atlas

Research map / Label-efficient and robust learning / OOD and anomaly detection

Position: Supervised Classifiers Answer the Wrong Questions for OOD Detection

ICML 2025 · Label-efficient and robust learning › OOD and anomaly detection · approach: Provable and feature-based OOD detection

Read the paperCheck your idea against 108,967 papers

AI-extracted summary. Written by AI from the paper's full text. Numbers and claims can be wrong or missing context, so check the paper before you cite or build on it.

Position paper arguing that OOD detection methods built on supervised classifiers trained on in-distribution data answer the wrong question, illustrated with feature- and logit-based failure analyses and tests of common interventions.

Problem

Methods that detect out-of-distribution inputs using the uncertainty, logits, or features of a classifier trained only on in-distribution classes are misspecified for the OOD question, leading to irreducible errors.

Approach

Argues that feature-based (distance) and logit-based (uncertainty) OOD scores answer different questions than "is this input from a different distribution?", and that common fixes (hybrid scores, outlier exposure, epistemic uncertainty, extra OOD class, generative models, scaling) do not resolve this misalignment.

Key results

Measured effects reported in the paper

What was changedWhereMeasuredEffect
Use Mahalanobis distance on supervised features to detect dogs as OODResNet-18 trained on airplane, cat, and truck classes · CIFAR-10 subset vs dogAUROCHurt
Use MSP, Max-Logit, or Energy Score for OOD scoringResNet-50 trained on ImageNet-1K · ImageNet-1K vs Textures (striped)AUROC: MSP: 0.484; Max-Logit: 0.654; Energy Score: 0.665Hurt
Select only OOD-discriminative features using oracle PCA instead of all features (ablation)Mahalanobis OOD detection · ImageNet-1K vs IN-OOD, Textures, and iNaturalistAUROC: over 10 percentage pointsHelped
Choose PCA features for one OOD dataset and apply them to other OOD datasets (ablation)Mahalanobis OOD detection with ViT-S/16 features · ImageNet-1K vs IN-OOD, Textures, and iNaturalistAUROCMixed
Combine normalized Mahalanobis and MSP scores with Hybrid-AddSupervised OOD detection methods · Textures, iNaturalist, and IN-OODAUROCMixed
Add outlier exposure using TIN-597 during trainingResNet-18 trained on CIFAR-10 · CIFAR-C and other covariate shiftsaccuracy: over 10%Hurt
Increase training data from 30 to 10000 points for Bayesian last-layer Laplace approximation (ablation)ResNet-18 features with Bayesian last layer · CIFAR-100 OOD detection (three-class task)AUROC: 0.769 -> 0.741Hurt
Use MAP estimates instead of Bayesian Laplace approximation (ablation)ResNet-18 features with last-layer classifier · CIFAR-100 OOD detection (three-class task)AUROC: 0.741 -> 0.735Hurt
Train an OOD class using examples from cup and skyscraperResNet-18 trained on two CIFAR-100 ID classes · Remaining CIFAR-100 classesOOD detection performanceMixed
Use diffusion loss from a DiT trained on ImageNet-1K for OOD scoringDiT · ImageNet-1K vs Textures and iNaturalistAUROC: 0.462; 0.694Mixed
Increase model and pretraining scaleSupervised feature-based OOD detection · ImageNet-1K vs ImageNet-OODAUROC: over 5% irreducible errorHelped

Surprising findings

Limitations

Experimental setup

Datasets: ImageNet-1k CIFAR-10 CIFAR-100 ImageNet-OOD Textures iNaturalist TIN-597 CelebA STL-9 CINIC-10 CIFAR-C MNIST

Benchmarks: ImageNet-OOD Textures iNaturalist CIFAR-10 vs CIFAR-100 CelebA vs CIFAR-10 CIFAR-C

Metrics: AUROC FPR@95 accuracy

Baselines: MSP Mahalanobis distance Relative Mahalanobis ViM Max Logit Energy score Entropy Outlier Exposure

Builds on: maximum softmax probability Mahalanobis distance ViM outlier exposure normalizing flows

Closest papers by meaning

Writing a paper in this area? scime draft is a free LaTeX editor with AI included, real-time co-authors and a check of your references and venue rules before you submit. It also imports OpenAI Prism projects.

Open scime draft

Get the next scime Dispatch and a monthly field update

Free. We send a confirmation link first; every email has a one-click unsubscribe. Privacy