A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarking
Not on the map. Why?
Abstract (arXiv)
Deep neural networks (DNNs) have found widespread applications in interpreting remote sensing (RS) imagery. However, it has been demonstrated in previous works that DNNs are vulnerable to different types of noises, particularly adversarial noises. Surprisingly, there has been a lack of comprehensive studies on the robustness of RS tasks, prompting us to undertake a thorough survey and benchmark on the robustness of image classification and object detection in RS. To our best knowledge, this study represents the first comprehensive examination of both natural robustness and adversarial robustness in RS tasks. Specifically, we have curated and made publicly available datasets that contain natural and adversarial noises. These datasets serve as valuable resources for evaluating the robustness of DNNs-based models. To provide a comprehensive assessment of model robustness, we conducted meticulous experiments with numerous different classifiers and detectors, encompassing a wide range of mainstream methods. Through rigorous evaluation, we have uncovered insightful and intriguing findings, which shed light on the relationship between adversarial noise crafting and model training, yielding a deeper understanding of the susceptibility and limitations of various models, and providing guidance for the development of more resilient and robust models
Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Builds on 188 of its 283 references that are in the map. First posted on arXiv 21 Jun 2023.
Builds on
188 of 283 references.
References · 188
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
- 2015U-Net: Convolutional Networks for Biomedical Image Segmentationcited by 19,713
- 2021Swin Transformer: Hierarchical Vision Transformer using Shifted Windowscited by 12,139
- 2015Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networkscited by 9,639
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2017Mask R-CNNcited by 7,277
- 2016Densely Connected Convolutional Networkscited by 6,720
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2013Intriguing properties of neural networkscited by 5,155
- 2018MobileNetV2: Inverted Residuals and Linear Bottleneckscited by 4,795
- 2015SSD: Single Shot MultiBox Detectorcited by 3,130
38 more
- 2016Wide Residual Networkscited by 3,070
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,998
- 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,877
- 2018YOLOv3: An Incremental Improvementcited by 2,659
- 2016Aggregated Residual Transformations for Deep Neural Networkscited by 2,546
- 2019Searching for MobileNetV3cited by 1,994
- 2020The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalizationcited by 1,850
- 2016Adversarial examples in the physical worldcited by 1,769
- 2019Do ImageNet Classifiers Generalize to ImageNet?cited by 1,515
- 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,451
- 2018ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustnesscited by 1,432
- 2016YOLO9000: Better, Faster, Strongercited by 1,431
- 2019Natural Adversarial Examplescited by 1,408
- 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,318
- 2018ShuffleNet V2: Practical Guidelines for Efficient CNN Architecture Designcited by 1,136
- 2019Learning Robust Global Representations by Penalizing Local Predictive Powercited by 1,013
- 2019Adversarial Examples Are Not Bugs, They Are Featurescited by 953
- 2016Practical Black-Box Attacks against Machine Learningcited by 903
- 2015The Limitations of Deep Learning in Adversarial Settingscited by 790
- 2016Universal adversarial perturbationscited by 784
- 2017ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Modelscited by 666
- 2017DOTA: A Large-scale Dataset for Object Detection in Aerial Imagescited by 623
- 2018Improving Transferability of Adversarial Examples with Input Diversitycited by 599
- 2017One pixel attack for fooling deep neural networkscited by 582
- 2019Bridging the Gap Between Anchor-based and Anchor-free Detection via Adaptive Training Sample Selectioncited by 540
- 2016Delving into Transferable Adversarial Examples and Black-box Attackscited by 536
- 2018Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networkscited by 519
- 2017Adversarial Patchcited by 517
- 2018Black-box Adversarial Attacks with Limited Queries and Informationcited by 501
- 2018Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Surveycited by 460
- 2020Measuring Robustness to Natural Distribution Shifts in Image Classificationcited by 454
- 2019Cascade R-CNN: High Quality Object Detection and Instance Segmentationcited by 429
- 2022AdaFace: Quality Adaptive Margin for Face Recognitioncited by 391
- 2019Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attackscited by 355
- 2020Invisible Backdoor Attack with Sample-Specific Triggerscited by 353
- 2016AID: A Benchmark Dataset for Performance Evaluation of Aerial Scene Classificationcited by 347
- 2019Object Detection in Optical Remote Sensing Images: A Survey and A New Benchmarkcited by 340
- 2019HopSkipJumpAttack: A Query-Efficient Decision-Based Attackcited by 333
50 most cited of 188 All 188 (JSON)
Built on by
Citing papers per year: 2023: 2; 2024: 1; 2025: 2.
5 papers.
- 2023Better, Not Just More: Data-Centric Machine Learning for Earth Observationcited by 19
- 2025REOBench: Benchmarking Robustness of Earth Observation Foundation Modelscited by 15
- 2023Universal Adversarial Defense in Remote Sensing Based on Pre-trained Denoising Diffusion Modelscited by 5
- 2024Attack Anything: Blind DNNs via Universal Background Adversarial Attackcited by 3
- 2025Adversarial Robustness of Deep Learning Models for Inland Water Body Segmentation from SAR Imagescited by 2
- 2025REOBench: Benchmarking Robustness of Earth Observation Foundation Models22 May 2025
- 2025Adversarial Robustness of Deep Learning Models for Inland Water Body Segmentation from SAR Images3 May 2025
- 2024Attack Anything: Blind DNNs via Universal Background Adversarial Attack17 Aug 2024
- 2023Better, Not Just More: Data-Centric Machine Learning for Earth Observation8 Dec 2023
- 2023Universal Adversarial Defense in Remote Sensing Based on Pre-trained Denoising Diffusion Models31 Jul 2023