mlsanityData to 14 Oct 2026

A Comprehensive Study on the Robustness of Image Classification and Object Detection in Remote Sensing: Surveying and Benchmarking

arXiv 2306.12111 ↗First posted 21 Jun 2023cs.CVcited by 5

Not on the map. Why?

Abstract (arXiv)

Deep neural networks (DNNs) have found widespread applications in interpreting remote sensing (RS) imagery. However, it has been demonstrated in previous works that DNNs are vulnerable to different types of noises, particularly adversarial noises. Surprisingly, there has been a lack of comprehensive studies on the robustness of RS tasks, prompting us to undertake a thorough survey and benchmark on the robustness of image classification and object detection in RS. To our best knowledge, this study represents the first comprehensive examination of both natural robustness and adversarial robustness in RS tasks. Specifically, we have curated and made publicly available datasets that contain natural and adversarial noises. These datasets serve as valuable resources for evaluating the robustness of DNNs-based models. To provide a comprehensive assessment of model robustness, we conducted meticulous experiments with numerous different classifiers and detectors, encompassing a wide range of mainstream methods. Through rigorous evaluation, we have uncovered insightful and intriguing findings, which shed light on the relationship between adversarial noise crafting and model training, yielding a deeper understanding of the susceptibility and limitations of various models, and providing guidance for the development of more resilient and robust models

Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Builds on 188 of its 283 references that are in the map. First posted on arXiv 21 Jun 2023.

Builds on

188 of 283 references.

References · 188

  1. 2015Deep Residual Learning for Image Recognitioncited by 52,096
  2. 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
  3. 2015U-Net: Convolutional Networks for Biomedical Image Segmentationcited by 19,713
  4. 2021Swin Transformer: Hierarchical Vision Transformer using Shifted Windowscited by 12,139
  5. 2015Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networkscited by 9,639
  6. 2014Explaining and Harnessing Adversarial Examplescited by 7,364
  7. 2017Mask R-CNNcited by 7,277
  8. 2016Densely Connected Convolutional Networkscited by 6,720
  9. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
  10. 2013Intriguing properties of neural networkscited by 5,155
  11. 2018MobileNetV2: Inverted Residuals and Linear Bottleneckscited by 4,795
  12. 2015SSD: Single Shot MultiBox Detectorcited by 3,130
38 more
  1. 2016Wide Residual Networkscited by 3,070
  2. 2016Towards Evaluating the Robustness of Neural Networkscited by 2,998
  3. 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,877
  4. 2018YOLOv3: An Incremental Improvementcited by 2,659
  5. 2016Aggregated Residual Transformations for Deep Neural Networkscited by 2,546
  6. 2019Searching for MobileNetV3cited by 1,994
  7. 2020The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalizationcited by 1,850
  8. 2016Adversarial examples in the physical worldcited by 1,769
  9. 2019Do ImageNet Classifiers Generalize to ImageNet?cited by 1,515
  10. 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,451
  11. 2018ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustnesscited by 1,432
  12. 2016YOLO9000: Better, Faster, Strongercited by 1,431
  13. 2019Natural Adversarial Examplescited by 1,408
  14. 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,318
  15. 2018ShuffleNet V2: Practical Guidelines for Efficient CNN Architecture Designcited by 1,136
  16. 2019Learning Robust Global Representations by Penalizing Local Predictive Powercited by 1,013
  17. 2019Adversarial Examples Are Not Bugs, They Are Featurescited by 953
  18. 2016Practical Black-Box Attacks against Machine Learningcited by 903
  19. 2015The Limitations of Deep Learning in Adversarial Settingscited by 790
  20. 2016Universal adversarial perturbationscited by 784
  21. 2017ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Modelscited by 666
  22. 2017DOTA: A Large-scale Dataset for Object Detection in Aerial Imagescited by 623
  23. 2018Improving Transferability of Adversarial Examples with Input Diversitycited by 599
  24. 2017One pixel attack for fooling deep neural networkscited by 582
  25. 2019Bridging the Gap Between Anchor-based and Anchor-free Detection via Adaptive Training Sample Selectioncited by 540
  26. 2016Delving into Transferable Adversarial Examples and Black-box Attackscited by 536
  27. 2018Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networkscited by 519
  28. 2017Adversarial Patchcited by 517
  29. 2018Black-box Adversarial Attacks with Limited Queries and Informationcited by 501
  30. 2018Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Surveycited by 460
  31. 2020Measuring Robustness to Natural Distribution Shifts in Image Classificationcited by 454
  32. 2019Cascade R-CNN: High Quality Object Detection and Instance Segmentationcited by 429
  33. 2022AdaFace: Quality Adaptive Margin for Face Recognitioncited by 391
  34. 2019Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attackscited by 355
  35. 2020Invisible Backdoor Attack with Sample-Specific Triggerscited by 353
  36. 2016AID: A Benchmark Dataset for Performance Evaluation of Aerial Scene Classificationcited by 347
  37. 2019Object Detection in Optical Remote Sensing Images: A Survey and A New Benchmarkcited by 340
  38. 2019HopSkipJumpAttack: A Query-Efficient Decision-Based Attackcited by 333

50 most cited of 188 All 188 (JSON)

Built on by

Cited by year

Citing papers per year: 2023: 2; 2024: 1; 2025: 2.

5 papers.