A Survey of Safety and Trustworthiness of Deep Neural Networks: Verification, Testing, Adversarial Attack and Defence, and Interpretability
Not on the map. Why?
Abstract (arXiv)
In the past few years, significant progress has been made on deep neural networks (DNNs) in achieving human-level performance on several long-standing tasks. With the broader deployment of DNNs on various applications, the concerns over their safety and trustworthiness have been raised in public, especially after the widely reported fatal incidents involving self-driving cars. Research to address these concerns is particularly active, with a significant number of papers released in the past few years. This survey paper conducts a review of the current research effort into making DNNs safe and trustworthy, by focusing on four aspects: verification, testing, adversarial attack and defence, and interpretability. In total, we survey 202 papers, most of which were published after 2017.
Key facts. Cited by 8 papers in the map (data through 7 Oct 2026). First posted on arXiv 18 Dec 2018.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 3; 2022: 1; 2023: 0; 2024: 3; 2025: 1.
8 papers.
- 2021Detecting Adversarial Examples by Input Transformations, Defense Perturbations, and Votingcited by 16
- 2021Benchmarking Safe Deep Reinforcement Learning in Aquatic Navigationcited by 10
- 2021Bisimulations for Neural Network Reductioncited by 6
- 2024Zero-shot Safety Prediction for Autonomous Robots with Foundation World Modelscited by 6
- 2025WeedNet: A Foundation Model-Based Global-to-Local AI Approach for Real-Time Weed Species Identification and Classificationcited by 4
- 2022CEG4N: Counter-Example Guided Neural Network Quantization Refinementcited by 2
- 2024Feature compression is the root cause of adversarial fragility in neural network classifierscited by 1
- 2024A constrained optimization approach to improve robustness of neural networkscited by 0
- 2025WeedNet: A Foundation Model-Based Global-to-Local AI Approach for Real-Time Weed Species Identification and Classification25 May 2025
- 2024A constrained optimization approach to improve robustness of neural networks18 Sep 2024
- 2024Feature compression is the root cause of adversarial fragility in neural network classifiers23 Jun 2024
- 2024Zero-shot Safety Prediction for Autonomous Robots with Foundation World Models30 Mar 2024
- 2022CEG4N: Counter-Example Guided Neural Network Quantization Refinement9 Jul 2022
- 2021Benchmarking Safe Deep Reinforcement Learning in Aquatic Navigation16 Dec 2021
- 2021Bisimulations for Neural Network Reduction7 Oct 2021
- 2021Detecting Adversarial Examples by Input Transformations, Defense Perturbations, and Voting27 Jan 2021