Runtime Safety Monitoring of Deep Neural Networks for Perception: A Survey
Not on the map. Why?
Abstract (arXiv)
Deep neural networks (DNNs) are widely used in perception systems for safety-critical applications, such as autonomous driving and robotics. However, DNNs remain vulnerable to various safety concerns, including generalization errors, out-of-distribution (OOD) inputs, and adversarial attacks, which can lead to hazardous failures. This survey provides a comprehensive overview of runtime safety monitoring approaches, which operate in parallel to DNNs during inference to detect these safety concerns without modifying the DNN itself. We categorize existing methods into three main groups: Monitoring inputs, internal representations, and outputs. We analyze the state-of-the-art for each category, identify strengths and limitations, and map methods to the safety concerns they address. In addition, we highlight open challenges and future research directions.
Key facts. Cited by 2 papers in the map (data through 7 Oct 2026). Builds on 33 of its 49 references that are in the map. First posted on arXiv 8 Nov 2025.
Builds on
33 of 49 references.
References · 33
- 2014Microsoft COCO: Common Objects in Contextcited by 17,498
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2013Intriguing properties of neural networkscited by 5,114
- 2019nuScenes: A multimodal dataset for autonomous drivingcited by 4,485
- 2017Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithmscited by 4,283
- 2016A Baseline for Detecting Misclassified and Out-of-Distribution Examples in Neural Networkscited by 2,362
- 2018PointPillars: Fast Encoders for Object Detection from Point Cloudscited by 1,707
- 2017Enhancing The Reliability of Out-of-distribution Image Detection in Neural Networkscited by 1,325
- 2018BDD100K: A Diverse Driving Dataset for Heterogeneous Multitask Learningcited by 1,282
- 2020Center-based 3D Object Detection and Trackingcited by 1,143
- 2018Generalization Error in Deep Learningcited by 46
21 more
- 2019Outside the Box: Abstraction-Based Monitoring of Neural Networkscited by 36
- 2021Inspect, Understand, Overcome: A Survey of Practical Methods for AI Safetycited by 35
- 2018Runtime Monitoring Neuron Activation Patternscited by 34
- 2020Safety Concerns and Mitigation Approaches Regarding the Use of Deep Learning in Safety-Critical Perception Taskscited by 31
- 2021Run-Time Monitoring of Machine Learning for Robotic Perception: A Survey of Emerging Trendscited by 26
- 2019Quantifying the generalization error in deep learning in terms of data distribution and neural network smoothnesscited by 22
- 2021Taxonomy of Machine Learning Safety: A Survey and Primercited by 22
- 2020Into the Unknown: Active Monitoring of Neural Networkscited by 19
- 2021DeepGuard: A Framework for Safeguarding Autonomous Driving Systems from Inconsistent Behaviorcited by 17
- 2022Detecting Adversarial Perturbations in Multi-Task Perceptioncited by 15
- 2023Adversarial Attacks on Traffic Sign Recognition: A Surveycited by 13
- 2022Runtime Monitoring for Out-of-Distribution Detection in Object Detection Neural Networkscited by 7
- 2020Real-Time Detectors for Digital and Physical Adversarial Inputs to Perception Systemscited by 6
- 2022Suppress with a Patch: Revisiting Universal Adversarial Patch Attacks against Object Detectioncited by 6
- 2023A Low-cost Strategic Monitoring Approach for Scalable and Interpretable Error Detection in Deep Neural Networkscited by 6
- 2024BAM: Box Abstraction Monitors for Real-time OoD Detection in Object Detectioncited by 5
- 2020Increasing Trustworthiness of Deep Neural Networks via Accuracy Monitoringcited by 3
- 2022Adversarial Vulnerability of Temporal Feature Networks for Object Detectioncited by 3
- 2024Run-time Monitoring of 3D Object Detection in Automated Driving Systems Using Early Layer Neural Activation Patternscited by 3
- 2024Safety Monitoring of Machine Learning Perception Functions: a Surveycited by 3
- 2024Beyond the Known: Adversarial Autoencoders in Novelty Detectioncited by 1
Built on by
Citing papers per year: 2026: 2.
2 papers.