Prof. Xingyu ZHAO from Wuhan University delivered a talk on “Deep Learning Robustness: From A System Reliability’s Perspective”
This talk examines deep learning robustness from a system reliability perspective, arguing that robustness should not be studied as an isolated AI model property but in relation to higher-level system claims such as safety assurance, reliability assessment, and security certification. It first reviews common robustness problem formulations, including binary robustness verification, maximum safe radius, maximum loss, and probabilistic robustness. Among these, probabilistic robustness is highlighted as especially relevant for safety-critical AI systems because it quantifies the likelihood of adversarial examples under stochastic perturbations, thereby aligning more naturally with reliability and risk reasoning in real-world operation.
The talk then distinguishes the roles of adversarial robustness and probabilistic robustness at system level. Adversarial robustness is more closely associated with security against maliciously optimized attacks, whereas probabilistic robustness better captures reliability and safety risks arising from benign operational noise, environmental uncertainty, and unsophisticated random perturbations. This distinction motivates a broader research agenda in which robustness metrics are selected according to the system-level property being claimed.
Building on this perspective, the talk presents the presenter team’s recent work on probabilistic robustness estimation, improvement and benchmarking. The talk advocates integrating probabilistic robustness into system-level safety and reliability modelling to support more meaningful assurance arguments for AI-enabled systems.




