mlsanityData to 7 Oct 2026

Out-of-Distribution Data: An Acquaintance of Adversarial Examples -- A Survey

arXiv 2404.05219 ↗First posted 8 Apr 2024cs.LGcited by 6

Not on the map. Why?

Abstract (arXiv)

Deep neural networks (DNNs) deployed in real-world applications can encounter out-of-distribution (OOD) data and adversarial examples. These represent distinct forms of distributional shifts that can significantly impact DNNs' reliability and robustness. Traditionally, research has addressed OOD detection and adversarial robustness as separate challenges. This survey focuses on the intersection of these two areas, examining how the research community has investigated them together. Consequently, we identify two key research directions: robust OOD detection and unified robustness. Robust OOD detection aims to differentiate between in-distribution (ID) data and OOD data, even when they are adversarially manipulated to deceive the OOD detector. Unified robustness seeks a single approach to make DNNs robust against both adversarial attacks and OOD inputs. Accordingly, first, we establish a taxonomy based on the concept of distributional shifts. This framework clarifies how robust OOD detection and unified robustness relate to other research areas addressing distributional shifts, such as OOD detection, open set recognition, and anomaly detection. Subsequently, we review existing work on robust OOD detection and unified robustness. Finally, we highlight the limitations of the existing work and propose promising research directions that explore adversarial and OOD inputs within a unified framework.

Key facts. Cited by 6 papers in the map (data through 7 Oct 2026). Builds on 102 of its 147 references that are in the map. First posted on arXiv 8 Apr 2024.

Builds on

102 of 147 references.

References · 102

  1. 2015Deep Residual Learning for Image Recognitioncited by 51,809
  2. 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
  3. 2020Language Models are Few-Shot Learnerscited by 32,199
  4. 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
  5. 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
  6. 2014Explaining and Harnessing Adversarial Examplescited by 7,287
  7. 2016Densely Connected Convolutional Networkscited by 6,691
  8. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
  9. 2017mixup: Beyond Empirical Risk Minimizationcited by 5,155
  10. 2013Intriguing properties of neural networkscited by 5,114
  11. 2017Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithmscited by 4,283
  12. 2014Deep Learning Face Attributes in the Wildcited by 3,679
38 more
  1. 2015Delving Deep into Rectifiers: Surpassing Human-Level Performance on ImageNet Classificationcited by 3,590
  2. 2016Wide Residual Networkscited by 3,057
  3. 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
  4. 2019CutMix: Regularization Strategy to Train Strong Classifiers with Localizable Featurescited by 2,875
  5. 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,857
  6. 2016A Baseline for Detecting Misclassified and Out-of-Distribution Examples in Neural Networkscited by 2,362
  7. 2013Describing Textures in the Wildcited by 2,110
  8. 2020The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalizationcited by 1,842
  9. 2016Adversarial examples in the physical worldcited by 1,762
  10. 2017Improved Regularization of Convolutional Neural Networks with Cutoutcited by 1,623
  11. 2018A Simple Unified Framework for Detecting Out-of-Distribution Samples and Adversarial Attackscited by 1,472
  12. 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,442
  13. 2019Natural Adversarial Examplescited by 1,401
  14. 2020WILDS: A Benchmark of in-the-Wild Distribution Shiftscited by 1,366
  15. 2015LSUN: Construction of a Large-scale Image Dataset using Deep Learning with Humans in the Loopcited by 1,350
  16. 2017Enhancing The Reliability of Out-of-distribution Image Detection in Neural Networkscited by 1,325
  17. 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,324
  18. 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,315
  19. 2020Energy-based Out-of-distribution Detectioncited by 1,296
  20. 2018Deep Anomaly Detection with Outlier Exposurecited by 939
  21. 2021Generalized Out-of-Distribution Detection: A Surveycited by 796
  22. 2014Deep Neural Networks are Easily Fooled: High Confidence Predictions for Unrecognizable Imagescited by 774
  23. 2015Distillation as a Defense to Adversarial Perturbations against Deep Neural Networkscited by 675
  24. 2017ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Modelscited by 656
  25. 2018Predictive Uncertainty Estimation via Prior Networkscited by 555
  26. 2017Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methodscited by 542
  27. 2019Using Self-Supervised Learning Can Improve Model Robustness and Uncertaintycited by 511
  28. 2021ReAct: Out-of-distribution Detection With Rectified Activationscited by 486
  29. 2019On Evaluating Adversarial Robustnesscited by 442
  30. 2021Towards Out-Of-Distribution Generalization: A Surveycited by 431
  31. 2019Using Pre-Training Can Improve Model Robustness and Uncertaintycited by 373
  32. 2018Why ReLU networks yield high-confidence predictions far away from the training data and how to mitigate the problemcited by 323
  33. 2018On the Effectiveness of Interval Bound Propagation for Training Verifiably Robust Modelscited by 322
  34. 2021Unsolved Problems in ML Safetycited by 291
  35. 2018Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionalitycited by 280
  36. 2022Mitigating Neural Network Overconfidence with Logit Normalizationcited by 251
  37. 2023On the Robustness of ChatGPT: An Adversarial and Out-of-distribution Perspectivecited by 208
  38. 2021A Simple Fix to Mahalanobis Distance for Improving Near-OOD Detectioncited by 206

50 most cited of 102 All 102 (JSON)

Built on by

Cited by year

Citing papers per year: 2024: 2; 2025: 4.

6 papers.