RODEO: Robust Outlier Detection via Exposing Adaptive Out-of-Distribution Samples
Not on the map. Why?
Abstract (arXiv)
In recent years, there have been significant improvements in various forms of image outlier detection. However, outlier detection performance under adversarial settings lags far behind that in standard settings. This is due to the lack of effective exposure to adversarial scenarios during training, especially on unseen outliers, leading to detection models failing to learn robust features. To bridge this gap, we introduce RODEO, a data-centric approach that generates effective outliers for robust outlier detection. More specifically, we show that incorporating outlier exposure (OE) and adversarial training can be an effective strategy for this purpose, as long as the exposed training outliers meet certain characteristics, including diversity, and both conceptual differentiability and analogy to the inlier samples. We leverage a text-to-image model to achieve this goal. We demonstrate both quantitatively and qualitatively that our adaptive OE method effectively generates ``diverse'' and ``near-distribution'' outliers, leveraging information from both text and image domains. Moreover, our experimental results show that utilizing our synthesized outliers significantly enhances the performance of the outlier detector, particularly in adversarial settings.
Key facts. Cited by 7 papers in the map (data through 7 Oct 2026). Builds on 81 of its 105 references that are in the map. First posted on arXiv 28 Jan 2025.
Builds on
81 of 105 references.
References · 81
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
- 2020Denoising Diffusion Probabilistic Modelscited by 20,851
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
- 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,185
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,005
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2017mixup: Beyond Empirical Risk Minimizationcited by 5,155
- 2013Intriguing properties of neural networkscited by 5,114
- 2013Efficient Estimation of Word Representations in Vector Spacecited by 4,346
38 more
- 2017Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithmscited by 4,283
- 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,131
- 2021GLIDE: Towards Photorealistic Image Generation and Editing with Text-Guided Diffusion Modelscited by 3,595
- 2022DreamBooth: Fine Tuning Text-to-Image Diffusion Models for Subject-Driven Generationcited by 3,286
- 2016Wide Residual Networkscited by 3,057
- 2016A Baseline for Detecting Misclassified and Out-of-Distribution Examples in Neural Networkscited by 2,362
- 2021SDEdit: Guided Image Synthesis and Editing with Stochastic Differential Equationscited by 1,903
- 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,510
- 2018A Simple Unified Framework for Detecting Out-of-Distribution Samples and Adversarial Attackscited by 1,472
- 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,442
- 2015LSUN: Construction of a Large-scale Image Dataset using Deep Learning with Humans in the Loopcited by 1,350
- 2017Enhancing The Reliability of Out-of-distribution Image Detection in Neural Networkscited by 1,325
- 2022Diffusion Models in Vision: A Surveycited by 1,008
- 2018Deep Anomaly Detection with Outlier Exposurecited by 939
- 2021Blended Diffusion for Text-driven Editing of Natural Imagescited by 924
- 2021Generalized Out-of-Distribution Detection: A Surveycited by 796
- 2021Towards Total Recall in Industrial Anomaly Detectioncited by 772
- 2021DiffusionCLIP: Text-Guided Diffusion Models for Robust Image Manipulationcited by 640
- 2015Towards Open Set Deep Networkscited by 533
- 2018Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Surveycited by 459
- 2020CSI: Novelty Detection via Contrastive Learning on Distributionally Shifted Instancescited by 441
- 2020Reliable Fidelity and Diversity Metrics for Generative Modelscited by 425
- 2019Using Pre-Training Can Improve Model Robustness and Uncertaintycited by 373
- 2018Adversarially Robust Generalization Requires More Datacited by 318
- 2022VOS: Learning What You Don't Know by Virtual Outlier Synthesiscited by 300
- 2020Multiresolution Knowledge Distillation for Anomaly Detectioncited by 285
- 2021Exploring the Limits of Out-of-Distribution Detectioncited by 283
- 2019Simple Black-box Adversarial Attackscited by 249
- 2014Towards Open World Recognitioncited by 226
- 2017GANs Trained by a Two Time-Scale Update Rule Converge to a Local Nash Equilibriumcited by 208
- 2021A Simple Fix to Mahalanobis Distance for Improving Near-OOD Detectioncited by 206
- 2018Disentangling Adversarial Robustness and Generalizationcited by 171
- 2015TurkerGaze: Crowdsourcing Saliency with Webcam based Eye Trackingcited by 165
- 2021A Unified Survey on Anomaly, Novelty, Open-Set, and Out-of-Distribution Detection: Solutions and Future Challengescited by 154
- 2021Zero-Shot Out-of-Distribution Detection Based on the Pre-trained Model CLIPcited by 151
- 2021OpenGAN: Open-Set Recognition via Open Data Generationcited by 135
- 2023Non-Parametric Outlier Synthesiscited by 129
- 2023Social Biases through the Text-to-Image Generation Lenscited by 126
50 most cited of 81 All 81 (JSON)
Built on by
Citing papers per year: 2025: 5; 2026: 2.
7 papers.
- 2025PatchGuard: Adversarially Robust Anomaly Detection and Localization through Vision Transformers and Pseudo Anomaliescited by 8
- 2025GHOST: Hallucination-Inducing Image Generation for Multimodal LLMscited by 4
- 2025FrameShield: Adversarially Robust Video Anomaly Detectioncited by 2
- 2025DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusioncited by 1
- 2026With Argus Eyes: Assessing Retrieval Gaps via Uncertainty Scoring to Detect and Remedy Retrieval Blind Spotscited by 1
- 2025HALO: Robust Out-of-Distribution Detection via Joint Optimisationcited by 0
- 2026Deep Convolutional Large-Margin ℓp-SVDD for Visual Anomaly Detectioncited by 0
- 2026Deep Convolutional Large-Margin ℓp-SVDD for Visual Anomaly Detection24 Jul 2026
- 2026With Argus Eyes: Assessing Retrieval Gaps via Uncertainty Scoring to Detect and Remedy Retrieval Blind Spots10 Feb 2026
- 2025FrameShield: Adversarially Robust Video Anomaly Detection24 Oct 2025
- 2025GHOST: Hallucination-Inducing Image Generation for Multimodal LLMs29 Sep 2025
- 2025DISTIL: Data-Free Inversion of Suspicious Trojan Inputs via Latent Diffusion30 Jul 2025
- 2025PatchGuard: Adversarially Robust Anomaly Detection and Localization through Vision Transformers and Pseudo Anomalies10 Jun 2025
- 2025HALO: Robust Out-of-Distribution Detection via Joint Optimisation27 Feb 2025