Out-of-Distribution Data: An Acquaintance of Adversarial Examples -- A Survey
Not on the map. Why?
Abstract (arXiv)
Deep neural networks (DNNs) deployed in real-world applications can encounter out-of-distribution (OOD) data and adversarial examples. These represent distinct forms of distributional shifts that can significantly impact DNNs' reliability and robustness. Traditionally, research has addressed OOD detection and adversarial robustness as separate challenges. This survey focuses on the intersection of these two areas, examining how the research community has investigated them together. Consequently, we identify two key research directions: robust OOD detection and unified robustness. Robust OOD detection aims to differentiate between in-distribution (ID) data and OOD data, even when they are adversarially manipulated to deceive the OOD detector. Unified robustness seeks a single approach to make DNNs robust against both adversarial attacks and OOD inputs. Accordingly, first, we establish a taxonomy based on the concept of distributional shifts. This framework clarifies how robust OOD detection and unified robustness relate to other research areas addressing distributional shifts, such as OOD detection, open set recognition, and anomaly detection. Subsequently, we review existing work on robust OOD detection and unified robustness. Finally, we highlight the limitations of the existing work and propose promising research directions that explore adversarial and OOD inputs within a unified framework.
Key facts. Cited by 6 papers in the map (data through 7 Oct 2026). Builds on 102 of its 147 references that are in the map. First posted on arXiv 8 Apr 2024.
Builds on
102 of 147 references.
References · 102
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2016Densely Connected Convolutional Networkscited by 6,691
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2017mixup: Beyond Empirical Risk Minimizationcited by 5,155
- 2013Intriguing properties of neural networkscited by 5,114
- 2017Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithmscited by 4,283
- 2014Deep Learning Face Attributes in the Wildcited by 3,679
38 more
- 2015Delving Deep into Rectifiers: Surpassing Human-Level Performance on ImageNet Classificationcited by 3,590
- 2016Wide Residual Networkscited by 3,057
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
- 2019CutMix: Regularization Strategy to Train Strong Classifiers with Localizable Featurescited by 2,875
- 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,857
- 2016A Baseline for Detecting Misclassified and Out-of-Distribution Examples in Neural Networkscited by 2,362
- 2013Describing Textures in the Wildcited by 2,110
- 2020The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalizationcited by 1,842
- 2016Adversarial examples in the physical worldcited by 1,762
- 2017Improved Regularization of Convolutional Neural Networks with Cutoutcited by 1,623
- 2018A Simple Unified Framework for Detecting Out-of-Distribution Samples and Adversarial Attackscited by 1,472
- 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,442
- 2019Natural Adversarial Examplescited by 1,401
- 2020WILDS: A Benchmark of in-the-Wild Distribution Shiftscited by 1,366
- 2015LSUN: Construction of a Large-scale Image Dataset using Deep Learning with Humans in the Loopcited by 1,350
- 2017Enhancing The Reliability of Out-of-distribution Image Detection in Neural Networkscited by 1,325
- 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,324
- 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,315
- 2020Energy-based Out-of-distribution Detectioncited by 1,296
- 2018Deep Anomaly Detection with Outlier Exposurecited by 939
- 2021Generalized Out-of-Distribution Detection: A Surveycited by 796
- 2014Deep Neural Networks are Easily Fooled: High Confidence Predictions for Unrecognizable Imagescited by 774
- 2015Distillation as a Defense to Adversarial Perturbations against Deep Neural Networkscited by 675
- 2017ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Modelscited by 656
- 2018Predictive Uncertainty Estimation via Prior Networkscited by 555
- 2017Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methodscited by 542
- 2019Using Self-Supervised Learning Can Improve Model Robustness and Uncertaintycited by 511
- 2021ReAct: Out-of-distribution Detection With Rectified Activationscited by 486
- 2019On Evaluating Adversarial Robustnesscited by 442
- 2021Towards Out-Of-Distribution Generalization: A Surveycited by 431
- 2019Using Pre-Training Can Improve Model Robustness and Uncertaintycited by 373
- 2018Why ReLU networks yield high-confidence predictions far away from the training data and how to mitigate the problemcited by 323
- 2018On the Effectiveness of Interval Bound Propagation for Training Verifiably Robust Modelscited by 322
- 2021Unsolved Problems in ML Safetycited by 291
- 2018Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionalitycited by 280
- 2022Mitigating Neural Network Overconfidence with Logit Normalizationcited by 251
- 2023On the Robustness of ChatGPT: An Adversarial and Out-of-distribution Perspectivecited by 208
- 2021A Simple Fix to Mahalanobis Distance for Improving Near-OOD Detectioncited by 206
50 most cited of 102 All 102 (JSON)
Built on by
Citing papers per year: 2024: 2; 2025: 4.
6 papers.
- 2025Out-of-Distribution Generalization in Time Series: A Surveycited by 15
- 2024Deciphering the Definition of Adversarial Robustness for post-hoc OOD Detectorscited by 2
- 2024Domain penalisation for improved Out-of-Distribution Generalisationcited by 0
- 2025Enhancing Adversarial Robustness of IoT Intrusion Detection via SHAP-Based Attribution Fingerprintingcited by 0
- 2025FeatureLens: A Highly Generalizable and Interpretable Framework for Detecting Adversarial Examples Based on Image Featurescited by 0
- 2025MAD-OOD: A Deep Learning Cluster-Driven Framework for an Out-of-Distribution Malware Detection and Classificationcited by 0
- 2025MAD-OOD: A Deep Learning Cluster-Driven Framework for an Out-of-Distribution Malware Detection and Classification19 Dec 2025
- 2025FeatureLens: A Highly Generalizable and Interpretable Framework for Detecting Adversarial Examples Based on Image Features3 Dec 2025
- 2025Enhancing Adversarial Robustness of IoT Intrusion Detection via SHAP-Based Attribution Fingerprinting9 Nov 2025
- 2025Out-of-Distribution Generalization in Time Series: A Survey18 Mar 2025
- 2024Domain penalisation for improved Out-of-Distribution Generalisation3 Aug 2024
- 2024Deciphering the Definition of Adversarial Robustness for post-hoc OOD Detectors21 Jun 2024