A Holistic Assessment of the Reliability of Machine Learning Systems
Not on the map. Why?
Abstract (arXiv)
As machine learning (ML) systems increasingly permeate high-stakes settings such as healthcare, transportation, military, and national security, concerns regarding their reliability have emerged. Despite notable progress, the performance of these systems can significantly diminish due to adversarial attacks or environmental changes, leading to overconfident predictions, failures to detect input faults, and an inability to generalize in unexpected scenarios. This paper proposes a holistic assessment methodology for the reliability of ML systems. Our framework evaluates five key properties: in-distribution accuracy, distribution-shift robustness, adversarial robustness, calibration, and out-of-distribution detection. A reliability score is also introduced and used to assess the overall system reliability. To provide insights into the performance of different algorithmic approaches, we identify and categorize state-of-the-art techniques, then evaluate a selection on real-world tasks using our proposed reliability metrics and reliability score. Our analysis of over 500 models reveals that designing for one metric does not necessarily constrain others but certain algorithmic techniques can improve reliability across multiple metrics simultaneously. This study contributes to a more comprehensive understanding of ML reliability and provides a roadmap for future research and development.
Key facts. Cited by 9 papers in the map (data through 14 Oct 2026). Builds on 115 of its 158 references that are in the map. First posted on arXiv 20 Jul 2023.
Builds on
115 of 158 references.
References · 115
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,364
- 2021Swin Transformer: Hierarchical Vision Transformer using Shifted Windowscited by 12,139
- 2019Momentum Contrast for Unsupervised Visual Representation Learningcited by 7,513
- 2021Masked Autoencoders Are Scalable Vision Learnerscited by 7,403
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2021Emerging Properties in Self-Supervised Vision Transformerscited by 6,968
- 2019EfficientNet: Rethinking Model Scaling for Convolutional Neural Networkscited by 6,442
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2022Generative Adversarial Networkscited by 5,627
38 more
- 2017On Calibration of Modern Neural Networkscited by 4,960
- 2020Training data-efficient image transformers & distillation through attentioncited by 4,586
- 2015Dropout as a Bayesian Approximation: Representing Model Uncertainty in Deep Learningcited by 4,448
- 2016Simple and Scalable Predictive Uncertainty Estimation using Deep Ensemblescited by 3,926
- 2021Scaling Up Visual and Vision-Language Representation Learning With Noisy Text Supervisioncited by 3,864
- 2022A ConvNet for the 2020scited by 3,579
- 2015Domain-Adversarial Training of Neural Networkscited by 3,044
- 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,877
- 2020Unsupervised Learning of Visual Features by Contrasting Cluster Assignmentscited by 2,857
- 2016A Baseline for Detecting Misclassified and Out-of-Distribution Examples in Neural Networkscited by 2,385
- 2021BEiT: BERT Pre-Training of Image Transformerscited by 2,375
- 2019RandAugment: Practical automated data augmentation with a reduced search spacecited by 2,269
- 2013Rich feature hierarchies for accurate object detection and semantic segmentationcited by 2,162
- 2020FixMatch: Simplifying Semi-Supervised Learning with Consistency and Confidencecited by 2,085
- 2019A Survey on Bias and Fairness in Machine Learningcited by 1,917
- 2019Invariant Risk Minimizationcited by 1,854
- 2020The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalizationcited by 1,850
- 2018Unsupervised Feature Learning via Non-Parametric Instance-level Discriminationcited by 1,845
- 2019Do ImageNet Classifiers Generalize to ImageNet?cited by 1,515
- 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,451
- 2020Sharpness-Aware Minimization for Efficiently Improving Generalizationcited by 1,417
- 2022Model soups: averaging weights of multiple fine-tuned models improves accuracy without increasing inference timecited by 1,396
- 2020WILDS: A Benchmark of in-the-Wild Distribution Shiftscited by 1,375
- 2017Enhancing The Reliability of Out-of-distribution Image Detection in Neural Networkscited by 1,328
- 2016Man is to Computer Programmer as Woman is to Homemaker? Debiasing Word Embeddingscited by 1,312
- 2019Self-training with Noisy Student improves ImageNet classificationcited by 1,311
- 2020Energy-based Out-of-distribution Detectioncited by 1,299
- 2022CoCa: Contrastive Captioners are Image-Text Foundation Modelscited by 1,274
- 2016Deep CORAL: Correlation Alignment for Deep Domain Adaptationcited by 1,200
- 2022Reproducible scaling laws for contrastive language-image learningcited by 1,173
- 2021SimMIM: A Simple Framework for Masked Image Modelingcited by 1,153
- 2017BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chaincited by 1,106
- 2015Unsupervised Visual Representation Learning by Context Predictioncited by 1,066
- 2020In Search of Lost Domain Generalizationcited by 1,054
- 2020Concept Bottleneck Modelscited by 1,032
- 2019Adversarial Examples Are Not Bugs, They Are Featurescited by 953
- 2016Semantics derived automatically from language corpora contain human-like biasescited by 901
- 2018Robustness May Be at Odds with Accuracycited by 880
50 most cited of 115 All 115 (JSON)
Built on by
Citing papers per year: 2023: 1; 2024: 3; 2025: 4; 2026: 1.
9 papers.
- 2024The Necessity of AI Audit Standards Boardscited by 9
- 2025Benchmarking is Broken -- Don't Let AI be its Own Judgecited by 8
- 2024Probabilistic Parameter Estimators and Calibration Metrics for Pose Estimation from Image Featurescited by 5
- 2025Predictive Uncertainty for Runtime Assurance of a Real-Time Computer Vision-Based Landing Systemcited by 3
- 2026STABLEVAL: Disagreement-Aware and Stable Evaluation of AI Systemscited by 3
- 2025What Is AI Safety? What Do We Want It to Be?cited by 2
- 2024drGT: Attention-Guided Gene Assessment of Drug Response Utilizing a Drug-Cell-Gene Heterogeneous Networkcited by 1
- 2025Human-AI Interaction and User Satisfaction: Empirical Evidence from Online Reviews of AI Productscited by 1
- 2023Plant Disease Recognition Datasets in the Age of Deep Learning: Challenges and Opportunitiescited by 0
- 2026STABLEVAL: Disagreement-Aware and Stable Evaluation of AI Systems4 May 2026
- 2025Benchmarking is Broken -- Don't Let AI be its Own Judge8 Oct 2025
- 2025Predictive Uncertainty for Runtime Assurance of a Real-Time Computer Vision-Based Landing System13 Aug 2025
- 2025What Is AI Safety? What Do We Want It to Be?5 May 2025
- 2025Human-AI Interaction and User Satisfaction: Empirical Evidence from Online Reviews of AI Products23 Mar 2025
- 2024Probabilistic Parameter Estimators and Calibration Metrics for Pose Estimation from Image Features23 Jul 2024
- 2024drGT: Attention-Guided Gene Assessment of Drug Response Utilizing a Drug-Cell-Gene Heterogeneous Network14 May 2024
- 2024The Necessity of AI Audit Standards Boards11 Apr 2024
- 2023Plant Disease Recognition Datasets in the Age of Deep Learning: Challenges and Opportunities13 Dec 2023