Volatility in Certainty (VC): A Metric for Detecting Adversarial Perturbations During Inference in Neural Network Classifiers
Not on the map. Why?
Abstract (arXiv)
Adversarial robustness remains a critical challenge in deploying neural network classifiers, particularly in real-time systems where ground-truth labels are unavailable during inference. This paper investigates textitVolatility in Certainty (VC), a recently proposed, label-free metric that quantifies irregularities in model confidence by measuring the dispersion of sorted softmax outputs. Specifically, VC is defined as the average squared log-ratio of adjacent certainty values, capturing local fluctuations in model output smoothness. We evaluate VC as a proxy for classification accuracy and as an indicator of adversarial drift. Experiments are conducted on artificial neural networks (ANNs) and convolutional neural networks (CNNs) trained on MNIST, as well as a regularized VGG-like model trained on CIFAR-10. Adversarial examples are generated using the Fast Gradient Sign Method (FGSM) across varying perturbation magnitudes. In addition, mixed test sets are created by gradually introducing adversarial contamination to assess VC's sensitivity under incremental distribution shifts. Our results reveal a strong negative correlation between classification accuracy and log(VC) (correlation rho < -0.90 in most cases), suggesting that VC effectively reflects performance degradation without requiring labeled data. These findings position VC as a scalable, architecture-agnostic, and real-time performance metric suitable for early-warning systems in safety-critical applications.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 14 of its 28 references that are in the map. First posted on arXiv 14 Nov 2025.
Builds on
14 of 28 references.
References · 14
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2016A Baseline for Detecting Misclassified and Out-of-Distribution Examples in Neural Networkscited by 2,385
- 2019Likelihood Ratios for Out-of-Distribution Detectioncited by 453
- 2021Towards Out-Of-Distribution Generalization: A Surveycited by 436
- 2018Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionalitycited by 282
- 2020Beyond I.I.D.: Three Levels of Generalization for Question Answering on Knowledge Basescited by 171
- 2018Predicting the Generalization Gap in Deep Networks with Margin Distributionscited by 113
- 2018Large Margin Deep Networks for Classificationcited by 112
- 2020Are Labels Always Necessary for Classifier Accuracy Evaluation?cited by 104
- 2020Beyond Perturbations: Learning Guarantees with Arbitrary Adversarial Test Examplescited by 44
- 2024Towards Robust Out-of-Distribution Generalization Bounds via Sharpnesscited by 11
- 2025An Experimental Study of Trojan Vulnerabilities in UAV Autonomous Landingcited by 3
Built on by
Not cited yet.