mlsanityData to 13 Oct 2026

Taxonomy of Machine Learning Safety: A Survey and Primer

arXiv 2106.04823 ↗First posted 9 Jun 2021cs.LG cs.AIcited by 23

Not on the map. Why?

Abstract (arXiv)

The open-world deployment of Machine Learning (ML) algorithms in safety-critical applications such as autonomous vehicles needs to address a variety of ML vulnerabilities such as interpretability, verifiability, and performance limitations. Research explores different approaches to improve ML dependability by proposing new models and training techniques to reduce generalization error, achieve domain adaptation, and detect outlier examples and adversarial attacks. However, there is a missing connection between ongoing ML research and well-established safety principles. In this paper, we present a structured and comprehensive review of ML techniques to improve the dependability of ML algorithms in uncontrolled open-world settings. From this review, we propose the Taxonomy of ML Safety that maps state-of-the-art ML techniques to key engineering safety strategies. Our taxonomy of ML safety presents a safety-oriented categorization of ML techniques to provide guidance for improving dependability of the ML design and development. The proposed taxonomy can serve as a safety checklist to aid designers in improving coverage and diversity of safety strategies employed in any given ML system.

Key facts. Cited by 23 papers in the map (data through 13 Oct 2026). Builds on 219 of its 306 references that are in the map. First posted on arXiv 9 Jun 2021.

Builds on

219 of 306 references.

References · 219

  1. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,588
  2. 2014Explaining and Harnessing Adversarial Examplescited by 7,336
  3. 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,713
  4. 2017A Unified Approach to Interpreting Model Predictionscited by 6,515
  5. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,379
  6. 2015Rethinking the Inception Architecture for Computer Visioncited by 5,457
  7. 2017mixup: Beyond Empirical Risk Minimizationcited by 5,170
  8. 2016"Why Should I Trust You?": Explaining the Predictions of Any Classifiercited by 5,055
  9. 2017On Calibration of Modern Neural Networkscited by 4,902
  10. 2015Dropout as a Bayesian Approximation: Representing Model Uncertainty in Deep Learningcited by 4,430
  11. 2016Simple and Scalable Predictive Uncertainty Estimation using Deep Ensemblescited by 3,902
  12. 2019CutMix: Regularization Strategy to Train Strong Classifiers with Localizable Featurescited by 2,882
38 more
  1. 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,862
  2. 2016A Baseline for Detecting Misclassified and Out-of-Distribution Examples in Neural Networkscited by 2,371
  3. 2013Deep Inside Convolutional Networks: Visualising Image Classification Models and Saliency Mapscited by 2,360
  4. 2017What Uncertainties Do We Need in Bayesian Deep Learning for Computer Vision?cited by 2,340
  5. 2013Visualizing and Understanding Convolutional Networkscited by 2,282
  6. 2019RandAugment: Practical automated data augmentation with a reduced search spacecited by 2,266
  7. 2014Unsupervised Domain Adaptation by Backpropagationcited by 1,909
  8. 2020The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalizationcited by 1,847
  9. 2016OpenAI Gymcited by 1,694
  10. 2020YOLOv4: Optimal Speed and Accuracy of Object Detectioncited by 1,628
  11. 2016Concrete Problems in AI Safetycited by 1,614
  12. 2019Explainable Artificial Intelligence (XAI): Concepts, Taxonomies, Opportunities and Challenges toward Responsible AIcited by 1,547
  13. 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,511
  14. 2019Do ImageNet Classifiers Generalize to ImageNet?cited by 1,510
  15. 2018A Simple Unified Framework for Detecting Out-of-Distribution Samples and Adversarial Attackscited by 1,475
  16. 2017Learning Important Features Through Propagating Activation Differencescited by 1,455
  17. 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,445
  18. 2018ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustnesscited by 1,430
  19. 2017Domain Randomization for Transferring Deep Neural Networks from Simulation to the Real Worldcited by 1,411
  20. 2017Towards A Rigorous Science of Interpretable Machine Learningcited by 1,410
  21. 2019Natural Adversarial Examplescited by 1,405
  22. 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,336
  23. 2017Interpretability Beyond Feature Attribution: Quantitative Testing with Concept Activation Vectors (TCAV)cited by 1,316
  24. 2020Energy-based Out-of-distribution Detectioncited by 1,297
  25. 2019Can You Trust Your Model's Uncertainty? Evaluating Predictive Uncertainty Under Dataset Shiftcited by 1,278
  26. 2018Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examplescited by 1,265
  27. 2017Random Erasing Data Augmentationcited by 1,238
  28. 2014How transferable are features in deep neural networks?cited by 1,219
  29. 2018Sanity Checks for Saliency Mapscited by 1,152
  30. 2017SmoothGrad: removing noise by adding noisecited by 1,103
  31. 2018Co-teaching: Robust Training of Deep Neural Networks with Extremely Noisy Labelscited by 1,055
  32. 2019Learning Robust Global Representations by Penalizing Local Predictive Powercited by 1,012
  33. 2014Striving for Simplicity: The All Convolutional Netcited by 989
  34. 2019When Does Label Smoothing Help?cited by 986
  35. 2017Deeper, Broader and Artier Domain Generalizationcited by 984
  36. 2018Deep Anomaly Detection with Outlier Exposurecited by 941
  37. 2017Virtual Adversarial Training: A Regularization Method for Supervised and Semi-Supervised Learningcited by 919
  38. 2019AugMix: A Simple Data Processing Method to Improve Robustness and Uncertaintycited by 899

50 most cited of 219 All 219 (JSON)

Built on by

Cited by year (2026 to 13 Oct)

Citing papers per year: 2023: 3; 2024: 7; 2025: 6; 2026: 7.

23 papers.

Sort:

By area:

  1. 2023Connecting the Dots in Trustworthy Artificial Intelligence: From AI Principles, Ethics, and Key Requirements to Responsible AI Systems and Regulationcited by 60
  2. 2024Risks of AI Scientists: Prioritizing Safeguarding Over Autonomycited by 49
  3. 2025TALES: A Taxonomy and Analysis of Cultural Representations in LLM-generated Storiescited by 10
  4. 2024Evaluation of Out-of-Distribution Detection Performance on Autonomous Driving Datasetscited by 5
  5. 2024System Safety Monitoring of Learned Components Using Temporal Metric Forecastingcited by 4
  6. 2023You Don't Need Robust Machine Learning to Manage Adversarial Attack Riskscited by 3
  7. 2024Safety Monitoring of Machine Learning Perception Functions: a Surveycited by 3
  8. 2025A Benchmark and Evaluation for Real-World Out-of-Distribution Detection Using Vision-Language Modelscited by 3
  9. 2025Out-of-Distribution Detection for Safety Assurance of AI and Autonomous Systemscited by 2
  10. 2025Runtime Safety Monitoring of Deep Neural Networks for Perception: A Surveycited by 2
  11. 2026Fed-ADE: Adaptive Learning Rate for Federated Post-adaptation under Distribution Shiftcited by 2
  12. 2023The Chai Platform's AI Safety Frameworkcited by 1
11 more
  1. 2024Machine Learning Operations: A Mapping Studycited by 1
  2. 2024SoK: Towards Security and Safety of Edge AIcited by 1
  3. 2024Revisiting Energy-Based Model for Out-of-Distribution Detectioncited by 0
  4. 2025Detecting underdetermination in parameterized quantum circuitscited by 0
  5. 2025Information Theory in Open-world Machine Learning Foundations, Frameworks, and Future Directioncited by 0
  6. 2026Responsible AI for General-Purpose Systems: Overview, Challenges, and A Path Forwardcited by 0
  7. 2026Synergistic Simplex: Cooperative Runtime Assurance for Safety-Critical Autonomous Systemscited by 0
  8. 2026AESOP: Adversarial Execution-path Selection to Overload Deep Learning Pipelinescited by 0
  9. 2026A Unified Causal-Origin Taxonomy of Distributional Shifts in Reinforcement Learningcited by 0
  10. 2026A Deterministic and Auditable AI Security Risk Assessment Framework with ATLAS Aligned Executable Rules and Formal Verificationcited by 0
  11. 2026Dependable AI-Assisted Engineering: A Formal Framework for AI Participation and Assurance in Safety-Critical Workflowscited by 0