mlsanityData to 7 Oct 2026

Resilience and Security of Deep Neural Networks Against Intentional and Unintentional Perturbations: Survey and Research Challenges

arXiv 2408.00193 ↗First posted 31 Jul 2024cs.CR cs.AIcited by 0

Not on the map. Why?

Abstract (arXiv)

In order to deploy deep neural networks (DNNs) in high-stakes scenarios, it is imperative that DNNs provide inference robust to external perturbations - both intentional and unintentional. Although the resilience of DNNs to intentional and unintentional perturbations has been widely investigated, a unified vision of these inherently intertwined problem domains is still missing. In this work, we fill this gap by providing a survey of the state of the art and highlighting the similarities of the proposed approaches.We also analyze the research challenges that need to be addressed to deploy resilient and secure DNNs. As there has not been any such survey connecting the resilience of DNNs to intentional and unintentional perturbations, we believe this work can help advance the frontier in both domains by enabling the exchange of ideas between the two communities.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 125 of its 180 references that are in the map. First posted on arXiv 31 Jul 2024.

Builds on

125 of 180 references.

References · 125

  1. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
  2. 2023GPT-4 Technical Reportcited by 18,132
  3. 2014Microsoft COCO: Common Objects in Contextcited by 17,498
  4. 2017A Unified Approach to Interpreting Model Predictionscited by 6,488
  5. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
  6. 2013Intriguing properties of neural networkscited by 5,114
  7. 2017Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithmscited by 4,283
  8. 2016Simple and Scalable Predictive Uncertainty Estimation using Deep Ensemblescited by 3,888
  9. 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
  10. 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,857
  11. 2016A Baseline for Detecting Misclassified and Out-of-Distribution Examples in Neural Networkscited by 2,362
  12. 2013Describing Textures in the Wildcited by 2,110
38 more
  1. 2020The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalizationcited by 1,842
  2. 2016Adversarial examples in the physical worldcited by 1,762
  3. 2017Understanding Black-box Predictions via Influence Functionscited by 1,714
  4. 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,442
  5. 2019Natural Adversarial Examplescited by 1,401
  6. 2015LSUN: Construction of a Large-scale Image Dataset using Deep Learning with Humans in the Loopcited by 1,350
  7. 2018Moment Matching for Multi-Source Domain Adaptationcited by 1,327
  8. 2017Enhancing The Reliability of Out-of-distribution Image Detection in Neural Networkscited by 1,325
  9. 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,315
  10. 2020Energy-based Out-of-distribution Detectioncited by 1,296
  11. 2018BDD100K: A Diverse Driving Dataset for Heterogeneous Multitask Learningcited by 1,282
  12. 2017Deeper, Broader and Artier Domain Generalizationcited by 983
  13. 2018Deep Anomaly Detection with Outlier Exposurecited by 939
  14. 2017VGGFace2: A dataset for recognising faces across pose and agecited by 911
  15. 2019AugMix: A Simple Data Processing Method to Improve Robustness and Uncertaintycited by 897
  16. 2016Practical Black-Box Attacks against Machine Learningcited by 893
  17. 2017Ensemble Adversarial Training: Attacks and Defensescited by 833
  18. 2014Deep Neural Networks are Easily Fooled: High Confidence Predictions for Unrecognizable Imagescited by 774
  19. 2016Universal adversarial perturbationscited by 774
  20. 2017VoxCeleb: a large-scale speaker identification datasetcited by 714
  21. 2019Square Attack: a query-efficient black-box adversarial attack via random searchcited by 682
  22. 2017ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Modelscited by 656
  23. 2021ImageNet-21K Pretraining for the Massescited by 607
  24. 2022Out-of-Distribution Detection with Deep Nearest Neighborscited by 596
  25. 2018Improving Transferability of Adversarial Examples with Input Diversitycited by 591
  26. 2017One pixel attack for fooling deep neural networkscited by 579
  27. 2018Black-box Adversarial Attacks with Limited Queries and Informationcited by 499
  28. 2021ReAct: Out-of-distribution Detection With Rectified Activationscited by 486
  29. 2017Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networkscited by 484
  30. 2019Evading Defenses to Transferable Adversarial Examples by Translation-Invariant Attackscited by 440
  31. 2016Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samplescited by 439
  32. 2020Generalized ODIN: Detecting Out-of-distribution Image without Learning from Out-of-distribution Datacited by 408
  33. 2021High-Performance Large-Scale Image Recognition Without Normalizationcited by 359
  34. 2019Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attackscited by 352
  35. 2021On the Importance of Gradients for Detecting Distributional Shifts in the Wildcited by 338
  36. 2022VOS: Learning What You Don't Know by Virtual Outlier Synthesiscited by 300
  37. 2018Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionalitycited by 280
  38. 2019Fooling automated surveillance cameras: adversarial patches to attack person detectioncited by 268

50 most cited of 125 All 125 (JSON)

Built on by

Not cited yet.