Inspect, Understand, Overcome: A Survey of Practical Methods for AI Safety
Not on the map. Why?
Abstract (arXiv)
The use of deep neural networks (DNNs) in safety-critical applications like mobile health and autonomous driving is challenging due to numerous model-inherent shortcomings. These shortcomings are diverse and range from a lack of generalization over insufficient interpretability to problems with malicious inputs. Cyber-physical systems employing DNNs are therefore likely to suffer from safety concerns. In recent years, a zoo of state-of-the-art techniques aiming to address these safety concerns has emerged. This work provides a structured and broad overview of them. We first identify categories of insufficiencies to then describe research activities aiming at their detection, quantification, or mitigation. Our paper addresses both machine learning experts and safety engineers: The former ones might profit from the broad range of machine learning topics covered and discussions on limitations of recent methods. The latter ones might gain insights into the specifics of modern ML methods. We moreover hope that our contribution fuels discussions on desiderata for ML systems and strategies on how to propel existing approaches accordingly.
Key facts. Cited by 35 papers in the map (data through 7 Oct 2026). Builds on 292 of its 454 references that are in the map. First posted on arXiv 29 Apr 2021.
Builds on
292 of 454 references.
References · 292
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2014Adam: A Method for Stochastic Optimizationcited by 36,960
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
- 2015Distilling the Knowledge in a Neural Networkcited by 10,076
- 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,592
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2017Mask R-CNNcited by 7,259
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2013Intriguing properties of neural networkscited by 5,114
- 2016"Why Should I Trust You?": Explaining the Predictions of Any Classifiercited by 5,040
- 2017Model-Agnostic Meta-Learning for Fast Adaptation of Deep Networkscited by 4,861
- 2017On Calibration of Modern Neural Networkscited by 4,860
38 more
- 2014Fully Convolutional Networks for Semantic Segmentationcited by 4,845
- 2015You Only Look Once: Unified, Real-Time Object Detectioncited by 4,829
- 2016The Cityscapes Dataset for Semantic Urban Scene Understandingcited by 4,427
- 2015Dropout as a Bayesian Approximation: Representing Model Uncertainty in Deep Learningcited by 4,416
- 2014Going Deeper with Convolutionscited by 4,231
- 2013Auto-Encoding Variational Bayescited by 3,980
- 2016Simple and Scalable Predictive Uncertainty Estimation using Deep Ensemblescited by 3,888
- 2017Outrageously Large Neural Networks: The Sparsely-Gated Mixture-of-Experts Layercited by 3,413
- 2017Axiomatic Attribution for Deep Networkscited by 3,350
- 2016DeepLab: Semantic Image Segmentation with Deep Convolutional Nets, Atrous Convolution, and Fully Connected CRFscited by 3,239
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
- 2017Progressive Growing of GANs for Improved Quality, Stability, and Variationcited by 2,967
- 2015Fast R-CNNcited by 2,930
- 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,857
- 2016Aggregated Residual Transformations for Deep Neural Networkscited by 2,540
- 2017CARLA: An Open Urban Driving Simulatorcited by 2,431
- 2016A Baseline for Detecting Misclassified and Out-of-Distribution Examples in Neural Networkscited by 2,362
- 2013Deep Inside Convolutional Networks: Visualising Image Classification Models and Saliency Mapscited by 2,348
- 2017What Uncertainties Do We Need in Bayesian Deep Learning for Computer Vision?cited by 2,335
- 2015Deep Compression: Compressing Deep Neural Networks with Pruning, Trained Quantization and Huffman Codingcited by 2,291
- 2013Visualizing and Understanding Convolutional Networkscited by 2,278
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
- 2017Rethinking Atrous Convolution for Semantic Image Segmentationcited by 2,154
- 2015Unsupervised Representation Learning with Deep Convolutional Generative Adversarial Networkscited by 2,048
- 2013Estimating or Propagating Gradients Through Stochastic Neurons for Conditional Computationcited by 2,031
- 2018DARTS: Differentiable Architecture Searchcited by 1,782
- 2016Adversarial examples in the physical worldcited by 1,762
- 2017Quantization and Training of Neural Networks for Efficient Integer-Arithmetic-Only Inferencecited by 1,548
- 2016Inception-v4, Inception-ResNet and the Impact of Residual Connections on Learningcited by 1,509
- 2018A Simple Unified Framework for Detecting Out-of-Distribution Samples and Adversarial Attackscited by 1,472
- 2017Learning Important Features Through Propagating Activation Differencescited by 1,454
- 2015Convolutional LSTM Network: A Machine Learning Approach for Precipitation Nowcastingcited by 1,428
- 2019Deep High-Resolution Representation Learning for Visual Recognitioncited by 1,417
- 2019Generalized Intersection over Union: A Metric and A Loss for Bounding Box Regressioncited by 1,361
- 2017Multi-Task Learning Using Uncertainty to Weigh Losses for Scene Geometry and Semanticscited by 1,345
- 2016On Large-Batch Training for Deep Learning: Generalization Gap and Sharp Minimacited by 1,337
- 2017Enhancing The Reliability of Out-of-distribution Image Detection in Neural Networkscited by 1,325
- 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,315
50 most cited of 292 All 292 (JSON)
Built on by
Citing papers per year: 2021: 6; 2022: 11; 2023: 7; 2024: 6; 2025: 4; 2026: 1.
35 papers.
Sort:
By area:
- 2023Can LLM-Generated Misinformation Be Detected?cited by 173
- 2024Aligning LLMs with Individual Preferences via Interactioncited by 63
- 2022A Close Look into the Calibration of Pre-trained Language Modelscited by 57
- 2022SynWoodScape: Synthetic Surround-view Fisheye Camera Dataset for Autonomous Drivingcited by 32
- 2023Survey on Unsupervised Domain Adaptation for Semantic Segmentation for Visual Perception in Automated Drivingcited by 29
- 2021LiMoSeg: Real-time Bird's Eye View based LiDAR Motion Segmentationcited by 15
- 2021Adversarial Attacks on Multi-task Visual Perception for Autonomous Drivingcited by 14
- 2022Sparsely-gated Mixture-of-Expert Layers for CNN Interpretabilitycited by 13
- 2023Deep Learning Safety Concerns in Automated Driving Perceptioncited by 10
- 2021An Online Learning System for Wireless Charging Alignment using Surround-view Fisheye Camerascited by 9
- 2021Out-of-distribution Detection and Generation using Soft Brownian Offset Sampling and Autoencoderscited by 8
- 2022Space, Time, and Interaction: A Taxonomy of Corner Cases in Trajectory Datasets for Automated Drivingcited by 7
23 more
- 2023Local Concept Embeddings for Analysis of Concept Distributions in Vision DNN Feature Spacescited by 7
- 2021Yes We Care! -- Certification for Machine Learning Methods through the Care Label Frameworkcited by 5
- 2024Towards Adversarial Robustness of Model-Level Mixture-of-Experts Architectures for Semantic Segmentationcited by 5
- 2022A Survey on Uncertainty Toolkits for Deep Learningcited by 4
- 2022Unaligned but Safe -- Formally Compensating Performance Limitations for Imprecise 2D Object Detectioncited by 3
- 2022Tailored Uncertainty Estimation for Deep Learning Systemscited by 3
- 2023SURE-Val: Safe Urban Relevance Extension and Validationcited by 3
- 2022Surround-View Cameras based Holistic Visual Perception for Automated Drivingcited by 2
- 2023Broadening the perspective for sustainable AI: Comprehensive sustainability criteria and indicators for AI systemscited by 2
- 2024Statistical Challenges with Dataset Construction: Why You Will Never Have Enough Imagescited by 2
- 2025Out-of-Distribution Detection for Safety Assurance of AI and Autonomous Systemscited by 2
- 2025Runtime Safety Monitoring of Deep Neural Networks for Perception: A Surveycited by 2
- 2021The Care Label Concept: A Certification Suite for Trustworthy and Resource-Aware Machine Learningcited by 1
- 2022SpikiLi: A Spiking Simulation of LiDAR based Real-time Object Detection for Autonomous Drivingcited by 1
- 2022Safe Perception -- A Hierarchical Monitor Approachcited by 1
- 2023Conditioning Latent-Space Clusters for Real-World Anomaly Classificationcited by 1
- 2022Safe AI -- How is this Possible?cited by 0
- 2024Criteria for Uncertainty-based Corner Cases Detection in Instance Segmentationcited by 0
- 2024Evaluating Adversarial Attacks on Traffic Sign Classifiers beyond Standard Baselinescited by 0
- 2024Landscape of AI safety concerns -- A methodology to support safety assurance for AI-based autonomous systemscited by 0
- 2025Detecting underdetermination in parameterized quantum circuitscited by 0
- 2025OpenViGA: Video Generation for Automotive Driving Scenes by Streamlining and Fine-Tuning Open Source Models with Public Datacited by 0
- 2026Towards a Systematic Risk Assessment of Deep Neural Network Limitations in Autonomous Driving Perceptioncited by 0
- 2026Towards a Systematic Risk Assessment of Deep Neural Network Limitations in Autonomous Driving Perception21 Apr 2026
- 2025Runtime Safety Monitoring of Deep Neural Networks for Perception: A Survey8 Nov 2025
- 2025Out-of-Distribution Detection for Safety Assurance of AI and Autonomous Systems24 Oct 2025
- 2025OpenViGA: Video Generation for Automotive Driving Scenes by Streamlining and Fine-Tuning Open Source Models with Public Data18 Sep 2025
- 2025Detecting underdetermination in parameterized quantum circuits4 Apr 2025
- 2024Landscape of AI safety concerns -- A methodology to support safety assurance for AI-based autonomous systems18 Dec 2024
- 2024Towards Adversarial Robustness of Model-Level Mixture-of-Experts Architectures for Semantic Segmentation16 Dec 2024
- 2024Evaluating Adversarial Attacks on Traffic Sign Classifiers beyond Standard Baselines12 Dec 2024
- 2024Aligning LLMs with Individual Preferences via Interaction4 Oct 2024
- 2024Statistical Challenges with Dataset Construction: Why You Will Never Have Enough Images20 Aug 2024
- 2024Criteria for Uncertainty-based Corner Cases Detection in Instance Segmentation17 Apr 2024
- 2023Local Concept Embeddings for Analysis of Concept Distributions in Vision DNN Feature Spaces24 Nov 2023
23 more
- 2023Can LLM-Generated Misinformation Be Detected?25 Sep 2023
- 2023Conditioning Latent-Space Clusters for Real-World Anomaly Classification18 Sep 2023
- 2023Deep Learning Safety Concerns in Automated Driving Perception7 Sep 2023
- 2023SURE-Val: Safe Urban Relevance Extension and Validation4 Aug 2023
- 2023Broadening the perspective for sustainable AI: Comprehensive sustainability criteria and indicators for AI systems22 Jun 2023
- 2023Survey on Unsupervised Domain Adaptation for Semantic Segmentation for Visual Perception in Automated Driving24 Apr 2023
- 2022A Close Look into the Calibration of Pre-trained Language Models31 Oct 2022
- 2022Space, Time, and Interaction: A Taxonomy of Corner Cases in Trajectory Datasets for Automated Driving17 Oct 2022
- 2022Safe Perception -- A Hierarchical Monitor Approach1 Aug 2022
- 2022Surround-View Cameras based Holistic Visual Perception for Automated Driving11 Jun 2022
- 2022SpikiLi: A Spiking Simulation of LiDAR based Real-time Object Detection for Autonomous Driving6 Jun 2022
- 2022A Survey on Uncertainty Toolkits for Deep Learning2 May 2022
- 2022Tailored Uncertainty Estimation for Deep Learning Systems29 Apr 2022
- 2022Sparsely-gated Mixture-of-Expert Layers for CNN Interpretability22 Apr 2022
- 2022SynWoodScape: Synthetic Surround-view Fisheye Camera Dataset for Autonomous Driving9 Mar 2022
- 2022Unaligned but Safe -- Formally Compensating Performance Limitations for Imprecise 2D Object Detection10 Feb 2022
- 2022Safe AI -- How is this Possible?25 Jan 2022
- 2021LiMoSeg: Real-time Bird's Eye View based LiDAR Motion Segmentation8 Nov 2021
- 2021Adversarial Attacks on Multi-task Visual Perception for Autonomous Driving15 Jul 2021
- 2021The Care Label Concept: A Certification Suite for Trustworthy and Resource-Aware Machine Learning1 Jun 2021
- 2021An Online Learning System for Wireless Charging Alignment using Surround-view Fisheye Cameras26 May 2021
- 2021Yes We Care! -- Certification for Machine Learning Methods through the Care Label Framework21 May 2021
- 2021Out-of-distribution Detection and Generation using Soft Brownian Offset Sampling and Autoencoders4 May 2021
- 2024Aligning LLMs with Individual Preferences via Interactioncited by 63
- 2023Can LLM-Generated Misinformation Be Detected?cited by 173
- 2022A Close Look into the Calibration of Pre-trained Language Modelscited by 57
- 2022SynWoodScape: Synthetic Surround-view Fisheye Camera Dataset for Autonomous Drivingcited by 32
- 2023Survey on Unsupervised Domain Adaptation for Semantic Segmentation for Visual Perception in Automated Drivingcited by 29
- 2021LiMoSeg: Real-time Bird's Eye View based LiDAR Motion Segmentationcited by 15
- 2021Adversarial Attacks on Multi-task Visual Perception for Autonomous Drivingcited by 14
- 2023Deep Learning Safety Concerns in Automated Driving Perceptioncited by 10
- 2021An Online Learning System for Wireless Charging Alignment using Surround-view Fisheye Camerascited by 9
- 2021Out-of-distribution Detection and Generation using Soft Brownian Offset Sampling and Autoencoderscited by 8
- 2022Space, Time, and Interaction: A Taxonomy of Corner Cases in Trajectory Datasets for Automated Drivingcited by 7
- 2023Local Concept Embeddings for Analysis of Concept Distributions in Vision DNN Feature Spacescited by 7
- 2021Yes We Care! -- Certification for Machine Learning Methods through the Care Label Frameworkcited by 5
12 most cited of 31 All 31 (JSON)
- 2026Towards a Systematic Risk Assessment of Deep Neural Network Limitations in Autonomous Driving Perception21 Apr 2026
- 2025Runtime Safety Monitoring of Deep Neural Networks for Perception: A Survey8 Nov 2025
- 2025Out-of-Distribution Detection for Safety Assurance of AI and Autonomous Systems24 Oct 2025
- 2025Detecting underdetermination in parameterized quantum circuits4 Apr 2025
- 2024Landscape of AI safety concerns -- A methodology to support safety assurance for AI-based autonomous systems18 Dec 2024
- 2024Evaluating Adversarial Attacks on Traffic Sign Classifiers beyond Standard Baselines12 Dec 2024
- 2024Statistical Challenges with Dataset Construction: Why You Will Never Have Enough Images20 Aug 2024
- 2024Criteria for Uncertainty-based Corner Cases Detection in Instance Segmentation17 Apr 2024
- 2023Local Concept Embeddings for Analysis of Concept Distributions in Vision DNN Feature Spaces24 Nov 2023
- 2023Can LLM-Generated Misinformation Be Detected?25 Sep 2023
- 2023Conditioning Latent-Space Clusters for Real-World Anomaly Classification18 Sep 2023
- 2023Deep Learning Safety Concerns in Automated Driving Perception7 Sep 2023
12 newest of 31 All 31 (JSON)