diffusion and Large Language Models for Multi-Modal Augmentation5 Feb 2025
- 2025DANDI: Diffusion as Normative Distribution for Deep Neural Network Input5 Feb 2025
- 2025Benchmarking Image Perturbations for Testing Automated Driving Assistance Systems21 Jan 2025
- 2024Benchmarking Generative AI Models for Deep Learning Test Input Generation23 Dec 2024
50 newest of 249 All 249 (JSON)
- 2021Invisible for both Camera and LiDAR: Security of Multi-Sensor Fusion based Perception in Autonomous Driving Under Physical-World Attackscited by 101
- 2023Recent Advancements in End-to-End Autonomous Driving using Deep Learning: A Surveycited by 101
- 2021Neural Network Guided Evolutionary Fuzzing for Finding Traffic Violations of Autonomous Vehiclescited by 19
- 2021Adversarial Deep Reinforcement Learning for Improving the Robustness of Multi-agent Autonomous Driving Policiescited by 10
- 2024Safety Implications of Explainable Artificial Intelligence in End-to-End Autonomous Drivingcited by 7
- 2021On Robustness of Lane Detection Models to Physical-World Adversarial Attacks in Autonomous Drivingcited by 3
- 2023DeepQTest: Testing Autonomous Driving Systems with Reinforcement Learning and Real-world Weather Datacited by 3
- 2022ApolloRL: a Reinforcement Learning Platform for Autonomous Drivingcited by 2
- 2026UniAda: Universal Adaptive Multi-objective Adversarial Attack for End-to-End Autonomous Driving Systemscited by 0
- 2026Real-World Perturbation Testing of Autonomous Driving Systemscited by 0
- 2026Driving the Wrong Way: Leveraging Interpretability in End2End Autonomous Driving Modelscited by 0
- 2026SSP: An Event-Matched Syn2Sim2Phy Cross-Domain Evaluation Framework for Autonomous Driving VLA Modelscited by 0
- 2026SSP: An Event-Matched Syn2Sim2Phy Cross-Domain Evaluation Framework for Autonomous Driving VLA Models14 Aug 2026
- 2026Driving the Wrong Way: Leveraging Interpretability in End2End Autonomous Driving Models7 Jul 2026
- 2026Real-World Perturbation Testing of Autonomous Driving Systems6 Jul 2026
- 2026UniAda: Universal Adaptive Multi-objective Adversarial Attack for End-to-End Autonomous Driving Systems25 Apr 2026
- 2024Safety Implications of Explainable Artificial Intelligence in End-to-End Autonomous Driving18 Mar 2024
- 2023DeepQTest: Testing Autonomous Driving Systems with Reinforcement Learning and Real-world Weather Data8 Oct 2023
- 2023Recent Advancements in End-to-End Autonomous Driving using Deep Learning: A Survey10 Jul 2023
- 2022ApolloRL: a Reinforcement Learning Platform for Autonomous Driving29 Jan 2022
- 2021Adversarial Deep Reinforcement Learning for Improving the Robustness of Multi-agent Autonomous Driving Policies22 Dec 2021
- 2021Neural Network Guided Evolutionary Fuzzing for Finding Traffic Violations of Autonomous Vehicles13 Sep 2021
- 2021On Robustness of Lane Detection Models to Physical-World Adversarial Attacks in Autonomous Driving6 Jul 2021
- 2021Invisible for both Camera and LiDAR: Security of Multi-Sensor Fusion based Perception in Autonomous Driving Under Physical-World Attacks17 Jun 2021
- 2023Identifying the Risks of LM Agents with an LM-Emulated Sandboxcited by 514
- 2024Dynamic Evaluation of Large Language Models by Meta Probing Agentscited by 54
- 2025AutoMT: A Multi-Agent LLM Framework for Automated Metamorphic Testing of Autonomous Driving Systemscited by 2
- 2026MetaSpace: Metamorphic Testing for Spatial Cognition in Embodied Agentscited by 0
- 2026MetaSpace: Metamorphic Testing for Spatial Cognition in Embodied Agents26 Jul 2026
- 2025AutoMT: A Multi-Agent LLM Framework for Automated Metamorphic Testing of Autonomous Driving Systems22 Oct 2025
- 2024Dynamic Evaluation of Large Language Models by Meta Probing Agents21 Feb 2024
- 2023Identifying the Risks of LM Agents with an LM-Emulated Sandbox25 Sep 2023
- 2024Efficient Domain Augmentation for Autonomous Driving Testing Using Diffusion Modelscited by 10
- 2024Benchmarking Generative AI Models for Deep Learning Test Input Generationcited by 4
- 2025DILLEMA: Diffusion and Large Language Models for Multi-Modal Augmentationcited by 3
- 2026HyperNet-Adaptation for Diffusion-Based Test Case Generationcited by 0
- 2026HyperNet-Adaptation for Diffusion-Based Test Case Generation21 Jan 2026
- 2025DILLEMA: Diffusion and Large Language Models for Multi-Modal Augmentation5 Feb 2025
- 2024Benchmarking Generative AI Models for Deep Learning Test Input Generation23 Dec 2024
- 2024Efficient Domain Augmentation for Autonomous Driving Testing Using Diffusion Models20 Sep 2024
- 2026Old Tricks, New Models: How Simple Image Transformations Break Modern AI-based Content Moderation30 Jul 2026
- 2026Towards Reliable Testing of Machine Unlearning16 Apr 2026
- 2025CAF'E: Causal Black-Box Testing of Machine Unlearning20 Sep 2025
- 2024A Survey of Fragile Model Watermarking7 Jun 2024
- 2024Are LLMs Correctly Integrated into Software Systems?cited by 13
- 2024Are LLMs Correctly Integrated into Software Systems?6 Jul 2024
- 2026Metamorphic Testing of Vision-Language Action-Enabled Robots26 Feb 2026
- 2023A Survey on Evaluation of Large Language Modelscited by 1,227
- 2021Explainability of deep vision-based autonomous driving systems: Review and challengescited by 80
- 2021Software Engineering for AI-Based Systems: A Surveycited by 68
- 2023Emotionally Numb or Empathetic? Evaluating How LLMs Feel Using EmotionBenchcited by 54
- 2023Evaluating Superhuman Models with Consistency Checkscited by 47
- 2021DeepPayload: Black-box Backdoor Attack on Deep Learning Models through Neural Payload Injectioncited by 42
- 2021A Comprehensive Evaluation Framework for Deep Model Robustnesscited by 41
- 2022Adversarial Robustness of Deep Neural Networks: A Survey from a Formal Verification Perspectivecited by 41
- 2021Robust Machine Learning Systems: Challenges, Current Trends, Perspectives, and the Road Aheadcited by 40
- 2021Guidance on the Assurance of Machine Learning in Autonomous Systems (AMLAS)cited by 40
- 2021STEEX: Steering Counterfactual Explanations with Semanticscited by 40
- 2021Provable Repair of Deep Neural Networkscited by 39
12 most cited of 222 All 222 (JSON)
- 2026The Mask Is Not the Model: Auditing Prefix Invariance in Attention, State-Space, and Hybrid Sequence Models24 Aug 2026
- 2026TestifAI: Tomography-Based Testing for Deep Learning Systems19 Aug 2026
- 2026SeFaR: Semantic Feature-aware Robustness Testing of Deep Neural Networks10 Aug 2026
- 2026Towards Trustworthy Embodied Intelligence: A Systems Framework and Graded Trustworthiness Levels28 Jul 2026
- 2026Gimitest: A Comprehensive Tool for Testing Reinforcement Learning Policies8 Jul 2026
- 2026Learnable Weighting of Intra-Attribute Distances for Categorical Data Clustering with Nominal and Ordinal Attributes6 Jul 2026
- 2026AI Sandboxes: A Threat Model, Taxonomy, and Measurement Framework16 Jun 2026
- 2026Testing Neural Networks via Bayesian-Guided Exploration of Decision Landscapes3 Jun 2026
- 2026Latent Anchor-Driven Test Generation for Deep Neural Networks3 Jun 2026
- 2026Hierarchical Fault Detection and Diagnosis for Transformer Architectures30 Apr 2026
- 2026Regression Test Selection for Updated Capability Modules in Compositional ML Systems via Atomic-Quality Probes29 Apr 2026
- 2026Spatiotemporal-Aware Bit-Flip Injection on DNN-based Advanced Driver Assistance Systems (extended version)4 Apr 2026
12 newest of 222 All 222 (JSON)