Probabilistic Robustness in Deep Learning: A Concise yet Comprehensive Guide
Not on the map. Why?
Abstract (arXiv)
Deep learning (DL) has demonstrated significant potential across various safety-critical applications, yet ensuring its robustness remains a key challenge. While adversarial robustness has been extensively studied in worst-case scenarios, probabilistic robustness (PR) offers a more practical perspective by quantifying the likelihood of failures under stochastic perturbations. This paper provides a concise yet comprehensive overview of PR, covering its formal definitions, evaluation and enhancement methods. We introduce a reformulated ''min-max'' optimisation framework for adversarial training specifically designed to improve PR. Furthermore, we explore the integration of PR verification evidence into system-level safety assurance, addressing challenges in translating DL model-level robustness to system-level claims. Finally, we highlight open research questions, including benchmarking PR evaluation methods, extending PR to generative AI tasks, and developing rigorous methodologies and case studies for system-level integration.
Key facts. Cited by 6 papers in the map (data through 7 Oct 2026). Builds on 38 of its 57 references that are in the map. First posted on arXiv 20 Feb 2025.
Builds on
38 of 57 references.
References · 38
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2013Intriguing properties of neural networkscited by 5,114
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
- 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,442
- 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,324
- 2018Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examplescited by 1,259
- 2017Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networkscited by 739
- 2015Distillation as a Defense to Adversarial Perturbations against Deep Neural Networkscited by 675
- 2020RobustBench: a standardized adversarial robustness benchmarkcited by 659
- 2018Efficient Neural Network Robustness Certification with General Activation Functionscited by 439
- 2021Recent Advances in Adversarial Training for Adversarial Robustnesscited by 276
26 more
- 2016Safety Verification of Deep Neural Networkscited by 262
- 2018Reachability Analysis of Deep Neural Networks with Provable Guaranteescited by 93
- 2018A Statistical Approach to Assessing Neural Network Robustnesscited by 54
- 2022Adversarial Robustness of Deep Neural Networks: A Survey from a Formal Verification Perspectivecited by 41
- 2019Robustness of Neural Networks: A Probabilistic and Practical Approachcited by 38
- 2021How to Certify Machine Learning Based Safety-critical Systems? A Systematic Literature Reviewcited by 36
- 2022Probabilistically Robust Learning: Balancing Average- and Worst-case Performancecited by 36
- 2020Scalable Quantitative Verification For Deep Neural Networkscited by 31
- 2022SAFARI: Versatile and Efficient Evaluations for Robustness of Interpretabilitycited by 28
- 2023Stable Diffusion is Unstablecited by 27
- 2023Probabilistically robust conformal predictioncited by 25
- 2020A Safety Framework for Critical Systems Utilising Deep Neural Networkscited by 19
- 2022PRoA: A Probabilistic Robustness Assessment against Functional Perturbationscited by 19
- 2021CC-Cert: A Probabilistic Approach to Certify General Robustness of Neural Networkscited by 18
- 2019Statistically Robust Neural Network Classificationcited by 16
- 2021Reliability Assessment and Safety Arguments for Machine Learning Components in System Assurancecited by 16
- 2019Assessing the Safety and Reliability of Autonomous Vehicles from Road Testingcited by 15
- 2021Assessing the Reliability of Deep Learning Classifiers Through Robustness Evaluation and Operational Profilescited by 11
- 2024ProTIP: Probabilistic Robustness Verification on Text-to-Image Diffusion Models against Stochastic Perturbationcited by 10
- 2020Assessing Safety-Critical Systems from Operational Testing: A Study on Autonomous Vehiclescited by 9
- 2022Hierarchical Distribution-Aware Testing of Deep Learningcited by 8
- 2023What, Indeed, is an Achievable Provable Guarantee for Learning-Enabled Safety Critical Systemscited by 6
- 2024Trustworthy Text-to-Image Diffusion Models: A Timely and Focused Surveycited by 6
- 2025Where AI Assurance Might Go Wrong: Initial lessons from engineering of critical systemscited by 3
- 2022Reachability Verification Based Reliability Assessment for Deep Reinforcement Learning Controlled Robotics and Autonomous Systemscited by 2
- 2024Confidence in Assurance 2.0 Casescited by 2
Built on by
Citing papers per year: 2025: 3; 2026: 3.
6 papers.
- 2025PRBench: A Standardized Probabilistic Robustness Benchmarkcited by 1
- 2025Non-Parametric Probabilistic Robustness: A Conservative Risk Estimator under Unknown Perturbation Distributionscited by 1
- 2025Deep Learning Perspective of Scene Understanding in Autonomous Robotscited by 0
- 2026Probabilistic Robustness in Medical Image Classificationcited by 0
- 2026Probabilistic Robustness-driven Universal Adversarial Perturbations with Explainability against Deep Reinforcement Learning-based Intrusion Detection Systemcited by 0
- 2026Probabilistic Adversarial Trainingcited by 0
- 2026Probabilistic Adversarial Training30 Sep 2026
- 2026Probabilistic Robustness-driven Universal Adversarial Perturbations with Explainability against Deep Reinforcement Learning-based Intrusion Detection System24 Sep 2026
- 2026Probabilistic Robustness in Medical Image Classification4 Jul 2026
- 2025Deep Learning Perspective of Scene Understanding in Autonomous Robots16 Dec 2025
- 2025Non-Parametric Probabilistic Robustness: A Conservative Risk Estimator under Unknown Perturbation Distributions21 Nov 2025
- 2025PRBench: A Standardized Probabilistic Robustness Benchmark3 Nov 2025