Evaluating and Enhancing Segmentation Model Robustness with Metamorphic Testing
Not on the map. Why?
Abstract (arXiv)
Image segmentation is critical for applications such as medical imaging, augmented reality, and video surveillance. However, segmentation models often lack robustness, making them vulnerable to adversarial perturbations from subtle image distortions. In this work, we propose SegRMT, a metamorphic testing approach that leverages genetic algorithms (GA) to optimize sequences of spatial and spectral transformations while preserving image fidelity via a predefined PSNR threshold. Using the Cityscapes dataset, our method generates adversarial examples that effectively challenge the DeepLabV3 segmentation model. Our experiments show that SegRMT reduces DeepLabV3's mean Intersection over Union (mIoU) to 6.4%, outperforming other adversarial baselines that decrease mIoU to between 8.5% and 21.7%. Furthermore, when used for adversarial training, SegRMT boosts model performance, achieving mIoU improvements up to 73% on dedicated adversarial datasets and increasing cross-adversarial mIoU to 53.8%, compared to only 2%-10% for other methods. These findings demonstrate that SegRMT not only simulates realistic image distortions but also enhances the robustness of segmentation models, making it a valuable tool for ensuring reliable performance in safety-critical applications.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 18 of its 44 references that are in the map. First posted on arXiv 3 Apr 2025.
Builds on
18 of 44 references.
References · 18
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2016The Cityscapes Dataset for Semantic Urban Scene Understandingcited by 4,444
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,998
- 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,877
- 2020Image Segmentation Using Deep Learning: A Surveycited by 660
- 2018Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Surveycited by 460
- 2020Measuring Robustness to Natural Distribution Shifts in Image Classificationcited by 454
- 2017On the Robustness of Semantic Segmentation Models to Adversarial Attackscited by 126
- 2022SegPGD: An Effective and Efficient Adversarial Attack for Evaluating and Boosting Segmentation Robustnesscited by 74
- 2022Evaluating the Adversarial Robustness of Adaptive Test-time Defensescited by 64
- 2020GreedyFool: Distortion-Aware Sparse Adversarial Attackcited by 37
6 more
- 2022On the Real-World Adversarial Robustness of Real-Time Semantic Segmentation Models for Autonomous Drivingcited by 30
- 2020Improved Noise and Attack Robustness for Semantic Segmentation by Using Multi-Task Training with Self-Supervised Depth Estimationcited by 26
- 2019AdvSPADE: Realistic Unrestricted Attacks for Semantic Segmentationcited by 10
- 2018METTLE: a METamorphic testing approach to assessing and validating unsupervised machine LEarning systemscited by 8
- 2021Tackling Inter-Class Similarity and Intra-Class Variance for Microscopic Image-based Classificationcited by 6
- 2024Transparency Distortion Robustness for SOTA Image Segmentation Taskscited by 2
Built on by
Not cited yet.