Robust One-Class Classification with Signed Distance Function using 1-Lipschitz Neural Networks
Not on the map. Why?
Abstract (arXiv)
We propose a new method, dubbed One Class Signed Distance Function (OCSDF), to perform One Class Classification (OCC) by provably learning the Signed Distance Function (SDF) to the boundary of the support of any distribution. The distance to the support can be interpreted as a normality score, and its approximation using 1-Lipschitz neural networks provides robustness bounds against l2 adversarial attacks, an under-explored weakness of deep learning-based OCC algorithms. As a result, OCSDF comes with a new metric, certified AUROC, that can be computed at the same cost as any classical AUROC. We show that OCSDF is competitive against concurrent methods on tabular and image data while being way more robust to adversarial attacks, illustrating its theoretical properties. Finally, as exploratory research perspectives, we theoretically and empirically show how OCSDF connects OCC with image generation and implicit neural surface parametrization. Our code is available at https://github.com/Algue-Rythme/OneClassMetricLearning
Key facts. Cited by 10 papers in the map (data through 7 Oct 2026). Builds on 54 of its 92 references that are in the map. First posted on arXiv 26 Jan 2023.
Builds on
54 of 92 references.
References · 54
- 2020Denoising Diffusion Probabilistic Modelscited by 20,851
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2013Intriguing properties of neural networkscited by 5,114
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
- 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,857
- 2019DeepSDF: Learning Continuous Signed Distance Functions for Shape Representationcited by 2,682
- 2016A Baseline for Detecting Misclassified and Out-of-Distribution Examples in Neural Networkscited by 2,362
- 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,510
- 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,324
- 2018Deep Anomaly Detection with Outlier Exposurecited by 939
- 2019Adversarial Training for Free!cited by 638
38 more
- 2017Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Modelscited by 459
- 2020Generalized ODIN: Detecting Out-of-distribution Image without Learning from Out-of-distribution Datacited by 408
- 2017Training Confidence-calibrated Classifiers for Detecting Out-of-Distribution Samplescited by 389
- 2019SAL: Sign Agnostic Learning of Shapes from Raw Datacited by 389
- 2017Nearly-tight VC-dimension and pseudodimension bounds for piecewise linear neural networkscited by 304
- 2021Exploring the Limits of Out-of-Distribution Detectioncited by 283
- 2021Recent Advances in Adversarial Training for Adversarial Robustnesscited by 276
- 2018Deep Anomaly Detection Using Geometric Transformationscited by 269
- 2022ADBench: Anomaly Detection Benchmarkcited by 230
- 2021Beta-CROWN: Efficient Bound Propagation with Per-neuron Split Constraints for Complete and Incomplete Neural Network Robustness Verificationcited by 224
- 2019PyOD: A Python Toolbox for Scalable Outlier Detectioncited by 221
- 2018Sorting out Lipschitz function approximationcited by 211
- 2020Classification-Based Anomaly Detection for General Datacited by 210
- 2018Adversarially Learned One-Class Classifier for Novelty Detectioncited by 202
- 2018Lipschitz-Margin Training: Scalable Certification of Perturbation Invariance for Deep Neural Networkscited by 193
- 2022(Certified!!) Adversarial Robustness for Free!cited by 130
- 2019Orthogonal Convolutional Neural Networkscited by 122
- 2020DROCC: Deep Robust One-Class Classificationcited by 121
- 2018Adversarially Learned Anomaly Detectioncited by 115
- 2021Orthogonalizing Convolutional Layers with the Cayley Transformcited by 105
- 2020Exactly Computing the Local Lipschitz Constant of ReLU Networkscited by 102
- 2019Preventing Gradient Attenuation in Lipschitz Constrained Convolutional Networkscited by 86
- 2019Orthogonal Deep Neural Networkscited by 72
- 2021Skew Orthogonal Convolutionscited by 67
- 2020G2D: Generate to Detect Anomalycited by 42
- 2022LOT: Layer-wise Orthogonal Training on Improving ℓ2 Certified Robustnesscited by 32
- 2021Pay attention to your loss: understanding misconceptions about 1-Lipschitz neural networkscited by 30
- 2022GenSDF: Two-Stage Learning of Generalizable Signed Distance Functionscited by 30
- 2020Approximating Lipschitz continuous functions with GroupSort neural networkscited by 27
- 2020Achieving robustness in classification using optimal transport with hinge regularizationcited by 27
- 2020Interpretable, Multidimensional, Multimodal Anomaly Detection with Negative Sampling for Detection of Device Failurecited by 27
- 2018Multi-chart Generative Surface Modelingcited by 26
- 2022Exploring Differential Geometry in Neural Implicitscited by 26
- 2021Adversarially Robust One-class Novelty Detectioncited by 24
- 2022Hyperparameter Sensitivity in Deep Outlier Detection: Analysis and a Scalable Hyper-Ensemble Solutioncited by 24
- 2021Existence, Stability and Scalability of Orthogonal Convolutional Neural Networkscited by 16
- 2022Your Out-of-Distribution Detection Method is Not Robust!cited by 16
- 2021Convolutional Normalization: Improving Deep Convolutional Network Robustness and Trainingcited by 15
50 most cited of 54 All 54 (JSON)
Built on by
Citing papers per year: 2023: 1; 2024: 3; 2025: 6.
10 papers.
- 20241-Lipschitz Neural Distance Fieldscited by 8
- 2025PatchGuard: Adversarially Robust Anomaly Detection and Localization through Vision Transformers and Pseudo Anomaliescited by 8
- 2025RODEO: Robust Outlier Detection via Exposing Adaptive Out-of-Distribution Samplescited by 7
- 2025Follow the Energy, Find the Path: Riemannian Metrics from Energy-Based Modelscited by 7
- 2024Adversarially Robust Out-of-Distribution Detection Using Lyapunov-Stabilized Embeddingscited by 6
- 2025Killing it with Zero-Shot: Adversarially Robust Novelty Detectioncited by 4
- 2025Scanning Trojaned Models Using Out-of-Distribution Samplescited by 3
- 2023DP-SGD with weight clippingcited by 1
- 2024Solving robust MDPs as a sequence of static RL problemscited by 1
- 2025HALO: Robust Out-of-Distribution Detection via Joint Optimisationcited by 0
- 2025PatchGuard: Adversarially Robust Anomaly Detection and Localization through Vision Transformers and Pseudo Anomalies10 Jun 2025
- 2025Follow the Energy, Find the Path: Riemannian Metrics from Energy-Based Models23 May 2025
- 2025HALO: Robust Out-of-Distribution Detection via Joint Optimisation27 Feb 2025
- 2025Scanning Trojaned Models Using Out-of-Distribution Samples28 Jan 2025
- 2025RODEO: Robust Outlier Detection via Exposing Adaptive Out-of-Distribution Samples28 Jan 2025
- 2025Killing it with Zero-Shot: Adversarially Robust Novelty Detection25 Jan 2025
- 2024Adversarially Robust Out-of-Distribution Detection Using Lyapunov-Stabilized Embeddings14 Oct 2024
- 2024Solving robust MDPs as a sequence of static RL problems8 Oct 2024
- 20241-Lipschitz Neural Distance Fields14 Jun 2024
- 2023DP-SGD with weight clipping27 Oct 2023