Why Normalizing Flows Fail to Detect Out-of-Distribution Data
Not on the map. Why?
Abstract (arXiv)
Detecting out-of-distribution (OOD) data is crucial for robust machine learning systems. Normalizing flows are flexible deep generative models that often surprisingly fail to distinguish between in- and out-of-distribution data: a flow trained on pictures of clothing assigns higher likelihood to handwritten digits. We investigate why normalizing flows perform poorly for OOD detection. We demonstrate that flows learn local pixel correlations and generic image-to-latent-space transformations which are not specific to the target image dataset. We show that by modifying the architecture of flow coupling layers we can bias the flow towards learning the semantic structure of the target data, improving OOD detection. Our investigation reveals that properties that enable flows to generate high-fidelity images can have a detrimental effect on OOD detection.
Key facts. Cited by 220 papers in the map (data through 7 Oct 2026). First posted on arXiv 15 Jun 2020.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 36; 2022: 38; 2023: 41; 2024: 43; 2025: 29; 2026: 33.
220 papers.
Sort:
By area:
- 2021Generalized Out-of-Distribution Detection: A Surveycited by 796
- 2021CutPaste: Self-Supervised Learning for Anomaly Detection and Localizationcited by 529
- 2021ReAct: Out-of-distribution Detection With Rectified Activationscited by 486
- 2021On the Importance of Gradients for Detecting Distributional Shifts in the Wildcited by 338
- 2021CFLOW-AD: Real-Time Unsupervised Anomaly Detection with Localization via Conditional Normalizing Flowscited by 320
- 2021Offline Reinforcement Learning with Fisher Divergence Critic Regularizationcited by 237
- 2022Delving into Out-of-Distribution Detection with Vision-Language Representationscited by 215
- 2021Low-Light Image Enhancement with Normalizing Flowcited by 184
- 2023OpenOOD v1.5: Enhanced Benchmark for Out-of-Distribution Detectioncited by 178
- 2022How to Exploit Hyperspherical Embeddings for Out-of-Distribution Detection?cited by 128
- 2023Score-Based Diffusion Models as Principled Priors for Inverse Imagingcited by 126
- 2021Fully Convolutional Cross-Scale-Flows for Image-based Defect Detectioncited by 117
38 more
- 2023LoCoOp: Few-Shot Out-of-Distribution Detection via Prompt Learningcited by 107
- 2021DEUP: Direct Epistemic Uncertainty Predictioncited by 102
- 2021Understanding Failures in Out-of-Distribution Detection with Deep Generative Modelscited by 89
- 2021Types of Out-of-Distribution Texts and How to Detect Themcited by 80
- 2021Graph Posterior Network: Bayesian Predictive Uncertainty for Node Classificationcited by 79
- 2023PyramidFlow: High-Resolution Defect Contrastive Localization using Pyramid Normalizing Flowcited by 74
- 2022Unknown-Aware Object Detection: Learning What You Don't Know from Videos in the Wildcited by 70
- 2021On the Impact of Spurious Correlation for Out-of-distribution Detectioncited by 68
- 2022Normalizing Flows for Human Pose Anomaly Detectioncited by 59
- 2023Unsupervised Out-of-Distribution Detection with Diffusion Inpaintingcited by 57
- 2022RankFeat: Rank-1 Feature Removal for Out-of-distribution Detectioncited by 52
- 2022Boosting Out-of-distribution Detection with Typical Featurescited by 48
- 2024A Closer Look at the Robustness of Contrastive Language-Image Pre-Training (CLIP)cited by 44
- 2023On Advantages of Mask-level Recognition for Outlier-aware Segmentationcited by 42
- 2024A Geometric View of Data Complexity: Efficient Local Intrinsic Dimension Estimation with Diffusion Modelscited by 41
- 2023GL-MCM: Global and Local Maximum Concept Matching for Zero-Shot Out-of-Distribution Detectioncited by 36
- 2023LINe: Out-of-Distribution Detection by Leveraging Important Neuronscited by 34
- 2024Outlier detection by ensembling uncertainty with negative objectnesscited by 34
- 2021Autoencoders for unsupervised anomaly detection in high energy physicscited by 32
- 2021On the Out-of-distribution Generalization of Probabilistic Image Modellingcited by 32
- 2022Diagnosing and Fixing Manifold Overfitting in Deep Generative Modelscited by 28
- 2022Watermarking for Out-of-distribution Detectioncited by 28
- 2023Neuron Activation Coverage: Rethinking Out-of-distribution Detection and Generalizationcited by 28
- 2024Hierarchical Gaussian Mixture Normalizing Flow Modeling for Unified Anomaly Detectioncited by 28
- 2023DiffGuard: Semantic Mismatch-Guided Out-of-Distribution Detection using Pre-trained Diffusion Modelscited by 25
- 2023MSFlow: Multi-Scale Flow-based Framework for Unsupervised Anomaly Detectioncited by 25
- 2022Out-of-distribution Detection via Frequency-regularized Generative Modelscited by 23
- 2021On the Properties of Kullback-Leibler Divergence Between Multivariate Gaussian Distributionscited by 22
- 2022PatchNR: Learning from Very Few Images by Patch Normalizing Flow Regularizationcited by 22
- 2022Out-of-Distribution Detection with Semantic Mismatch under Maskingcited by 22
- 2024A Geometric Explanation of the Likelihood OOD Detection Paradoxcited by 22
- 2022Rainproof: An Umbrella To Shield Text Generators From Out-Of-Distribution Datacited by 21
- 2024MULDE: Multiscale Log-Density Estimation via Denoising Score Matching for Video Anomaly Detectioncited by 21
- 2024Your Data Is Not Perfect: Towards Cross-Domain Out-of-Distribution Detection in Class-Imbalanced Datacited by 21
- 2022Igeood: An Information Geometry Approach to Out-of-Distribution Detectioncited by 20
- 2022Improving the Intra-class Long-tail in 3D Detection via Rare Example Miningcited by 19
- 2024Diffusion Models as Cartoonists: The Curious Case of High Density Regionscited by 19
- 2022Data Redaction from Pre-trained GANscited by 18
50 most cited of 220 All 220 (JSON)
- 2026OOD Detection for EEG-based Machine Learning in High-Risk Environments18 Aug 2026
- 2026A Probabilistic Circuit-Induced Pseudo-Metric for Out-of-Distribution Detection10 Aug 2026
- 2026ReFP-AD: Rectified Flow Preconditioning for Energy-Based Anomaly Detection3 Aug 2026
- 2026Image Quality Dependent Degradation for AI Systems28 Jul 2026
- 2026Hybrid Latent-Structural Fusion (HLSF) for Cyber Anomaly Detection20 Jul 2026
- 2026MATCH: Flow Matching for Multi-View Anomaly Detection23 Jun 2026
- 2026Reliability-Aware Prototype Calibration for Frozen Pose-Flow Video Anomaly Detection18 Jun 2026
- 2026Plan First, Judge Later, Run Better: A DMAIC-Inspired Agentic System for Industrial Anomaly Detection3 Jun 2026
- 2026Local Diagnostics of Continuous Normalizing Flow for Out-of-Distribution Detection30 May 2026
- 2026Model-Agnostic Signal Discovery with Machine Learning: Bridging the Gap Between Theory and Practice29 May 2026
- 2026Immuno-VLM: Immunizing Large Vision-Language Models via Generative Semantic Antibodies for Open-World Trustworthiness29 May 2026
- 2026Not All Inputs Are Valid: Towards Open-Set Video Moment Retrieval Using Language28 May 2026
38 more
- 2026The Signal in the Noise: OOD Detection Through Goodness-of-Fit Testing in Factorised Latent Spaces21 May 2026
- 2026Learning to Align Generative Appearance Priors for Fine-grained Image Retrieval11 May 2026
- 2026Geometry over Density: Few-Shot Cross-Domain OOD Detection5 May 2026
- 2026ISAAC: Auditing Causal Reasoning in Deep Models for Drug-Target Interaction3 May 2026
- 2026Geometric Decoupling: Diagnosing the Structural Instability of Latent20 Apr 2026
- 2026Failure Identification in Imitation Learning Via Statistical and Semantic Filtering15 Apr 2026
- 2026Optimal Stability of KL Divergence under Gaussian Perturbations13 Apr 2026
- 2026Deep Networks Favor Simple Data1 Apr 2026
- 2026Uncertainty-Aware Distribution-to-Distribution Flow Matching for Scientific Imaging23 Mar 2026
- 2026Sampling Boltzmann distributions via normalizing flow approximation of transport maps15 Mar 2026
- 2026Foundational World Models Accurately Detect Bimanual Manipulator Failures7 Mar 2026
- 2026The Invisible Gorilla Effect in Out-of-distribution Detection23 Feb 2026
- 2026Learning Discriminative and Generalizable Anomaly Detector for Dynamic Graph with Limited Supervision23 Feb 2026
- 2026Self-Aware Object Detection via Degradation Manifolds20 Feb 2026
- 2026Why the Counterintuitive Phenomenon of Likelihood Rarely Appears in Tabular Anomaly Detection with Deep Generative Models?10 Feb 2026
- 2026Mitigating the Likelihood Paradox in Flow-based OOD Detection via Entropy Manipulation10 Feb 2026
- 2026Don't Break the Boundary: Continual Unlearning for OOD Detection Based on Free Energy Repulsion6 Feb 2026
- 2026Tuning Out-of-Distribution (OOD) Detectors Without Given OOD Data5 Feb 2026
- 2026Context Determines Optimal Architecture in Materials Segmentation4 Feb 2026
- 2026Relaxed Triangle Inequality for Kullback-Leibler Divergence Between Multivariate Gaussian Distributions31 Jan 2026
- 2026DAVIS: OOD Detection via Dominant Activations and Variance for Increased Separation30 Jan 2026
- 2025Out-of-Distribution Detection in Molecular Complexes via Diffusion Models for Irregular Graphs20 Dec 2025
- 2025Coarse-to-Fine Open-Set Graph Node Classification with Large Language Models18 Dec 2025
- 2025Rethinking Jailbreak Detection of Large Vision Language Models with Representational Contrastive Scoring12 Dec 2025
- 2025Enhancing ECG Classification Robustness with Lightweight Unsupervised Anomaly Detection Filters30 Oct 2025
- 2025Explainable Heterogeneous Anomaly Detection in Financial Networks via Adaptive Expert Routing20 Oct 2025
- 2025On Uniformly Scaling Flows: A Density-Aligned Approach to Deep One-Class Classification10 Oct 2025
- 2025EigenScore: OOD Detection using Covariance in Diffusion Models8 Oct 2025
- 2025Anomaly Detection by Clustering DINO Embeddings using a Dirichlet Process Mixture24 Sep 2025
- 2025Contextual Learning for Anomaly Detection in Tabular Data10 Sep 2025
- 2025Prompt Optimization Meets Subspace Representation Learning for Few-shot Out-of-Distribution Detection9 Sep 2025
- 2025Probability Density from Latent Diffusion Models for Out-of-Distribution Detection21 Aug 2025
- 2025Time-reversed Flow Matching with Worst Transport in High-dimensional Latent Space for Image Anomaly Detection7 Aug 2025
- 2025Out-of-Distribution Detection in Medical Imaging via Diffusion Trajectories31 Jul 2025
- 2025Zero-Shot Image Anomaly Detection Using Generative Foundation Models30 Jul 2025
- 2025UniOD: A Universal Model for Outlier Detection across Diverse Domains9 Jul 2025
- 2025Out-of-Distribution Detection Methods Answer the Wrong Questions2 Jul 2025
- 2025Adaptive Multi-prompt Contrastive Network for Few-shot Out-of-distribution Detection21 Jun 2025
50 newest of 220 All 220 (JSON)
- 2023Score-Based Diffusion Models as Principled Priors for Inverse Imagingcited by 126
- 2023Unsupervised Out-of-Distribution Detection with Diffusion Inpaintingcited by 57
- 2024A Geometric View of Data Complexity: Efficient Local Intrinsic Dimension Estimation with Diffusion Modelscited by 41
- 2023DiffGuard: Semantic Mismatch-Guided Out-of-Distribution Detection using Pre-trained Diffusion Modelscited by 25
- 2024Diffusion Models as Cartoonists: The Curious Case of High Density Regionscited by 19
- 2023Projection Regret: Reducing Background Bias for Novelty Detection via Diffusion Modelscited by 9
- 2024Diffusion-based Layer-wise Semantic Reconstruction for Unsupervised Out-of-Distribution Detectioncited by 5
- 2024Diffusion Prior Interpolation for Flexibility Real-World Face Super-Resolutioncited by 5
- 2025EigenScore: OOD Detection using Covariance in Diffusion Modelscited by 4
- 2024Approximations to the Fisher Information Metric of Deep Generative Models for Out-Of-Distribution Detectioncited by 2
- 2025Zero-Shot Image Anomaly Detection Using Generative Foundation Modelscited by 2
- 2025Probability Density from Latent Diffusion Models for Out-of-Distribution Detectioncited by 2
12 most cited of 19 All 19 (JSON)
- 2026ReFP-AD: Rectified Flow Preconditioning for Energy-Based Anomaly Detection3 Aug 2026
- 2026MATCH: Flow Matching for Multi-View Anomaly Detection23 Jun 2026
- 2026Geometric Decoupling: Diagnosing the Structural Instability of Latent20 Apr 2026
- 2026Uncertainty-Aware Distribution-to-Distribution Flow Matching for Scientific Imaging23 Mar 2026
- 2025Out-of-Distribution Detection in Molecular Complexes via Diffusion Models for Irregular Graphs20 Dec 2025
- 2025EigenScore: OOD Detection using Covariance in Diffusion Models8 Oct 2025
- 2025Probability Density from Latent Diffusion Models for Out-of-Distribution Detection21 Aug 2025
- 2025Time-reversed Flow Matching with Worst Transport in High-dimensional Latent Space for Image Anomaly Detection7 Aug 2025
- 2025Zero-Shot Image Anomaly Detection Using Generative Foundation Models30 Jul 2025
- 2024Diffusion Prior Interpolation for Flexibility Real-World Face Super-Resolution21 Dec 2024
- 2024Diffusion-based Layer-wise Semantic Reconstruction for Unsupervised Out-of-Distribution Detection16 Nov 2024
- 2024Diffusion Models as Cartoonists: The Curious Case of High Density Regions2 Nov 2024
12 newest of 19 All 19 (JSON)
- 2021Offline Reinforcement Learning with Fisher Divergence Critic Regularizationcited by 237
- 2022IL-flOw: Imitation Learning from Observation using Normalizing Flowscited by 12
- 2023A Coupled Flow Approach to Imitation Learningcited by 12
- 2026Failure Identification in Imitation Learning Via Statistical and Semantic Filteringcited by 6
- 2026Failure Identification in Imitation Learning Via Statistical and Semantic Filtering15 Apr 2026
- 2023A Coupled Flow Approach to Imitation Learning29 Apr 2023
- 2022IL-flOw: Imitation Learning from Observation using Normalizing Flows19 May 2022
- 2021Offline Reinforcement Learning with Fisher Divergence Critic Regularization14 Mar 2021
- 2021Generalized Out-of-Distribution Detection: A Surveycited by 796
- 2021CutPaste: Self-Supervised Learning for Anomaly Detection and Localizationcited by 529
- 2021ReAct: Out-of-distribution Detection With Rectified Activationscited by 486
- 2021On the Importance of Gradients for Detecting Distributional Shifts in the Wildcited by 338
- 2021CFLOW-AD: Real-Time Unsupervised Anomaly Detection with Localization via Conditional Normalizing Flowscited by 320
- 2022Delving into Out-of-Distribution Detection with Vision-Language Representationscited by 215
- 2021Low-Light Image Enhancement with Normalizing Flowcited by 184
- 2023OpenOOD v1.5: Enhanced Benchmark for Out-of-Distribution Detectioncited by 178
- 2022How to Exploit Hyperspherical Embeddings for Out-of-Distribution Detection?cited by 128
- 2021Fully Convolutional Cross-Scale-Flows for Image-based Defect Detectioncited by 117
- 2023LoCoOp: Few-Shot Out-of-Distribution Detection via Prompt Learningcited by 107
- 2021DEUP: Direct Epistemic Uncertainty Predictioncited by 102
12 most cited of 191 All 191 (JSON)
- 2026OOD Detection for EEG-based Machine Learning in High-Risk Environments18 Aug 2026
- 2026A Probabilistic Circuit-Induced Pseudo-Metric for Out-of-Distribution Detection10 Aug 2026
- 2026Image Quality Dependent Degradation for AI Systems28 Jul 2026
- 2026Hybrid Latent-Structural Fusion (HLSF) for Cyber Anomaly Detection20 Jul 2026
- 2026Reliability-Aware Prototype Calibration for Frozen Pose-Flow Video Anomaly Detection18 Jun 2026
- 2026Local Diagnostics of Continuous Normalizing Flow for Out-of-Distribution Detection30 May 2026
- 2026Model-Agnostic Signal Discovery with Machine Learning: Bridging the Gap Between Theory and Practice29 May 2026
- 2026Not All Inputs Are Valid: Towards Open-Set Video Moment Retrieval Using Language28 May 2026
- 2026The Signal in the Noise: OOD Detection Through Goodness-of-Fit Testing in Factorised Latent Spaces21 May 2026
- 2026Learning to Align Generative Appearance Priors for Fine-grained Image Retrieval11 May 2026
- 2026Geometry over Density: Few-Shot Cross-Domain OOD Detection5 May 2026
- 2026Optimal Stability of KL Divergence under Gaussian Perturbations13 Apr 2026
12 newest of 191 All 191 (JSON)