Object Detectors in the Open Environment: Challenges, Solutions, and Outlook
Not on the map. Why?
Abstract (arXiv)
With the emergence of foundation models, deep learning-based object detectors have shown practical usability in closed set scenarios. However, for real-world tasks, object detectors often operate in open environments, where crucial factors (e.g., data distribution, objective) that influence model learning are often changing. The dynamic and intricate nature of the open environment poses novel and formidable challenges to object detectors. Unfortunately, current research on object detectors in open environments lacks a comprehensive analysis of their distinctive characteristics, challenges, and corresponding solutions, which hinders their secure deployment in critical real-world scenarios. This paper aims to bridge this gap by conducting a comprehensive review and analysis of object detectors in open environments. We initially identified limitations of key structural components within the existing detection pipeline and propose the open environment object detector challenge framework that includes four quadrants (i.e., out-of-domain, out-of-category, robust learning, and incremental learning) based on the dimensions of the data / target changes. For each quadrant of challenges in the proposed framework, we present a detailed description and systematic analysis of the overarching goals and core difficulties, systematically review the corresponding solutions, and benchmark their performance over multiple widely adopted datasets. In addition, we engage in a discussion of open problems and potential avenues for future research. This paper aims to provide a fresh, comprehensive, and systematic understanding of the challenges and solutions associated with open-environment object detectors, thus catalyzing the development of more solid applications in real-world scenarios. A project related to this survey can be found at https://github.com/LiangSiyuan21/OEOD_Survey.
Key facts. Cited by 13 papers in the map (data through 14 Oct 2026). Builds on 85 of its 366 references that are in the map. First posted on arXiv 24 Mar 2024.
Builds on
85 of 366 references.
References · 85
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2017mixup: Beyond Empirical Risk Minimizationcited by 5,183
- 2017Model-Agnostic Meta-Learning for Fast Adaptation of Deep Networkscited by 4,897
- 2020Deformable DETR: Deformable Transformers for End-to-End Object Detectioncited by 3,422
- 2020YOLOv4: Optimal Speed and Accuracy of Object Detectioncited by 1,630
- 2020Energy-based Out-of-distribution Detectioncited by 1,299
- 2021Open-vocabulary Object Detection via Vision and Language Knowledge Distillationcited by 906
- 2023A Comprehensive Survey of Continual Learning: Theory, Method and Applicationcited by 872
- 2020Fast is better than free: Revisiting adversarial trainingcited by 727
- 2019Object Detection in 20 Years: A Surveycited by 531
- 2018Learning to Learn without Forgetting by Maximizing Transfer and Minimizing Interferencecited by 521
- 2017Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networkscited by 486
38 more
- 2022Visual Classification via Description from Large Language Modelscited by 336
- 2021Unbiased Teacher for Semi-Supervised Object Detectioncited by 306
- 2020Frustratingly Simple Few-Shot Object Detectioncited by 282
- 2016A study of the effect of JPG compression on adversarial imagescited by 197
- 2016Driving in the Matrix: Can Virtual Worlds Replace Human-Generated Annotations for Real World Tasks?cited by 194
- 2020Understanding the Role of Training Regimes in Continual Learningcited by 180
- 2022DetCLIP: Dictionary-Enriched Visual-Concept Paralleled Pre-training for Open-world Detectioncited by 176
- 2022F-VLM: Open-Vocabulary Object Detection upon Frozen Vision and Language Modelscited by 150
- 2018DPatch: An Adversarial Patch Attack on Object Detectorscited by 147
- 2018xView: Objects in Context in Overhead Imagerycited by 146
- 2022Bridging the Gap between Object and Image-level Representations for Open-Vocabulary Detectioncited by 146
- 2023BadCLIP: Dual-Embedding Guided Backdoor Attack on Multimodal Contrastive Learningcited by 115
- 2018Transferable Adversarial Attacks for Image and Video Object Detectioncited by 109
- 2019On Physical Adversarial Patches for Object Detectioncited by 93
- 2024VL-Trojan: Multimodal Instruction Backdoor Attacks against Autoregressive Visual Language Modelscited by 87
- 2020Do Wider Neural Networks Really Help Adversarial Robustness?cited by 79
- 2022Parallel Rectangle Flip Attack: A Query-based Black-box Attack against Object Detectioncited by 79
- 2017Robust Physical-World Attacks on Deep Learning Modelscited by 72
- 2022Continual Learning with Foundation Models: An Empirical Study of Latent Replaycited by 61
- 2023X-Adv: Physical Adversarial Object Attacks against X-ray Prohibited Item Detectioncited by 59
- 2019Dont Even Look Once: Synthesizing Features for Zero-Shot Detectioncited by 58
- 2021Self-Supervised Training Enhances Online Continual Learningcited by 54
- 2019Domain Adaptation for Object Detection via Style Consistencycited by 45
- 2017Synthesizing Robust Adversarial Examplescited by 39
- 2023SA-Attack: Improving Adversarial Transferability of Vision-Language Pre-training Models via Self-Augmentationcited by 39
- 2023Pre-trained Trojan Attacks for Visual Recognitioncited by 39
- 2020Physical Adversarial Attack on Vehicle Detector in the Carla Simulatorcited by 38
- 2021Decoupled Adaptation for Cross-Domain Object Detectioncited by 37
- 2020RODEO: Replay for Online Object Detectioncited by 35
- 2023Improving Fast Adversarial Training with Prior-Guided Knowledgecited by 35
- 2024Poisoned Forgery Face: Towards Backdoor Attacks on Face Forgery Detectioncited by 35
- 2023Diversifying the High-level Features for better Adversarial Transferabilitycited by 34
- 2023Augmented Box Replay: Overcoming Foreground Shift for Incremental Object Detectioncited by 32
- 2022Towards Efficient Adversarial Training on Vision Transformerscited by 30
- 2022Untargeted Backdoor Attack against Object Detectioncited by 28
- 2020Lifelong Object Detectioncited by 25
- 2024Hide in Thicket: Generating Imperceptible and Rational Adversarial Perturbations on 3D Point Cloudscited by 24
- 2020Object Hider: Adversarial Patch Attack Against Object Detectorscited by 23
50 most cited of 85 All 85 (JSON)
Built on by
Citing papers per year: 2024: 4; 2025: 5; 2026: 4.
13 papers.
Sort:
By area:
- 2024Towards Robust Physical-world Backdoor Attacks on Lane Detectioncited by 26
- 2024Interpreting Object-level Foundation Models via Visual Precision Searchcited by 20
- 2024Conjugated Semantic Pool Improves OOD Detection with Pre-trained Vision-Language Modelscited by 13
- 2026When World Models Dream Wrong: Physical-Conditioned Adversarial Attacks against World Modelscited by 13
- 2025Bench2ADVLM: A Closed-Loop Benchmark for Vision-language Models in Autonomous Drivingcited by 8
- 20253D Gaussian Splatting Driven Multi-View Robust Physical Adversarial Camouflage Generationcited by 7
- 2026WMAttack: Automated Attack Search for Adversarial Evaluation of World-Model Agentscited by 7
- 2024Efficient Backdoor Defense in Multimodal Contrastive Learning: A Token-Level Unlearning Method for Mitigating Threatscited by 6
- 2025Adversarial Generation and Collaborative Evolution of Safety-Critical Scenarios for Autonomous Vehiclescited by 5
- 2025Physical Adversarial Camouflage through Gradient Calibration and Regularizationcited by 3
- 2025Did Models Learn Sufficiently? Attribution-Guided Training via Subset-Selected Counterfactual Augmentationcited by 1
- 2026R-PGA: Robust Physical Adversarial Camouflage Generation via Relightable 3D Gaussian Splattingcited by 0
1 more
- 2026WMAttack: Automated Attack Search for Adversarial Evaluation of World-Model Agents22 May 2026
- 2026GuardAD: Safeguarding Autonomous Driving MLLMs via Markovian Safety Logic11 May 2026
- 2026R-PGA: Robust Physical Adversarial Camouflage Generation via Relightable 3D Gaussian Splatting27 Mar 2026
- 2026When World Models Dream Wrong: Physical-Conditioned Adversarial Attacks against World Models21 Feb 2026
- 2025Did Models Learn Sufficiently? Attribution-Guided Training via Subset-Selected Counterfactual Augmentation15 Nov 2025
- 2025Adversarial Generation and Collaborative Evolution of Safety-Critical Scenarios for Autonomous Vehicles20 Aug 2025
- 2025Physical Adversarial Camouflage through Gradient Calibration and Regularization7 Aug 2025
- 2025Bench2ADVLM: A Closed-Loop Benchmark for Vision-language Models in Autonomous Driving4 Aug 2025
- 20253D Gaussian Splatting Driven Multi-View Robust Physical Adversarial Camouflage Generation2 Jul 2025
- 2024Interpreting Object-level Foundation Models via Visual Precision Search25 Nov 2024
- 2024Conjugated Semantic Pool Improves OOD Detection with Pre-trained Vision-Language Models11 Oct 2024
- 2024Efficient Backdoor Defense in Multimodal Contrastive Learning: A Token-Level Unlearning Method for Mitigating Threats29 Sep 2024
1 more
- 2024Towards Robust Physical-world Backdoor Attacks on Lane Detectioncited by 26
- 2024Interpreting Object-level Foundation Models via Visual Precision Searchcited by 20
- 20253D Gaussian Splatting Driven Multi-View Robust Physical Adversarial Camouflage Generationcited by 7
- 2025Physical Adversarial Camouflage through Gradient Calibration and Regularizationcited by 3
- 2025Did Models Learn Sufficiently? Attribution-Guided Training via Subset-Selected Counterfactual Augmentationcited by 1
- 2026R-PGA: Robust Physical Adversarial Camouflage Generation via Relightable 3D Gaussian Splattingcited by 0
- 2026R-PGA: Robust Physical Adversarial Camouflage Generation via Relightable 3D Gaussian Splatting27 Mar 2026
- 2025Did Models Learn Sufficiently? Attribution-Guided Training via Subset-Selected Counterfactual Augmentation15 Nov 2025
- 2025Physical Adversarial Camouflage through Gradient Calibration and Regularization7 Aug 2025
- 20253D Gaussian Splatting Driven Multi-View Robust Physical Adversarial Camouflage Generation2 Jul 2025
- 2024Interpreting Object-level Foundation Models via Visual Precision Search25 Nov 2024
- 2024Towards Robust Physical-world Backdoor Attacks on Lane Detection9 May 2024