Do CIFAR-10 Classifiers Generalize to CIFAR-10?
Not on the map. Why?
Abstract (arXiv)
Machine learning is currently dominated by largely experimental work focused on improvements in a few key tasks. However, the impressive accuracy numbers of the best performing models are questionable because the same test sets have been used to select these models for multiple years now. To understand the danger of overfitting, we measure the accuracy of CIFAR-10 classifiers by creating a new test set of truly unseen images. Although we ensure that the new test set is as close to the original data distribution as possible, we find a large drop in accuracy (4% to 10%) for a broad range of deep learning models. Yet more recent models with higher original accuracy show a smaller drop and better overall performance, indicating that this drop is likely not due to overfitting based on adaptivity. Instead, we view our results as evidence that current accuracy numbers are brittle and susceptible to even minute natural variations in the data distribution.
Key facts. Cited by 197 papers in the map (data through 7 Oct 2026). First posted on arXiv 1 Jun 2018.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 28; 2022: 41; 2023: 54; 2024: 31; 2025: 28; 2026: 15.
197 papers.
Sort:
By area:
- 2022Fine-Tuning can Distort Pretrained Features and Underperform Out-of-Distributioncited by 722
- 2023Towards Stable Test-Time Adaptation in Dynamic Wild Worldcited by 409
- 2021MEMO: Test Time Robustness via Adaptation and Augmentationcited by 376
- 2022Deduplicating Training Data Mitigates Privacy Risks in Language Modelscited by 309
- 2021Accuracy on the Line: On the Strong Correlation Between Out-of-Distribution and In-Distribution Generalizationcited by 248
- 2022Leveraging Unlabeled Data to Predict Out-of-Distribution Performancecited by 141
- 2021The Benchmark Lotterycited by 133
- 2024Observational Scaling Laws and the Predictability of Language Model Performancecited by 128
- 2021Epistemic Neural Networkscited by 120
- 2021Exploring the Limits of Large Scale Pre-trainingcited by 104
- 2023VisIT-Bench: A Benchmark for Vision-Language Instruction Following Inspired by Real-World Usecited by 100
- 2021On Interaction Between Augmentations and Corruptions in Natural Corruption Robustnesscited by 98
38 more
- 2023Leaving Reality to Imagination: Robust Classification via Generated Datasetscited by 91
- 2021AugMax: Adversarial Composition of Random Augmentations for Robust Trainingcited by 89
- 2022Learning to Learn with Generative Models of Neural Network Checkpointscited by 85
- 2022Wild-Time: A Benchmark of in-the-Wild Distribution Shift over Timecited by 85
- 2024Better than classical? The subtle art of benchmarking quantum machine learning modelscited by 82
- 2022HEAR: Holistic Evaluation of Audio Representationscited by 77
- 2021The Evolution of Out-of-Distribution Robustness Throughout Fine-Tuningcited by 74
- 2021What Does Rotation Prediction Tell Us about Classifier Accuracy under Varying Testing Environments?cited by 63
- 2023On Pitfalls of Test-Time Adaptationcited by 63
- 2021Lost in Pruning: The Effects of Pruning Neural Networks beyond Test Accuracycited by 62
- 2022Contrastive Adapters for Foundation Model Group Robustnesscited by 62
- 2022GraphWorld: Fake Graphs Bring Real Insights for GNNscited by 56
- 2024Beyond Model Adaptation at Test Time: A Surveycited by 55
- 2022Sample-dependent Adaptive Temperature Scaling for Improved Calibrationcited by 48
- 2023Multimodal LLMs for health grounded in individual-specific datacited by 48
- 2022Pre-Train Your Loss: Easy Bayesian Transfer Learning with Informative Priorscited by 43
- 2023In Search of Lost Online Test-time Adaptation: A Surveycited by 43
- 2021Near-Optimal Linear Regression under Distribution Shiftcited by 40
- 2022Test-Time Robust Personalization for Federated Learningcited by 39
- 2023On the Robustness of Open-World Test-Time Training: Self-Training with Dynamic Prototype Expansioncited by 34
- 2022TTTFlow: Unsupervised Test-Time Training with Normalizing Flowcited by 33
- 2026AIRS-Bench: a Suite of Tasks for Frontier AI Research Science Agentscited by 32
- 2022Sparse Visual Counterfactual Explanations in Image Spacecited by 30
- 2023RLSbench: Domain Adaptation Under Relaxed Label Shiftcited by 30
- 2023Frequency Domain-based Dataset Distillationcited by 28
- 2022RegMixup: Mixup as a Regularizer Can Surprisingly Improve Accuracy and Out Distribution Robustnesscited by 27
- 2021Robust Object Detection via Instance-Level Temporal Cycle Confusioncited by 24
- 2022Is the Performance of My Deep Network Too Good to Be True? A Direct Approach to Estimating the Bayes Error in Binary Classificationcited by 24
- 2022On the Strong Correlation Between Model Invariance and Generalizationcited by 23
- 2021The Neural Testbed: Evaluating Joint Predictionscited by 22
- 2022Fine-Tuning Language Models via Epistemic Neural Networkscited by 22
- 2023Confidence and Dispersity Speak: Characterising Prediction Matrix for Unsupervised Accuracy Estimationcited by 22
- 2023ClusT3: Information Invariant Test-Time Trainingcited by 21
- 2023Characterizing Out-of-Distribution Error via Optimal Transportcited by 20
- 2023Function-Space Regularization in Neural Networks: A Probabilistic Perspectivecited by 20
- 2024An Empirical Study Into What Matters for Calibrating Vision-Language Modelscited by 20
- 2022A Learning Based Hypothesis Test for Harmful Covariate Shiftcited by 18
- 2023Pixel-Grounded Prototypical Part Networkscited by 18
50 most cited of 197 All 197 (JSON)
- 2026From Text Decisions to Pixels: An Study of Jev-Style Visual Choice Model24 Sep 2026
- 2026PLSP (Pre-hoc Liminal Space Profiling): OOD Prediction over Detection -- An Anticipatory Approach for Machine Learning Model Reliability10 Sep 2026
- 2026BRUCE: Benchmarking Robustness Under Corruption Escalation for Scientific Vision-Language Reasoning7 Aug 2026
- 2026Winning by Peeking: Unenforced Budgets and Test-Set Selection Inflate Short-Budget AutoML Comparisons7 Aug 2026
- 2026Bridging Domain Expertise and Generalization for Performance Estimation4 Jun 2026
- 2026Encrypted Neural Networks without Overflows21 May 2026
- 2026A New Framework to Analyse the Distributional Robustness of Deep Neural Networks20 May 2026
- 2026TopoGeoScore: A Self-Supervised Source-Only Geometric Framework for OOD Checkpoint Selection9 May 2026
- 2026A Comparative Analysis on the Performance of Upper Confidence Bound Algorithms in Adaptive Deep Neural Networks27 Apr 2026
- 2026Mitigating Privacy Risk via Forget Set-Free Unlearning12 Apr 2026
- 2026RECAP: Local Hebbian Prototype Learning as a Self-Organizing Readout for Reservoir Dynamics25 Feb 2026
- 2026AIRS-Bench: a Suite of Tasks for Frontier AI Research Science Agents6 Feb 2026
38 more
- 2026MultiModal Fine-tuning with Synthetic Captions29 Jan 2026
- 2026Order-Aware Test-Time Adaptation: Leveraging Temporal Dynamics for Robust Streaming Inference28 Jan 2026
- 2026Meta-learning to Address Data Shift in Time Series Classification13 Jan 2026
- 2025Federated Learning with Feedback Alignment14 Dec 2025
- 2025On the Bayes Inconsistency of Disagreement Discrepancy Surrogates5 Dec 2025
- 2025Diagnosing Corruption-Induced Reliability Failures in Vision-Language Models24 Nov 2025
- 2025ODP-Bench: Benchmarking Out-of-Distribution Performance Prediction31 Oct 2025
- 2025How does the optimizer implicitly bias the model merging loss landscape?6 Oct 2025
- 2025Confidence and Dispersity as Signals: Unsupervised Model Evaluation and Ranking3 Oct 2025
- 2025Probabilistic Runtime Verification, Evaluation and Risk Assessment of Visual Deep Learning Systems23 Sep 2025
- 2025Dual-View Alignment Learning with Hierarchical-Prompt for Class-Imbalance Multi-Label Classification22 Sep 2025
- 2025A Modern Look at Simplicity Bias in Image Classification Tasks13 Sep 2025
- 2025Adapt in the Wild: Test-Time Entropy Minimization with Sharpness and Feature Regularization5 Sep 2025
- 2025Domain Adaptation Techniques for Natural and Medical Image Classification28 Aug 2025
- 2025ALSA: Anchors in Logit Space for Out-of-Distribution Accuracy Estimation27 Aug 2025
- 2025Consensus-Driven Active Model Selection31 Jul 2025
- 2025PGKET: A Photonic Gaussian Kernel Enhanced Transformer25 Jul 2025
- 2025When Test-Time Adaptation Meets Self-Supervised Models30 Jun 2025
- 2025SyncMapV2: Robust and Adaptive Unsupervised Segmentation19 Jun 2025
- 2025Reliably Detecting Model Failures in Deployment Without Labels5 Jun 2025
- 2025Practical estimation of the optimal classification error with soft labels and calibration27 May 2025
- 2025Kuramoto-FedAvg: Using Synchronization Dynamics to Improve Federated Learning Optimization under Statistical Heterogeneity26 May 2025
- 2025CapBencher: Give Your LLM Benchmark a Built-in Alarm for Test-Set Overfitting23 May 2025
- 2025Epistemic Artificial Intelligence is Essential for Machine Learning Models to Truly 'Know When They Do Not Know'8 May 2025
- 2025Application of Sensitivity Analysis Methods for Studying Neural Network Models21 Apr 2025
- 2025Bidirectional Linear Recurrent Models for Sequence-Level Multisource Fusion11 Apr 2025
- 2025On the Robustness Tradeoff in Fine-Tuning19 Mar 2025
- 2025BTFL: A Bayesian-based Test-Time Generalization Method for Internal and External Data Distributions in Federated learning9 Mar 2025
- 2025Exploring Adversarial Transferability between Kolmogorov-arnold Networks8 Mar 2025
- 2025The Vendiscope: An Algorithmic Microscope For Data Collections15 Feb 2025
- 2025Addressing Label Shift in Distributed Learning via Entropy Regularization4 Feb 2025
- 2024Semantic Anchor Transport: Robust Test-Time Adaptation for Vision-Language Models26 Nov 2024
- 2024Label Distribution Shift-Aware Prediction Refinement for Test-Time Adaptation20 Nov 2024
- 2024Tracing the Roots: Leveraging Temporal Dynamics in Diffusion Trajectories for Origin Attribution12 Nov 2024
- 2024Are Neuromorphic Architectures Inherently Privacy-preserving? An Exploratory Study10 Nov 2024
- 2024Beyond Model Adaptation at Test Time: A Survey6 Nov 2024
- 2024How many classifiers do we need?1 Nov 2024
- 2024Causality-Driven Audits of Model Robustness30 Oct 2024
50 newest of 197 All 197 (JSON)
- 2023VisIT-Bench: A Benchmark for Vision-Language Instruction Following Inspired by Real-World Usecited by 100
- 2023Multimodal LLMs for health grounded in individual-specific datacited by 48
- 2024An Empirical Study Into What Matters for Calibrating Vision-Language Modelscited by 20
- 2024Privacy-Aware Visual Language Modelscited by 12
- 2024Semantic Anchor Transport: Robust Test-Time Adaptation for Vision-Language Modelscited by 3
- 2025Diagnosing Corruption-Induced Reliability Failures in Vision-Language Modelscited by 3
- 2025Diagnosing Corruption-Induced Reliability Failures in Vision-Language Models24 Nov 2025
- 2024Semantic Anchor Transport: Robust Test-Time Adaptation for Vision-Language Models26 Nov 2024
- 2024Privacy-Aware Visual Language Models27 May 2024
- 2024An Empirical Study Into What Matters for Calibrating Vision-Language Models12 Feb 2024
- 2023VisIT-Bench: A Benchmark for Vision-Language Instruction Following Inspired by Real-World Use12 Aug 2023
- 2023Multimodal LLMs for health grounded in individual-specific data18 Jul 2023
- 2023Multi-scale Diffusion Denoised Smoothingcited by 9
- 2023Benchmarking Robustness to Text-Guided Corruptionscited by 4
- 2023Interpretable ODE-style Generative Diffusion Model via Force Field Constructioncited by 0
- 2024Tracing the Roots: Leveraging Temporal Dynamics in Diffusion Trajectories for Origin Attributioncited by 0
- 2024Tracing the Roots: Leveraging Temporal Dynamics in Diffusion Trajectories for Origin Attribution12 Nov 2024
- 2023Multi-scale Diffusion Denoised Smoothing25 Oct 2023
- 2023Benchmarking Robustness to Text-Guided Corruptions6 Apr 2023
- 2023Interpretable ODE-style Generative Diffusion Model via Force Field Construction14 Mar 2023
- 2024Video Relationship Detection Using Mixture of Expertscited by 1
- 2024Video Relationship Detection Using Mixture of Experts6 Mar 2024
- 2022Fine-Tuning can Distort Pretrained Features and Underperform Out-of-Distributioncited by 722
- 2023Towards Stable Test-Time Adaptation in Dynamic Wild Worldcited by 409
- 2021MEMO: Test Time Robustness via Adaptation and Augmentationcited by 376
- 2022Deduplicating Training Data Mitigates Privacy Risks in Language Modelscited by 309
- 2021Accuracy on the Line: On the Strong Correlation Between Out-of-Distribution and In-Distribution Generalizationcited by 248
- 2022Leveraging Unlabeled Data to Predict Out-of-Distribution Performancecited by 141
- 2021The Benchmark Lotterycited by 133
- 2024Observational Scaling Laws and the Predictability of Language Model Performancecited by 128
- 2021Epistemic Neural Networkscited by 120
- 2021Exploring the Limits of Large Scale Pre-trainingcited by 104
- 2021On Interaction Between Augmentations and Corruptions in Natural Corruption Robustnesscited by 98
- 2023Leaving Reality to Imagination: Robust Classification via Generated Datasetscited by 91
12 most cited of 182 All 182 (JSON)
- 2026From Text Decisions to Pixels: An Study of Jev-Style Visual Choice Model24 Sep 2026
- 2026PLSP (Pre-hoc Liminal Space Profiling): OOD Prediction over Detection -- An Anticipatory Approach for Machine Learning Model Reliability10 Sep 2026
- 2026Winning by Peeking: Unenforced Budgets and Test-Set Selection Inflate Short-Budget AutoML Comparisons7 Aug 2026
- 2026Bridging Domain Expertise and Generalization for Performance Estimation4 Jun 2026
- 2026Encrypted Neural Networks without Overflows21 May 2026
- 2026A New Framework to Analyse the Distributional Robustness of Deep Neural Networks20 May 2026
- 2026TopoGeoScore: A Self-Supervised Source-Only Geometric Framework for OOD Checkpoint Selection9 May 2026
- 2026A Comparative Analysis on the Performance of Upper Confidence Bound Algorithms in Adaptive Deep Neural Networks27 Apr 2026
- 2026RECAP: Local Hebbian Prototype Learning as a Self-Organizing Readout for Reservoir Dynamics25 Feb 2026
- 2026MultiModal Fine-tuning with Synthetic Captions29 Jan 2026
- 2026Order-Aware Test-Time Adaptation: Leveraging Temporal Dynamics for Robust Streaming Inference28 Jan 2026
- 2026Meta-learning to Address Data Shift in Time Series Classification13 Jan 2026
12 newest of 182 All 182 (JSON)