AI Security for Geoscience and Remote Sensing: Challenges and Future Trends
Not on the map. Why?
Abstract (arXiv)
Recent advances in artificial intelligence (AI) have significantly intensified research in the geoscience and remote sensing (RS) field. AI algorithms, especially deep learning-based ones, have been developed and applied widely to RS data analysis. The successful application of AI covers almost all aspects of Earth observation (EO) missions, from low-level vision tasks like super-resolution, denoising and inpainting, to high-level vision tasks like scene classification, object detection and semantic segmentation. While AI techniques enable researchers to observe and understand the Earth more accurately, the vulnerability and uncertainty of AI models deserve further attention, considering that many geoscience and RS tasks are highly safety-critical. This paper reviews the current development of AI security in the geoscience and RS field, covering the following five important aspects: adversarial attack, backdoor attack, federated learning, uncertainty and explainability. Moreover, the potential opportunities and trends are discussed to provide insights for future research. To the best of the authors' knowledge, this paper is the first attempt to provide a systematic review of AI security-related research in the geoscience and RS community. Available code and datasets are also listed in the paper to move this vibrant field of research forward.
Key facts. Cited by 23 papers in the map (data through 7 Oct 2026). Builds on 59 of its 160 references that are in the map. First posted on arXiv 19 Dec 2022.
Builds on
59 of 160 references.
References · 59
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
- 2016Communication-Efficient Learning of Deep Networks from Decentralized Datacited by 7,592
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,690
- 2017A Unified Approach to Interpreting Model Predictionscited by 6,488
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2013Intriguing properties of neural networkscited by 5,114
- 2016"Why Should I Trust You?": Explaining the Predictions of Any Classifiercited by 5,040
- 2019Advances and Open Problems in Federated Learningcited by 3,021
- 2015Learning Deep Features for Discriminative Localizationcited by 2,430
- 2013Deep Inside Convolutional Networks: Visualising Image Classification Models and Saliency Mapscited by 2,348
- 2016Adversarial examples in the physical worldcited by 1,762
38 more
- 2019Federated Learning: Challenges, Methods, and Future Directionscited by 1,531
- 2017BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chaincited by 1,052
- 2017Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoningcited by 1,012
- 2017Grad-CAM++: Improved Visual Explanations for Deep Convolutional Networkscited by 936
- 2017Remote Sensing Image Scene Classification: Benchmark and State of the Artcited by 791
- 2018Evidential Deep Learning to Quantify Classification Uncertaintycited by 728
- 2021A Survey of Uncertainty in Deep Neural Networkscited by 675
- 2018Improving Transferability of Adversarial Examples with Input Diversitycited by 591
- 2018Predictive Uncertainty Estimation via Prior Networkscited by 555
- 2018Explaining Explanations: An Overview of Interpretability of Machine Learningcited by 508
- 2017Interpretation of Neural Networks is Fragilecited by 443
- 2020Backdoor Learning: A Surveycited by 412
- 2019Federated Machine Learning: Concept and Applicationscited by 409
- 2019A Survey on Federated Learning Systems: Vision, Hype and Reality for Data Privacy and Protectioncited by 371
- 2019Hidden Trigger Backdoor Attackscited by 359
- 2020Invisible Backdoor Attack with Sample-Specific Triggerscited by 338
- 2019Label-Consistent Backdoor Attackscited by 285
- 2021Recent Advances in Adversarial Training for Adversarial Robustnesscited by 276
- 2020Opportunities and Challenges in Explainable Artificial Intelligence (XAI): A Surveycited by 252
- 2021Object Detection in Aerial Images: A Large-Scale Benchmark and Challengescited by 202
- 2020RSVQA: Visual Question Answering for Remote Sensing Datacited by 197
- 2017Exploring Models and Data for Remote Sensing Image Caption Generationcited by 195
- 2019FedHealth: A Federated Transfer Learning Framework for Wearable Healthcarecited by 182
- 2019SecureBoost: A Lossless Federated Learning Frameworkcited by 174
- 2017Neural Trojanscited by 151
- 2017Deep learning in remote sensing: a reviewcited by 128
- 2019On Empirical Comparisons of Optimizers for Deep Learningcited by 99
- 2018Is feature selection secure against training data poisoning?cited by 88
- 2021Recent Advances in Domain Adaptation for the Classification of Remote Sensing Datacited by 70
- 2020Multi-Task Federated Learning for Personalised Deep Neural Networks in Edge Computingcited by 52
- 2020Non-local Meets Global: An Iterative Paradigm for Hyperspectral Image Restorationcited by 43
- 2020Stop-and-Go: Exploring Backdoor Attacks on Deep Reinforcement Learning-based Traffic Congestion Control Systemscited by 35
- 2019Unsupervised Domain Adaptation using Generative Adversarial Networks for Semantic Segmentation of Aerial Imagescited by 32
- 2022SEN12MS-CR-TS: A Remote Sensing Data Set for Multi-modal Multi-temporal Cloud Removalcited by 32
- 2022Txt2Img-MHN: Remote Sensing Image Generation from Text Using Modern Hopfield Networkscited by 28
- 2021Towards a Collective Agenda on AI for Earth Science Data Analysiscited by 27
- 2021Evaluating explainable artificial intelligence methods for multi-label deep learning classification tasks in remote sensingcited by 26
- 2022Universal Adversarial Examples in Remote Sensing: Methodology and Benchmarkcited by 24
50 most cited of 59 All 59 (JSON)
Built on by
Citing papers per year: 2023: 7; 2024: 8; 2025: 3; 2026: 5.
23 papers.
Sort:
By area:
- 2023The Segment Anything Model (SAM) for Remote Sensing Applications: From Zero to One Shotcited by 83
- 2024Diffusion Models Meet Remote Sensing: Principles, Methods, and Perspectivescited by 27
- 2024SeaMo: A Season-Aware Multimodal Foundation Model for Remote Sensingcited by 10
- 2023GlobalMind: Global Multi-head Interactive Self-attention Network for Hyperspectral Change Detectioncited by 9
- 2023Threatening Patch Attacks on Object Detection in Optical Remote Sensing Imagescited by 8
- 2024C2F-SemiCD: A Coarse-to-Fine Semi-Supervised Change Detection Method Based on Consistency Regularization in High-Resolution Remote Sensing Imagescited by 7
- 2024Dual Selective Fusion Transformer Network for Hyperspectral Image Classificationcited by 7
- 2023A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarkingcited by 5
- 2023Universal Adversarial Defense in Remote Sensing Based on Pre-trained Denoising Diffusion Modelscited by 5
- 2024Responsible AI for Earth Observationcited by 4
- 2023Quantitative Analysis of Primary Attribution Explainable Artificial Intelligence Methods for Remote Sensing Image Classificationcited by 2
- 2024Cloud Adversarial Example Generation for Remote Sensing Image Classificationcited by 2
11 more
- 2024Towards Assessing the Synthetic-to-Measured Adversarial Vulnerability of SAR ATRcited by 1
- 2025On the Adversarial Vulnerabilities of Transfer Learning in Remote Sensingcited by 1
- 2026Towards Realistic Remote Sensing Dataset Distillation with Discriminative Prototype-guided Diffusioncited by 1
- 2026Physically-Induced Atmospheric Adversarial Perturbations: Enhancing Transferability and Robustness in Remote Sensing Image Classificationcited by 1
- 2023Can Deep Network Balance Copy-Move Forgery Detection and Distinguishment?cited by 0
- 2024Elevator, Escalator, or Neither? Classifying Conveyor State Using Smartphone under Arbitrary Pedestrian Behaviorcited by 0
- 2025Revisiting Adversarial Training under Hyperspectral Imagecited by 0
- 2025SatFusion: A Unified Framework for Enhancing Remote Sensing Images via Multi-Frame and Multi-Source Images Fusioncited by 0
- 2026FedEU: Evidential Uncertainty-Driven Federated Fine-Tuning of Vision Foundation Models for Remote Sensing Image Segmentationcited by 0
- 2026AirflowAttack: Thermal-Airflow Adversarial Perturbations against Infrared Remote-Sensing Vision-Language Modelscited by 0
- 2026On the Adversarial Robustness of Remote Sensing Semantic Change Detectioncited by 0
- 2026On the Adversarial Robustness of Remote Sensing Semantic Change Detection15 Aug 2026
- 2026AirflowAttack: Thermal-Airflow Adversarial Perturbations against Infrared Remote-Sensing Vision-Language Models7 Jul 2026
- 2026Physically-Induced Atmospheric Adversarial Perturbations: Enhancing Transferability and Robustness in Remote Sensing Image Classification16 Apr 2026
- 2026FedEU: Evidential Uncertainty-Driven Federated Fine-Tuning of Vision Foundation Models for Remote Sensing Image Segmentation8 Mar 2026
- 2026Towards Realistic Remote Sensing Dataset Distillation with Discriminative Prototype-guided Diffusion22 Jan 2026
- 2025SatFusion: A Unified Framework for Enhancing Remote Sensing Images via Multi-Frame and Multi-Source Images Fusion9 Oct 2025
- 2025Revisiting Adversarial Training under Hyperspectral Image1 Oct 2025
- 2025On the Adversarial Vulnerabilities of Transfer Learning in Remote Sensing20 Jan 2025
- 2024SeaMo: A Season-Aware Multimodal Foundation Model for Remote Sensing26 Dec 2024
- 2024Dual Selective Fusion Transformer Network for Hyperspectral Image Classification4 Oct 2024
- 2024Cloud Adversarial Example Generation for Remote Sensing Image Classification21 Sep 2024
- 2024Responsible AI for Earth Observation31 May 2024
11 more
- 2024Elevator, Escalator, or Neither? Classifying Conveyor State Using Smartphone under Arbitrary Pedestrian Behavior6 May 2024
- 2024C2F-SemiCD: A Coarse-to-Fine Semi-Supervised Change Detection Method Based on Consistency Regularization in High-Resolution Remote Sensing Images22 Apr 2024
- 2024Diffusion Models Meet Remote Sensing: Principles, Methods, and Perspectives13 Apr 2024
- 2024Towards Assessing the Synthetic-to-Measured Adversarial Vulnerability of SAR ATR30 Jan 2024
- 2023Universal Adversarial Defense in Remote Sensing Based on Pre-trained Denoising Diffusion Models31 Jul 2023
- 2023The Segment Anything Model (SAM) for Remote Sensing Applications: From Zero to One Shot29 Jun 2023
- 2023A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarking21 Jun 2023
- 2023Quantitative Analysis of Primary Attribution Explainable Artificial Intelligence Methods for Remote Sensing Image Classification6 Jun 2023
- 2023Can Deep Network Balance Copy-Move Forgery Detection and Distinguishment?17 May 2023
- 2023GlobalMind: Global Multi-head Interactive Self-attention Network for Hyperspectral Change Detection18 Apr 2023
- 2023Threatening Patch Attacks on Object Detection in Optical Remote Sensing Images13 Feb 2023
- 2024Diffusion Models Meet Remote Sensing: Principles, Methods, and Perspectivescited by 27
- 2023Universal Adversarial Defense in Remote Sensing Based on Pre-trained Denoising Diffusion Modelscited by 5
- 2026Towards Realistic Remote Sensing Dataset Distillation with Discriminative Prototype-guided Diffusioncited by 1
- 2026Towards Realistic Remote Sensing Dataset Distillation with Discriminative Prototype-guided Diffusion22 Jan 2026
- 2024Diffusion Models Meet Remote Sensing: Principles, Methods, and Perspectives13 Apr 2024
- 2023Universal Adversarial Defense in Remote Sensing Based on Pre-trained Denoising Diffusion Models31 Jul 2023
- 2023The Segment Anything Model (SAM) for Remote Sensing Applications: From Zero to One Shotcited by 83
- 2024SeaMo: A Season-Aware Multimodal Foundation Model for Remote Sensingcited by 10
- 2023GlobalMind: Global Multi-head Interactive Self-attention Network for Hyperspectral Change Detectioncited by 9
- 2023Threatening Patch Attacks on Object Detection in Optical Remote Sensing Imagescited by 8
- 2024C2F-SemiCD: A Coarse-to-Fine Semi-Supervised Change Detection Method Based on Consistency Regularization in High-Resolution Remote Sensing Imagescited by 7
- 2024Dual Selective Fusion Transformer Network for Hyperspectral Image Classificationcited by 7
- 2023A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarkingcited by 5
- 2024Responsible AI for Earth Observationcited by 4
- 2023Quantitative Analysis of Primary Attribution Explainable Artificial Intelligence Methods for Remote Sensing Image Classificationcited by 2
- 2024Cloud Adversarial Example Generation for Remote Sensing Image Classificationcited by 2
- 2024Towards Assessing the Synthetic-to-Measured Adversarial Vulnerability of SAR ATRcited by 1
- 2025On the Adversarial Vulnerabilities of Transfer Learning in Remote Sensingcited by 1
12 most cited of 19 All 19 (JSON)
- 2026On the Adversarial Robustness of Remote Sensing Semantic Change Detection15 Aug 2026
- 2026Physically-Induced Atmospheric Adversarial Perturbations: Enhancing Transferability and Robustness in Remote Sensing Image Classification16 Apr 2026
- 2026FedEU: Evidential Uncertainty-Driven Federated Fine-Tuning of Vision Foundation Models for Remote Sensing Image Segmentation8 Mar 2026
- 2025SatFusion: A Unified Framework for Enhancing Remote Sensing Images via Multi-Frame and Multi-Source Images Fusion9 Oct 2025
- 2025Revisiting Adversarial Training under Hyperspectral Image1 Oct 2025
- 2025On the Adversarial Vulnerabilities of Transfer Learning in Remote Sensing20 Jan 2025
- 2024SeaMo: A Season-Aware Multimodal Foundation Model for Remote Sensing26 Dec 2024
- 2024Dual Selective Fusion Transformer Network for Hyperspectral Image Classification4 Oct 2024
- 2024Cloud Adversarial Example Generation for Remote Sensing Image Classification21 Sep 2024
- 2024Responsible AI for Earth Observation31 May 2024
- 2024Elevator, Escalator, or Neither? Classifying Conveyor State Using Smartphone under Arbitrary Pedestrian Behavior6 May 2024
- 2024C2F-SemiCD: A Coarse-to-Fine Semi-Supervised Change Detection Method Based on Consistency Regularization in High-Resolution Remote Sensing Images22 Apr 2024
12 newest of 19 All 19 (JSON)