AI Paper Atlas

Research map / Adversarial robustness and security / Certified and empirical robustness

A Simple Unified Framework for Detecting Out-of-Distribution Samples and Adversarial Attacks

NeurIPS 2018 · Adversarial robustness and security › Certified and empirical robustness · approach: Robust overfitting and regularization · 982 citations (OpenAlex)

Read the paperCheck your idea against 108,967 papers

AI-extracted summary. Written by AI from the paper's title only (no summary yet). Numbers and claims can be wrong or missing context, so check the paper before you cite or build on it.

Measured effects reported in the paper

What was changedWhereMeasuredEffect
Replace the maximum softmax posterior confidence with a Mahalanobis distance scoreResNet trained on CIFAR-10 · SVHN OODTNR at TPR 95%: 86.6 / 96.4Helped
Use Mahalanobis scores instead of LID scoresResNet trained on CIFAR-10 · CW detectionAUROC: 82.2% to 95.8%Helped
Add input pre-processing to the Mahalanobis score (ablation)Mahalanobis detector · SVHN OOD (CIFAR-10 ResNet)TNR at TPR 95%: 54.51 -> 92.26Helped
Add feature ensemble to the Mahalanobis score (ablation)Mahalanobis detector · SVHN OOD (CIFAR-10 ResNet)TNR at TPR 95%: 54.51 -> 91.45Helped
Combine feature ensemble with input pre-processing (ablation)Mahalanobis detector · SVHN OOD (CIFAR-10 ResNet)TNR at TPR 95%: 54.51 -> 96.42Helped
Tune on FGSM samples and use the detector on other attacksMahalanobis detector · BIM, DeepFool, and CW detectionAUROCMixed

Closest papers by meaning

Writing a paper in this area? scime draft is a free LaTeX editor with AI included, real-time co-authors and a check of your references and venue rules before you submit. It also imports OpenAI Prism projects.

Open scime draft

Get the next scime Dispatch and a monthly field update

Free. We send a confirmation link first; every email has a one-click unsubscribe. Privacy