mlsanityData to 14 Oct 2026

Unveiling AI's Blind Spots: An Oracle for In-Domain, Out-of-Domain, and Adversarial Errors

arXiv 2410.02384 ↗First posted 3 Oct 2024cs.LGcited by 3

Not on the map. Why?

Abstract (arXiv)

AI models make mistakes when recognizing images-whether in-domain, out-of-domain, or adversarial. Predicting these errors is critical for improving system reliability, reducing costly mistakes, and enabling proactive corrections in real-world applications such as healthcare, finance, and autonomous systems. However, understanding what mistakes AI models make, why they occur, and how to predict them remains an open challenge. Here, we conduct comprehensive empirical evaluations using a "mentor" model-a deep neural network designed to predict another "mentee" model's errors. Our findings show that the mentor excels at learning from a mentee's mistakes on adversarial images with small perturbations and generalizes effectively to predict in-domain and out-of-domain errors of the mentee. Additionally, transformer-based mentor models excel at predicting errors across various mentee architectures. Subsequently, we draw insights from these observations and develop an "oracle" mentor model, dubbed SuperMentor, that can outperform baseline mentors in predicting errors across different error types from the ImageNet-1K dataset. Our framework paves the way for future research on anticipating and correcting AI model behaviors, ultimately increasing trust in AI systems.

Key facts. Cited by 3 papers in the map (data through 14 Oct 2026). Builds on 54 of its 77 references that are in the map. First posted on arXiv 3 Oct 2024.

Builds on

54 of 77 references.

References · 54

  1. 2015Deep Residual Learning for Image Recognitioncited by 52,096
  2. 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
  3. 2015Distilling the Knowledge in a Neural Networkcited by 10,324
  4. 2014Explaining and Harnessing Adversarial Examplescited by 7,364
  5. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
  6. 2013Intriguing properties of neural networkscited by 5,155
  7. 2016SGDR: Stochastic Gradient Descent with Warm Restartscited by 5,045
  8. 2016Simple and Scalable Predictive Uncertainty Estimation using Deep Ensemblescited by 3,926
  9. 2016Towards Evaluating the Robustness of Neural Networkscited by 2,998
  10. 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,877
  11. 2016A Baseline for Detecting Misclassified and Out-of-Distribution Examples in Neural Networkscited by 2,385
  12. 2020The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalizationcited by 1,850
38 more
  1. 2018A Simple Unified Framework for Detecting Out-of-Distribution Samples and Adversarial Attackscited by 1,485
  2. 2019Natural Adversarial Examplescited by 1,408
  3. 2020Energy-based Out-of-distribution Detectioncited by 1,299
  4. 2017Visualizing the Loss Landscape of Neural Netscited by 1,130
  5. 2019Learning Robust Global Representations by Penalizing Local Predictive Powercited by 1,013
  6. 2017Deeper, Broader and Artier Domain Generalizationcited by 986
  7. 2019Adversarial Examples Are Not Bugs, They Are Featurescited by 953
  8. 2017Selective Classification for Deep Neural Networkscited by 852
  9. 2021Generalized Out-of-Distribution Detection: A Surveycited by 802
  10. 2022Out-of-Distribution Detection with Deep Nearest Neighborscited by 600
  11. 2021ReAct: Out-of-distribution Detection With Rectified Activationscited by 486
  12. 2017Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Modelscited by 462
  13. 2020Reflection Backdoor: A Natural Backdoor Attack on Deep Neural Networkscited by 349
  14. 2020Noise or Signal: The Role of Image Backgrounds in Object Recognitioncited by 343
  15. 2017Predict Responsibly: Improving Fairness and Accuracy by Learning to Defercited by 233
  16. 2018Adversarial Risk and the Dangers of Evaluating Against Weak Attackscited by 221
  17. 2018To Trust Or Not To Trust A Classifiercited by 207
  18. 2020Eigen-CAM: Class Activation Map using Principal Componentscited by 189
  19. 2019Addressing Failure Prediction by Learning Model Confidencecited by 186
  20. 2019Universal Litmus Patterns: Revealing Backdoor Attacks in CNNscited by 146
  21. 2021Assessing Generalization of SGD via Disagreementcited by 117
  22. 2021Predicting with Confidence on Unseen Distributionscited by 116
  23. 2022Anomaly Detection in Autonomous Driving: A Surveycited by 87
  24. 2021Uncertainty Baselines: Benchmarks for Uncertainty & Robustness in Deep Learningcited by 82
  25. 2020Patch-wise Attack for Fooling Deep Neural Networkcited by 78
  26. 2020GeoDA: a geometric framework for black-box adversarial attackscited by 66
  27. 2021What Does Rotation Prediction Tell Us about Classifier Accuracy under Varying Testing Environments?cited by 63
  28. 2019Do Image Classifiers Generalize Across Time?cited by 59
  29. 2020Estimating Generalization under Distribution Shifts via Domain-Invariant Representationscited by 56
  30. 2021DOCTOR: A Simple Method for Detecting Misclassification Errorscited by 53
  31. 2022Predicting Out-of-Distribution Error with the Projection Normcited by 50
  32. 2021LiBRe: A Practical Bayesian Approach to Adversarial Detectioncited by 40
  33. 2018Runtime Monitoring Neuron Activation Patternscited by 34
  34. 2021Exploring Misclassifications of Robust Neural Networks to Enhance Adversarial Attackscited by 33
  35. 2018Detection based Defense against Adversarial Examples from the Steganalysis Point of Viewcited by 32
  36. 2019Detecting and Diagnosing Adversarial Images with Class-Conditional Capsule Reconstructionscited by 30
  37. 2019Achieving Robustness in the Wild via Adversarial Mixing with Disentangled Representationscited by 28
  38. 2022Out-Of-Distribution Detection Is Not All You Needcited by 23

50 most cited of 54 All 54 (JSON)

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 1; 2026: 2.

3 papers.