Unifying Evaluation of Machine Learning Safety Monitors
Not on the map. Why?
Abstract (arXiv)
With the increasing use of Machine Learning (ML) in critical autonomous systems, runtime monitors have been developed to detect prediction errors and keep the system in a safe state during operations. Monitors have been proposed for different applications involving diverse perception tasks and ML models, and specific evaluation procedures and metrics are used for different contexts. This paper introduces three unified safety-oriented metrics, representing the safety benefits of the monitor (Safety Gain), the remaining safety gaps after using it (Residual Hazard), and its negative impact on the system's performance (Availability Cost). To compute these metrics, one requires to define two return functions, representing how a given ML prediction will impact expected future rewards and hazards. Three use-cases (classification, drone landing, and autonomous driving) are used to demonstrate how metrics from the literature can be expressed in terms of the proposed metrics. Experimental results on these examples show how different evaluation choices impact the perceived performance of a monitor. As our formalism requires us to formulate explicit safety assumptions, it allows us to ensure that the evaluation conducted matches the high-level system requirements.
Key facts. Cited by 10 papers in the map (data through 14 Oct 2026). Builds on 19 of its 36 references that are in the map. First posted on arXiv 31 Aug 2022.
Builds on
19 of 36 references.
References · 19
- 2014Microsoft COCO: Common Objects in Contextcited by 17,608
- 2017CARLA: An Open Urban Driving Simulatorcited by 2,449
- 2016A Baseline for Detecting Misclassified and Out-of-Distribution Examples in Neural Networkscited by 2,385
- 2017Enhancing The Reliability of Out-of-distribution Image Detection in Neural Networkscited by 1,328
- 2018Albumentations: fast and flexible image augmentationscited by 560
- 2021ReAct: Out-of-distribution Detection With Rectified Activationscited by 486
- 2020Generalized ODIN: Detecting Out-of-distribution Image without Learning from Out-of-distribution Datacited by 408
- 2019SelectiveNet: A Deep Neural Network with an Integrated Reject Optioncited by 350
- 2019Misbehaviour Prediction for Autonomous Driving Systemscited by 55
- 2021DOCTOR: A Simple Method for Detecting Misclassification Errorscited by 53
- 2018Adversarial Sample Detection for Deep Neural Network through Model Mutation Testingcited by 48
- 2018Runtime Monitoring Neuron Activation Patternscited by 34
7 more
- 2021Run-Time Monitoring of Machine Learning for Robotic Perception: A Survey of Emerging Trendscited by 26
- 2020Into the Unknown: Active Monitoring of Neural Networkscited by 19
- 2019Practical Solutions for Machine Learning Safety in Autonomous Vehiclescited by 15
- 2021Benchmarking Safety Monitors for Image Classifiers with Machine Learningcited by 14
- 2021Certifying Emergency Landing for Safe Urban UAVcited by 6
- 2021Fault-Tolerant Perception for Automated Driving A Lightweight Monitoring Approachcited by 5
- 2022Evaluation of Runtime Monitoring for UAV Emergency Landingcited by 4
Built on by
Citing papers per year: 2022: 1; 2023: 1; 2024: 3; 2025: 2; 2026: 3.
10 papers.
- 2022Out-Of-Distribution Detection Is Not All You Needcited by 23
- 2025Combining Cost-Constrained Runtime Monitors for AI Safetycited by 10
- 2024Online Safety Analysis for LLMs: a Benchmark, an Assessment, and a Path Forwardcited by 6
- 2024Safety Monitoring of Machine Learning Perception Functions: a Surveycited by 3
- 2024Can we Defend Against the Unknown? An Empirical Study About Threshold Selection for Neural Network Monitoringcited by 2
- 2023Ensembling Uncertainty Measures to Improve Safety of Black-Box Classifierscited by 0
- 2025Explaining Unreliable Perception in Automated Driving: A Fuzzy-based Monitoring Approachcited by 0
- 2026Unifying Runtime Monitoring Approaches for Safety-Critical Machine Learning: Application to Vision-Based Landingcited by 0
- 2026Discriminating Fixture Coverage in Agent-Infrastructure Verification Suitescited by 0
- 2026From Probe Scores to Alarm Policies: Operational Validity of Activation Monitors for Language-Model Agentscited by 0
- 2026From Probe Scores to Alarm Policies: Operational Validity of Activation Monitors for Language-Model Agents3 Oct 2026
- 2026Discriminating Fixture Coverage in Agent-Infrastructure Verification Suites2 Oct 2026
- 2026Unifying Runtime Monitoring Approaches for Safety-Critical Machine Learning: Application to Vision-Based Landing29 Apr 2026
- 2025Combining Cost-Constrained Runtime Monitors for AI Safety19 Jul 2025
- 2025Explaining Unreliable Perception in Automated Driving: A Fuzzy-based Monitoring Approach20 May 2025
- 2024Safety Monitoring of Machine Learning Perception Functions: a Survey9 Dec 2024
- 2024Can we Defend Against the Unknown? An Empirical Study About Threshold Selection for Neural Network Monitoring14 May 2024
- 2024Online Safety Analysis for LLMs: a Benchmark, an Assessment, and a Path Forward12 Apr 2024
- 2023Ensembling Uncertainty Measures to Improve Safety of Black-Box Classifiers23 Aug 2023
- 2022Out-Of-Distribution Detection Is Not All You Need29 Nov 2022