Taxonomy of Machine Learning Safety: A Survey and Primer
Not on the map. Why?
Abstract (arXiv)
The open-world deployment of Machine Learning (ML) algorithms in safety-critical applications such as autonomous vehicles needs to address a variety of ML vulnerabilities such as interpretability, verifiability, and performance limitations. Research explores different approaches to improve ML dependability by proposing new models and training techniques to reduce generalization error, achieve domain adaptation, and detect outlier examples and adversarial attacks. However, there is a missing connection between ongoing ML research and well-established safety principles. In this paper, we present a structured and comprehensive review of ML techniques to improve the dependability of ML algorithms in uncontrolled open-world settings. From this review, we propose the Taxonomy of ML Safety that maps state-of-the-art ML techniques to key engineering safety strategies. Our taxonomy of ML safety presents a safety-oriented categorization of ML techniques to provide guidance for improving dependability of the ML design and development. The proposed taxonomy can serve as a safety checklist to aid designers in improving coverage and diversity of safety strategies employed in any given ML system.
Key facts. Cited by 23 papers in the map (data through 13 Oct 2026). Builds on 219 of its 306 references that are in the map. First posted on arXiv 9 Jun 2021.
Builds on
219 of 306 references.
References · 219
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,588
- 2014Explaining and Harnessing Adversarial Examplescited by 7,336
- 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,713
- 2017A Unified Approach to Interpreting Model Predictionscited by 6,515
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,379
- 2015Rethinking the Inception Architecture for Computer Visioncited by 5,457
- 2017mixup: Beyond Empirical Risk Minimizationcited by 5,170
- 2016"Why Should I Trust You?": Explaining the Predictions of Any Classifiercited by 5,055
- 2017On Calibration of Modern Neural Networkscited by 4,902
- 2015Dropout as a Bayesian Approximation: Representing Model Uncertainty in Deep Learningcited by 4,430
- 2016Simple and Scalable Predictive Uncertainty Estimation using Deep Ensemblescited by 3,902
- 2019CutMix: Regularization Strategy to Train Strong Classifiers with Localizable Featurescited by 2,882
38 more
- 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,862
- 2016A Baseline for Detecting Misclassified and Out-of-Distribution Examples in Neural Networkscited by 2,371
- 2013Deep Inside Convolutional Networks: Visualising Image Classification Models and Saliency Mapscited by 2,360
- 2017What Uncertainties Do We Need in Bayesian Deep Learning for Computer Vision?cited by 2,340
- 2013Visualizing and Understanding Convolutional Networkscited by 2,282
- 2019RandAugment: Practical automated data augmentation with a reduced search spacecited by 2,266
- 2014Unsupervised Domain Adaptation by Backpropagationcited by 1,909
- 2020The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalizationcited by 1,847
- 2016OpenAI Gymcited by 1,694
- 2020YOLOv4: Optimal Speed and Accuracy of Object Detectioncited by 1,628
- 2016Concrete Problems in AI Safetycited by 1,614
- 2019Explainable Artificial Intelligence (XAI): Concepts, Taxonomies, Opportunities and Challenges toward Responsible AIcited by 1,547
- 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,511
- 2019Do ImageNet Classifiers Generalize to ImageNet?cited by 1,510
- 2018A Simple Unified Framework for Detecting Out-of-Distribution Samples and Adversarial Attackscited by 1,475
- 2017Learning Important Features Through Propagating Activation Differencescited by 1,455
- 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,445
- 2018ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustnesscited by 1,430
- 2017Domain Randomization for Transferring Deep Neural Networks from Simulation to the Real Worldcited by 1,411
- 2017Towards A Rigorous Science of Interpretable Machine Learningcited by 1,410
- 2019Natural Adversarial Examplescited by 1,405
- 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,336
- 2017Interpretability Beyond Feature Attribution: Quantitative Testing with Concept Activation Vectors (TCAV)cited by 1,316
- 2020Energy-based Out-of-distribution Detectioncited by 1,297
- 2019Can You Trust Your Model's Uncertainty? Evaluating Predictive Uncertainty Under Dataset Shiftcited by 1,278
- 2018Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examplescited by 1,265
- 2017Random Erasing Data Augmentationcited by 1,238
- 2014How transferable are features in deep neural networks?cited by 1,219
- 2018Sanity Checks for Saliency Mapscited by 1,152
- 2017SmoothGrad: removing noise by adding noisecited by 1,103
- 2018Co-teaching: Robust Training of Deep Neural Networks with Extremely Noisy Labelscited by 1,055
- 2019Learning Robust Global Representations by Penalizing Local Predictive Powercited by 1,012
- 2014Striving for Simplicity: The All Convolutional Netcited by 989
- 2019When Does Label Smoothing Help?cited by 986
- 2017Deeper, Broader and Artier Domain Generalizationcited by 984
- 2018Deep Anomaly Detection with Outlier Exposurecited by 941
- 2017Virtual Adversarial Training: A Regularization Method for Supervised and Semi-Supervised Learningcited by 919
- 2019AugMix: A Simple Data Processing Method to Improve Robustness and Uncertaintycited by 899
50 most cited of 219 All 219 (JSON)
Built on by
Citing papers per year: 2023: 3; 2024: 7; 2025: 6; 2026: 7.
23 papers.
Sort:
By area:
- 2023Connecting the Dots in Trustworthy Artificial Intelligence: From AI Principles, Ethics, and Key Requirements to Responsible AI Systems and Regulationcited by 60
- 2024Risks of AI Scientists: Prioritizing Safeguarding Over Autonomycited by 49
- 2025TALES: A Taxonomy and Analysis of Cultural Representations in LLM-generated Storiescited by 10
- 2024Evaluation of Out-of-Distribution Detection Performance on Autonomous Driving Datasetscited by 5
- 2024System Safety Monitoring of Learned Components Using Temporal Metric Forecastingcited by 4
- 2023You Don't Need Robust Machine Learning to Manage Adversarial Attack Riskscited by 3
- 2024Safety Monitoring of Machine Learning Perception Functions: a Surveycited by 3
- 2025A Benchmark and Evaluation for Real-World Out-of-Distribution Detection Using Vision-Language Modelscited by 3
- 2025Out-of-Distribution Detection for Safety Assurance of AI and Autonomous Systemscited by 2
- 2025Runtime Safety Monitoring of Deep Neural Networks for Perception: A Surveycited by 2
- 2026Fed-ADE: Adaptive Learning Rate for Federated Post-adaptation under Distribution Shiftcited by 2
- 2023The Chai Platform's AI Safety Frameworkcited by 1
11 more
- 2024Machine Learning Operations: A Mapping Studycited by 1
- 2024SoK: Towards Security and Safety of Edge AIcited by 1
- 2024Revisiting Energy-Based Model for Out-of-Distribution Detectioncited by 0
- 2025Detecting underdetermination in parameterized quantum circuitscited by 0
- 2025Information Theory in Open-world Machine Learning Foundations, Frameworks, and Future Directioncited by 0
- 2026Responsible AI for General-Purpose Systems: Overview, Challenges, and A Path Forwardcited by 0
- 2026Synergistic Simplex: Cooperative Runtime Assurance for Safety-Critical Autonomous Systemscited by 0
- 2026AESOP: Adversarial Execution-path Selection to Overload Deep Learning Pipelinescited by 0
- 2026A Unified Causal-Origin Taxonomy of Distributional Shifts in Reinforcement Learningcited by 0
- 2026A Deterministic and Auditable AI Security Risk Assessment Framework with ATLAS Aligned Executable Rules and Formal Verificationcited by 0
- 2026Dependable AI-Assisted Engineering: A Formal Framework for AI Participation and Assurance in Safety-Critical Workflowscited by 0
- 2026Dependable AI-Assisted Engineering: A Formal Framework for AI Participation and Assurance in Safety-Critical Workflows2 Oct 2026
- 2026A Deterministic and Auditable AI Security Risk Assessment Framework with ATLAS Aligned Executable Rules and Formal Verification1 Oct 2026
- 2026A Unified Causal-Origin Taxonomy of Distributional Shifts in Reinforcement Learning15 Jun 2026
- 2026AESOP: Adversarial Execution-path Selection to Overload Deep Learning Pipelines9 May 2026
- 2026Synergistic Simplex: Cooperative Runtime Assurance for Safety-Critical Autonomous Systems5 May 2026
- 2026Fed-ADE: Adaptive Learning Rate for Federated Post-adaptation under Distribution Shift1 Mar 2026
- 2026Responsible AI for General-Purpose Systems: Overview, Challenges, and A Path Forward19 Jan 2026
- 2025TALES: A Taxonomy and Analysis of Cultural Representations in LLM-generated Stories26 Nov 2025
- 2025Runtime Safety Monitoring of Deep Neural Networks for Perception: A Survey8 Nov 2025
- 2025Out-of-Distribution Detection for Safety Assurance of AI and Autonomous Systems24 Oct 2025
- 2025Information Theory in Open-world Machine Learning Foundations, Frameworks, and Future Direction17 Oct 2025
- 2025Detecting underdetermination in parameterized quantum circuits4 Apr 2025
11 more
- 2025A Benchmark and Evaluation for Real-World Out-of-Distribution Detection Using Vision-Language Models30 Jan 2025
- 2024Safety Monitoring of Machine Learning Perception Functions: a Survey9 Dec 2024
- 2024Revisiting Energy-Based Model for Out-of-Distribution Detection4 Dec 2024
- 2024SoK: Towards Security and Safety of Edge AI7 Oct 2024
- 2024Machine Learning Operations: A Mapping Study28 Sep 2024
- 2024System Safety Monitoring of Learned Components Using Temporal Metric Forecasting21 May 2024
- 2024Risks of AI Scientists: Prioritizing Safeguarding Over Autonomy6 Feb 2024
- 2024Evaluation of Out-of-Distribution Detection Performance on Autonomous Driving Datasets30 Jan 2024
- 2023You Don't Need Robust Machine Learning to Manage Adversarial Attack Risks16 Jun 2023
- 2023The Chai Platform's AI Safety Framework5 Jun 2023
- 2023Connecting the Dots in Trustworthy Artificial Intelligence: From AI Principles, Ethics, and Key Requirements to Responsible AI Systems and Regulation2 May 2023
- 2023Connecting the Dots in Trustworthy Artificial Intelligence: From AI Principles, Ethics, and Key Requirements to Responsible AI Systems and Regulationcited by 60
- 2024Risks of AI Scientists: Prioritizing Safeguarding Over Autonomycited by 49
- 2025TALES: A Taxonomy and Analysis of Cultural Representations in LLM-generated Storiescited by 10
- 2024Evaluation of Out-of-Distribution Detection Performance on Autonomous Driving Datasetscited by 5
- 2024System Safety Monitoring of Learned Components Using Temporal Metric Forecastingcited by 4
- 2023You Don't Need Robust Machine Learning to Manage Adversarial Attack Riskscited by 3
- 2024Safety Monitoring of Machine Learning Perception Functions: a Surveycited by 3
- 2025Out-of-Distribution Detection for Safety Assurance of AI and Autonomous Systemscited by 2
- 2025Runtime Safety Monitoring of Deep Neural Networks for Perception: A Surveycited by 2
- 2026Fed-ADE: Adaptive Learning Rate for Federated Post-adaptation under Distribution Shiftcited by 2
- 2023The Chai Platform's AI Safety Frameworkcited by 1
- 2024Machine Learning Operations: A Mapping Studycited by 1
12 most cited of 21 All 21 (JSON)
- 2026Dependable AI-Assisted Engineering: A Formal Framework for AI Participation and Assurance in Safety-Critical Workflows2 Oct 2026
- 2026A Deterministic and Auditable AI Security Risk Assessment Framework with ATLAS Aligned Executable Rules and Formal Verification1 Oct 2026
- 2026AESOP: Adversarial Execution-path Selection to Overload Deep Learning Pipelines9 May 2026
- 2026Synergistic Simplex: Cooperative Runtime Assurance for Safety-Critical Autonomous Systems5 May 2026
- 2026Fed-ADE: Adaptive Learning Rate for Federated Post-adaptation under Distribution Shift1 Mar 2026
- 2026Responsible AI for General-Purpose Systems: Overview, Challenges, and A Path Forward19 Jan 2026
- 2025TALES: A Taxonomy and Analysis of Cultural Representations in LLM-generated Stories26 Nov 2025
- 2025Runtime Safety Monitoring of Deep Neural Networks for Perception: A Survey8 Nov 2025
- 2025Out-of-Distribution Detection for Safety Assurance of AI and Autonomous Systems24 Oct 2025
- 2025Information Theory in Open-world Machine Learning Foundations, Frameworks, and Future Direction17 Oct 2025
- 2025Detecting underdetermination in parameterized quantum circuits4 Apr 2025
- 2024Safety Monitoring of Machine Learning Perception Functions: a Survey9 Dec 2024
12 newest of 21 All 21 (JSON)