Why do deep convolutional networks generalize so poorly to small image transformations?
Not on the map. Why?
Abstract (arXiv)
Convolutional Neural Networks (CNNs) are commonly assumed to be invariant to small image transformations: either because of the convolutional architecture or because they were trained using data augmentation. Recently, several authors have shown that this is not the case: small translations or rescalings of the input image can drastically change the network's prediction. In this paper, we quantify this phenomena and ask why neither the convolutional architecture nor data augmentation are sufficient to achieve the desired invariance. Specifically, we show that the convolutional architecture does not give invariance since architectures ignore the classical sampling theorem, and data augmentation does not give invariance because the CNNs learn to be invariant to transformations only for images that are very similar to typical images from the training set. We discuss two possible solutions to this problem: (1) antialiasing the intermediate representations and (2) increasing data augmentation and show that they provide only a partial solution at best. Taken together, our results indicate that the problem of insuring invariance to small image transformations in neural networks while preserving high accuracy remains unsolved.
Key facts. Cited by 198 papers in the map (data through 14 Oct 2026). First posted on arXiv 30 May 2018.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 64; 2022: 53; 2023: 33; 2024: 16; 2025: 14; 2026: 18.
198 papers.
Sort:
By area:
- 2021Alias-Free Generative Adversarial Networkscited by 1,184
- 2022Kubric: A scalable dataset generatorcited by 381
- 2021Omnidata: A Scalable Pipeline for Making Multi-Task Mid-Level Vision Datasets from 3D Scanscited by 336
- 2021Towards Causal Representation Learningcited by 209
- 2021AdaMatch: A Unified Approach to Semi-Supervised Learning and Domain Adaptationcited by 104
- 2025DriveSuprim: Towards Precise Trajectory Selection for End-to-End Planningcited by 94
- 2021AugMax: Adversarial Composition of Random Augmentations for Robust Trainingcited by 90
- 2021ReduNet: A White-box Deep Network from the Principle of Maximizing Rate Reductioncited by 84
- 2021Equivariant Point Network for 3D Point Cloud Analysiscited by 81
- 2024Robust agents learn causal world modelscited by 81
- 2021The Evolution of Out-of-Distribution Robustness Throughout Fine-Tuningcited by 75
- 2021On the effectiveness of adversarial training against common corruptionscited by 71
38 more
- 2022Probable Domain Generalization via Quantile Risk Minimizationcited by 66
- 2021MT3: Meta Test-Time Training for Self-Supervised Test-Time Adaptioncited by 65
- 2021Visual Representation Learning Does Not Generalize Strongly Within the Same Domaincited by 61
- 2021Causally motivated Shortcut Removal Using Auxiliary Labelscited by 55
- 2022The Lie Derivative for Measuring Learned Equivariancecited by 54
- 2021Ensembling with Deep Generative Viewscited by 53
- 2022Assaying Out-Of-Distribution Generalization in Transfer Learningcited by 53
- 2021On Aliased Resizing and Surprising Subtleties in GAN Evaluationcited by 51
- 2022On the Principles of Parsimony and Self-Consistency for the Emergence of Intelligencecited by 50
- 2022Shift-tolerant Perceptual Similarity Metriccited by 44
- 2023Deep networks for system identification: a Surveycited by 37
- 2021Inspect, Understand, Overcome: A Survey of Practical Methods for AI Safetycited by 35
- 2021WaveCNet: Wavelet Integrated CNNs to Suppress Aliasing Effect for Noise-Robust Image Classificationcited by 29
- 2021Grounding inductive biases in natural images:invariance stems from variations in datacited by 27
- 2021Dense Unsupervised Learning for Video Segmentationcited by 26
- 2022Benchmarking the Robustness of Deep Neural Networks to Common Corruptions in Digital Pathologycited by 26
- 2021Impact of Aliasing on Generalization in Deep Convolutional Networkscited by 25
- 2022Causal Reasoning Meets Visual Representation Learning: A Prospective Studycited by 24
- 2022On the Strong Correlation Between Model Invariance and Generalizationcited by 23
- 2023DAMEX: Dataset-aware Mixture-of-Experts for visual understanding of mixture-of-datasetscited by 23
- 2021Convolutional Neural Networks Are Not Invariant to Translation, but They Can Learn to Becited by 19
- 2022Feature robustness and sex differences in medical imaging: a case study in MRI-based Alzheimer's disease detectioncited by 19
- 2023ConvNet vs Transformer, Supervised vs CLIP: Beyond ImageNet Accuracycited by 19
- 2021Dead Pixel Test Using Effective Receptive Fieldcited by 18
- 2022Data Augmentation as Feature Manipulationcited by 18
- 2022Learnable Polyphase Sampling for Shift Invariant and Equivariant Convolutional Networkscited by 18
- 2021Toward Spatially Unbiased Generative Modelscited by 17
- 2022Neuromorphic Visual Scene Understanding with Resonator Networkscited by 17
- 2023Adaptive Sharpness-Aware Pruning for Robust Sparse Networkscited by 17
- 2021Shift Invariance Can Reduce Adversarial Robustnesscited by 16
- 2023Making Vision Transformers Truly Shift-Equivariantcited by 16
- 2022The Robustness Limits of SoTA Vision Models to Natural Variationcited by 15
- 2021Blurs Behave Like Ensembles: Spatial Smoothings to Improve Accuracy, Uncertainty, and Robustnesscited by 14
- 2021Predicting Deep Neural Network Generalization with Perturbation Response Curvescited by 14
- 2025Alias-Free Latent Diffusion Models: Improving Fractional Shift Equivariance of Diffusion Latent Spacecited by 14
- 2021Robustness to Augmentations as a Generalization metriccited by 13
- 2021Relative stability toward diffeomorphisms indicates performance in deep netscited by 12
- 2021The Role of Pretrained Representations for the OOD Generalization of Reinforcement Learning Agentscited by 12
50 most cited of 198 All 198 (JSON)
- 2026Exactness at Inference: A Representational Criterion for Out-of-Distribution Generalization21 Sep 2026
- 2026Image-Scale Robustness and Visual Recognition Performance: A Cross-Architecture Analysis5 Sep 2026
- 2026Comparative Analysis of GAT and BERT for Human-Like Playtesting13 Jul 2026
- 2026Geometric Collapse: When Vision Models Fail to Verify Physical Causality8 Jul 2026
- 2026Beyond the Performance Illusion: Structure-Aware Stratified Partitioning and Curriculum Distributionally Robust Optimization for Spatially Correlated Domains2 Jul 2026
- 2026Robustness of Similarity-based Positional Encoding Under Rotations: Theoretical Analysis and Experimental Validation16 Jun 2026
- 2026Phase Marginalization for Patch-Grid Instability in Vision Transformers6 Jun 2026
- 2026Equivariant Latent Alignment via Flow Matching under Group Symmetries29 May 2026
- 2026PARCEL: Pool-Anchored Resampling with Conditioned Elastic Queries for Efficient Vision-Language Understanding28 May 2026
- 2026Auditing Metrics for Synthetic Data Utility: A Cross-Domain Study of Appearance and Geometry21 May 2026
- 2026Parameter-Efficient Architectural Modifications for Translation-Invariant CNNs30 Apr 2026
- 2026PRUE: A Practical Recipe for Field Boundary Segmentation at Scale28 Mar 2026
38 more
- 2026Accurate Shift Invariant Convolutional Neural Networks Using Gaussian-Hermite Moments17 Mar 2026
- 2026UNet-AF: Alias-free UNet architectures11 Mar 2026
- 2026RECAP: Local Hebbian Prototype Learning as a Self-Organizing Readout for Reservoir Dynamics25 Feb 2026
- 2026SEIS: Subspace-based Equivariance and Invariance Scores for Neural Representations3 Feb 2026
- 2026Loss Landscape Geometry of Partial Differential Equation Emulators: Or, Symmetry Learning via Gradient Alignment28 Jan 2026
- 2026SONIC: Spectral Oriented Neural Invariant Convolutions27 Jan 2026
- 2025Shift-Equivariant Complex-Valued Convolutional Neural Networks26 Nov 2025
- 2025Alias-Free ViT: Fractional Shift Invariance via Linear Attention26 Oct 2025
- 2025Test-Time Defense Against Adversarial Attacks via Stochastic Resonance of Latent Ensembles3 Oct 2025
- 2025Towards Foundation Models for Cryo-ET Subtomogram Analysis29 Sep 2025
- 2025SyncMapV2: Robust and Adaptive Unsupervised Segmentation19 Jun 2025
- 2025DriveSuprim: Towards Precise Trajectory Selection for End-to-End Planning7 Jun 2025
- 2025EquiReg: Equivariance Regularized Diffusion for Inverse Problems29 May 2025
- 2025Translation-Equivariance of Normalization Layers and Aliasing in Convolutional Neural Networks26 May 2025
- 2025How Ensembles of Distilled Policies Improve Generalisation in Reinforcement Learning22 May 2025
- 2025SNAP: A Benchmark for Testing the Effects of Capture Conditions on Fundamental Vision Tasks21 May 2025
- 2025Defending Against Frequency-Based Attacks with Diffusion Models15 Apr 2025
- 2025Do regularization methods for shortcut mitigation work as intended?21 Mar 2025
- 2025Alias-Free Latent Diffusion Models: Improving Fractional Shift Equivariance of Diffusion Latent Space12 Mar 2025
- 2025Shifting the Paradigm: A Diffeomorphism Between Time Series Data Manifolds for Achieving Shift-Invariancy in Deep Learning27 Feb 2025
- 2024On the Ability of Deep Networks to Learn Symmetries from Data: A Neural Kernel Theory16 Dec 2024
- 2024Disentanglement and Compositionality of Letter Identity and Letter Position in Variational Auto-Encoder Vision Models11 Dec 2024
- 2024Stability of sorting based embeddings7 Oct 2024
- 2024Adaptive Sampling for Continuous Group Equivariant Neural Networks13 Sep 2024
- 2024Don't Think It Twice: Exploit Shift Invariance for Efficient Online Streaming Inference of CNNs6 Aug 2024
- 2024Label Augmentation for Neural Networks Robustness4 Aug 2024
- 2024Understanding the Role of Invariance in Transfer Learning5 Jul 2024
- 2024How Does Distribution Matching Help Domain Generalization: An Information-theoretic Analysis14 Jun 2024
- 2024Investigating Calibration and Corruption Robustness of Post-hoc Pruned Perception CNNs: An Image Classification Benchmark Study31 May 2024
- 2024Block-As-Domain Adaptation for Workload Prediction from fNIRS Data30 Apr 2024
- 2024How Deep Networks Learn Sparse and Hierarchical Data: the Sparse Random Hierarchy Model16 Apr 2024
- 2024A Computer Vision-Based Quality Assessment Technique for the automatic control of consumables for analytical laboratories16 Apr 2024
- 2024Improving Shift Invariance in Convolutional Neural Networks with Translation Invariant Polyphase Sampling11 Apr 2024
- 2024Lost in Translation: Modern Neural Networks Still Struggle With Small Realistic Image Transformations10 Apr 2024
- 2024Unsupervised Concept Discovery Mitigates Spurious Correlations20 Feb 2024
- 2024Robust agents learn causal world models16 Feb 2024
- 2023Towards Improving Robustness Against Common Corruptions using Mixture of Class Specific Experts16 Nov 2023
- 2023ConvNet vs Transformer, Supervised vs CLIP: Beyond ImageNet Accuracy15 Nov 2023
50 newest of 198 All 198 (JSON)
- 2025Alias-Free Latent Diffusion Models: Improving Fractional Shift Equivariance of Diffusion Latent Spacecited by 14
- 2023Benchmarking Robustness to Text-Guided Corruptionscited by 4
- 2025EquiReg: Equivariance Regularized Diffusion for Inverse Problemscited by 3
- 2025Defending Against Frequency-Based Attacks with Diffusion Modelscited by 1
- 2026UNet-AF: Alias-free UNet architecturescited by 0
- 2026Equivariant Latent Alignment via Flow Matching under Group Symmetriescited by 0
- 2026Equivariant Latent Alignment via Flow Matching under Group Symmetries29 May 2026
- 2026UNet-AF: Alias-free UNet architectures11 Mar 2026
- 2025EquiReg: Equivariance Regularized Diffusion for Inverse Problems29 May 2025
- 2025Defending Against Frequency-Based Attacks with Diffusion Models15 Apr 2025
- 2025Alias-Free Latent Diffusion Models: Improving Fractional Shift Equivariance of Diffusion Latent Space12 Mar 2025
- 2023Benchmarking Robustness to Text-Guided Corruptions6 Apr 2023
- 2024Robust agents learn causal world modelscited by 81
- 2024Robust agents learn causal world models16 Feb 2024
- 2021Alias-Free Generative Adversarial Networkscited by 1,184
- 2022Kubric: A scalable dataset generatorcited by 381
- 2021Omnidata: A Scalable Pipeline for Making Multi-Task Mid-Level Vision Datasets from 3D Scanscited by 336
- 2021Towards Causal Representation Learningcited by 209
- 2021AdaMatch: A Unified Approach to Semi-Supervised Learning and Domain Adaptationcited by 104
- 2025DriveSuprim: Towards Precise Trajectory Selection for End-to-End Planningcited by 94
- 2021AugMax: Adversarial Composition of Random Augmentations for Robust Trainingcited by 90
- 2021ReduNet: A White-box Deep Network from the Principle of Maximizing Rate Reductioncited by 84
- 2021Equivariant Point Network for 3D Point Cloud Analysiscited by 81
- 2021The Evolution of Out-of-Distribution Robustness Throughout Fine-Tuningcited by 75
- 2021On the effectiveness of adversarial training against common corruptionscited by 71
- 2022Probable Domain Generalization via Quantile Risk Minimizationcited by 66
12 most cited of 186 All 186 (JSON)
- 2026Exactness at Inference: A Representational Criterion for Out-of-Distribution Generalization21 Sep 2026
- 2026Image-Scale Robustness and Visual Recognition Performance: A Cross-Architecture Analysis5 Sep 2026
- 2026Comparative Analysis of GAT and BERT for Human-Like Playtesting13 Jul 2026
- 2026Geometric Collapse: When Vision Models Fail to Verify Physical Causality8 Jul 2026
- 2026Beyond the Performance Illusion: Structure-Aware Stratified Partitioning and Curriculum Distributionally Robust Optimization for Spatially Correlated Domains2 Jul 2026
- 2026Robustness of Similarity-based Positional Encoding Under Rotations: Theoretical Analysis and Experimental Validation16 Jun 2026
- 2026Phase Marginalization for Patch-Grid Instability in Vision Transformers6 Jun 2026
- 2026Auditing Metrics for Synthetic Data Utility: A Cross-Domain Study of Appearance and Geometry21 May 2026
- 2026Parameter-Efficient Architectural Modifications for Translation-Invariant CNNs30 Apr 2026
- 2026PRUE: A Practical Recipe for Field Boundary Segmentation at Scale28 Mar 2026
- 2026Accurate Shift Invariant Convolutional Neural Networks Using Gaussian-Hermite Moments17 Mar 2026
- 2026RECAP: Local Hebbian Prototype Learning as a Self-Organizing Readout for Reservoir Dynamics25 Feb 2026
12 newest of 186 All 186 (JSON)