mlsanityData to 14 Oct 2026

Measuring the tendency of CNNs to Learn Surface Statistical Regularities

arXiv 1711.11561 ↗First posted 30 Nov 2017cs.LG stat.MLcited by 87

Not on the map. Why?

Abstract (arXiv)

Deep CNNs are known to exhibit the following peculiarity: on the one hand they generalize extremely well to a test set, while on the other hand they are extremely sensitive to so-called adversarial perturbations. The extreme sensitivity of high performance CNNs to adversarial examples casts serious doubt that these networks are learning high level abstractions in the dataset. We are concerned with the following question: How can a deep CNN that does not learn any high level semantics of the dataset manage to generalize so well? The goal of this article is to measure the tendency of CNNs to learn surface statistical regularities of the dataset. To this end, we use Fourier filtering to construct datasets which share the exact same high level abstractions but exhibit qualitatively different surface statistical regularities. For the SVHN and CIFAR-10 datasets, we present two Fourier filtered variants: a low frequency variant and a randomly filtered variant. Each of the Fourier filtering schemes is tuned to preserve the recognizability of the objects. Our main finding is that CNNs exhibit a tendency to latch onto the Fourier image statistics of the training dataset, sometimes exhibiting up to a 28% generalization gap across the various test sets. Moreover, we observe that significantly increasing the depth of a network has a very marginal impact on closing the aforementioned generalization gap. Thus we provide quantitative evidence supporting the hypothesis that deep CNNs tend to learn surface statistical regularities in the dataset rather than higher-level abstract concepts.

Key facts. Cited by 87 papers in the map (data through 14 Oct 2026). First posted on arXiv 30 Nov 2017.

Builds on

No reference list yet.

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2021: 31; 2022: 22; 2023: 18; 2024: 5; 2025: 4; 2026: 7.

87 papers.

Sort:

By area:

  1. 2021Vision Transformers are Robust Learnerscited by 207
  2. 2021Partial success in closing the gap between human and machine visioncited by 185
  3. 20223D Common Corruptions and Data Augmentationcited by 119
  4. 2021Rethinking Architecture Design for Tackling Data Heterogeneity in Federated Learningcited by 111
  5. 2021Towards Interpreting and Mitigating Shortcut Learning Behavior of NLU Modelscited by 78
  6. 2023On the Foundations of Shortcut Learningcited by 65
  7. 2022MulT: An End-to-End Multitask Learning Transformercited by 48
  8. 2023A Survey on Transferability of Adversarial Examples across Deep Neural Networkscited by 44
  9. 2021Robust Contrastive Learning Using Negative Samples with Diminished Semanticscited by 43
  10. 2021Spectral Bias in Practice: The Role of Function Frequency in Generalizationcited by 37
  11. 2021A Little Robustness Goes a Long Way: Leveraging Robust Features for Targeted Transfer Attackscited by 34
  12. 2021Does enhanced shape bias improve neural network robustness to common corruptions?cited by 32
38 more
  1. 2023Downstream-agnostic Adversarial Examplescited by 32
  2. 2021Exploring the Efficacy of Automatically Generated Counterfactuals for Sentiment Analysiscited by 30
  3. 2023Towards Trustworthy and Aligned Machine Learning: A Data-centric Survey with Causality Perspectivescited by 30
  4. 2023Don't blame Dataset Shift! Shortcut Learning due to Gradients and Cross Entropycited by 30
  5. 2021Test time Adaptation through Perturbation Robustnesscited by 28
  6. 2022Domain Generalization by Learning and Removing Domain-specific Featurescited by 28
  7. 2023What do neural networks learn in image classification? A frequency shortcut perspectivecited by 28
  8. 2021Dynamic Inference with Neural Interpreterscited by 24
  9. 2021Robustness via Cross-Domain Ensemblescited by 23
  10. 2021Closer Look at the Transferability of Adversarial Examples: How They Fool Different Models Differentlycited by 22
  11. 2022Causal Balancing for Domain Generalizationcited by 20
  12. 2021Meta Adversarial Training against Universal Patchescited by 19
  13. 2021Universal Adversarial Perturbations Through the Lens of Deep Steganography: Towards A Fourier Perspectivecited by 18
  14. 2022The worst of both worlds: A comparative analysis of errors in learning from data in psychology and machine learningcited by 17
  15. 2021Multimodal Scale Consistency and Awareness for Monocular Self-Supervised Depth Estimationcited by 16
  16. 2024Understanding Bias in Large-Scale Visual Datasetscited by 15
  17. 2021Toward Learning Human-aligned Cross-domain Robust Models by Countering Misaligned Featurescited by 14
  18. 2022Simplicity Bias Leads to Amplified Performance Disparitiescited by 11
  19. 2021Detecting Spurious Correlations with Sanity Tests for Artificial Intelligence Guided Radiology Systemscited by 10
  20. 2021Phy-Q as a measure for physical reasoning intelligencecited by 10
  21. 2022On the Origins of the Block Structure Phenomenon in Neural Network Representationscited by 10
  22. 2023Rapid Network Adaptation: Learning to Adapt Neural Networks Using Test-Time Feedbackcited by 10
  23. 2022Practical No-box Adversarial Attacks with Training-free Hybrid Image Transformationcited by 9
  24. 2021Characterizing and Improving the Robustness of Self-Supervised Learning through Background Augmentationscited by 8
  25. 2021Impact of Spatial Frequency Based Constraints on Adversarial Robustnesscited by 8
  26. 2022Investigating and Explaining the Frequency Bias in Image Classificationcited by 8
  27. 2022Exploring Adversarial Robustness of Vision Transformers in the Spectral Perspectivecited by 8
  28. 2021Adversarial Perturbations Are Not So Weird: Entanglement of Robust and Non-Robust Features in Neural Network Classifierscited by 7
  29. 2021Disrupting Model Training with Adversarial Shortcutscited by 7
  30. 2021Natural Adversarial Objectscited by 7
  31. 2022Fourier-Based Augmentations for Improved Robustness and Uncertainty Calibrationcited by 7
  32. 2023Linear CNNs Discover the Statistical Structure of the Dataset Using Only the Most Dominant Frequenciescited by 7
  33. 2023ProtoArgNet: Interpretable Image Classification with Super-Prototypes and Argumentation [Technical Report]cited by 7
  34. 2021Pulling Up by the Causal Bootstraps: Causal Data Augmentation for Pre-training Debiasingcited by 6
  35. 2025DDB: Diffusion Driven Balancing to Address Spurious Correlationscited by 6
  36. 2021Counterfactual Maximum Likelihood Estimation for Training Deep Networkscited by 5
  37. 2022InBiaseD: Inductive Bias Distillation to Improve Generalization and Robustness through Shape-awarenesscited by 5
  38. 2023How many dimensions are required to find an adversarial example?cited by 5

50 most cited of 87 All 87 (JSON)