Unveiling AI's Blind Spots: An Oracle for In-Domain, Out-of-Domain, and Adversarial Errors
Not on the map. Why?
Abstract (arXiv)
AI models make mistakes when recognizing images-whether in-domain, out-of-domain, or adversarial. Predicting these errors is critical for improving system reliability, reducing costly mistakes, and enabling proactive corrections in real-world applications such as healthcare, finance, and autonomous systems. However, understanding what mistakes AI models make, why they occur, and how to predict them remains an open challenge. Here, we conduct comprehensive empirical evaluations using a "mentor" model-a deep neural network designed to predict another "mentee" model's errors. Our findings show that the mentor excels at learning from a mentee's mistakes on adversarial images with small perturbations and generalizes effectively to predict in-domain and out-of-domain errors of the mentee. Additionally, transformer-based mentor models excel at predicting errors across various mentee architectures. Subsequently, we draw insights from these observations and develop an "oracle" mentor model, dubbed SuperMentor, that can outperform baseline mentors in predicting errors across different error types from the ImageNet-1K dataset. Our framework paves the way for future research on anticipating and correcting AI model behaviors, ultimately increasing trust in AI systems.
Key facts. Cited by 3 papers in the map (data through 14 Oct 2026). Builds on 54 of its 77 references that are in the map. First posted on arXiv 3 Oct 2024.
Builds on
54 of 77 references.
References · 54
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
- 2015Distilling the Knowledge in a Neural Networkcited by 10,324
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2013Intriguing properties of neural networkscited by 5,155
- 2016SGDR: Stochastic Gradient Descent with Warm Restartscited by 5,045
- 2016Simple and Scalable Predictive Uncertainty Estimation using Deep Ensemblescited by 3,926
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,998
- 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,877
- 2016A Baseline for Detecting Misclassified and Out-of-Distribution Examples in Neural Networkscited by 2,385
- 2020The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalizationcited by 1,850
38 more
- 2018A Simple Unified Framework for Detecting Out-of-Distribution Samples and Adversarial Attackscited by 1,485
- 2019Natural Adversarial Examplescited by 1,408
- 2020Energy-based Out-of-distribution Detectioncited by 1,299
- 2017Visualizing the Loss Landscape of Neural Netscited by 1,130
- 2019Learning Robust Global Representations by Penalizing Local Predictive Powercited by 1,013
- 2017Deeper, Broader and Artier Domain Generalizationcited by 986
- 2019Adversarial Examples Are Not Bugs, They Are Featurescited by 953
- 2017Selective Classification for Deep Neural Networkscited by 852
- 2021Generalized Out-of-Distribution Detection: A Surveycited by 802
- 2022Out-of-Distribution Detection with Deep Nearest Neighborscited by 600
- 2021ReAct: Out-of-distribution Detection With Rectified Activationscited by 486
- 2017Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Modelscited by 462
- 2020Reflection Backdoor: A Natural Backdoor Attack on Deep Neural Networkscited by 349
- 2020Noise or Signal: The Role of Image Backgrounds in Object Recognitioncited by 343
- 2017Predict Responsibly: Improving Fairness and Accuracy by Learning to Defercited by 233
- 2018Adversarial Risk and the Dangers of Evaluating Against Weak Attackscited by 221
- 2018To Trust Or Not To Trust A Classifiercited by 207
- 2020Eigen-CAM: Class Activation Map using Principal Componentscited by 189
- 2019Addressing Failure Prediction by Learning Model Confidencecited by 186
- 2019Universal Litmus Patterns: Revealing Backdoor Attacks in CNNscited by 146
- 2021Assessing Generalization of SGD via Disagreementcited by 117
- 2021Predicting with Confidence on Unseen Distributionscited by 116
- 2022Anomaly Detection in Autonomous Driving: A Surveycited by 87
- 2021Uncertainty Baselines: Benchmarks for Uncertainty & Robustness in Deep Learningcited by 82
- 2020Patch-wise Attack for Fooling Deep Neural Networkcited by 78
- 2020GeoDA: a geometric framework for black-box adversarial attackscited by 66
- 2021What Does Rotation Prediction Tell Us about Classifier Accuracy under Varying Testing Environments?cited by 63
- 2019Do Image Classifiers Generalize Across Time?cited by 59
- 2020Estimating Generalization under Distribution Shifts via Domain-Invariant Representationscited by 56
- 2021DOCTOR: A Simple Method for Detecting Misclassification Errorscited by 53
- 2022Predicting Out-of-Distribution Error with the Projection Normcited by 50
- 2021LiBRe: A Practical Bayesian Approach to Adversarial Detectioncited by 40
- 2018Runtime Monitoring Neuron Activation Patternscited by 34
- 2021Exploring Misclassifications of Robust Neural Networks to Enhance Adversarial Attackscited by 33
- 2018Detection based Defense against Adversarial Examples from the Steganalysis Point of Viewcited by 32
- 2019Detecting and Diagnosing Adversarial Images with Class-Conditional Capsule Reconstructionscited by 30
- 2019Achieving Robustness in the Wild via Adversarial Mixing with Disentangled Representationscited by 28
- 2022Out-Of-Distribution Detection Is Not All You Needcited by 23
50 most cited of 54 All 54 (JSON)
Built on by
Citing papers per year: 2025: 1; 2026: 2.
3 papers.
- 2025Peering into the Unknown: Active View Selection with Neural Uncertainty Maps for 3D Reconstructioncited by 5
- 2026Adaptive Confidence Regularization for Multimodal Failure Detectioncited by 1
- 2026FailSAE: Towards Interpretable Failure Prediction for Vision-Language Models via Sparse Autoencoderscited by 0
- 2026FailSAE: Towards Interpretable Failure Prediction for Vision-Language Models via Sparse Autoencoders2 Sep 2026
- 2026Adaptive Confidence Regularization for Multimodal Failure Detection2 Mar 2026
- 2025Peering into the Unknown: Active View Selection with Neural Uncertainty Maps for 3D Reconstruction17 Jun 2025