Do We Train on Test Data? Purging CIFAR of Near-Duplicates
Not on the map. Why?
Abstract (arXiv)
The CIFAR-10 and CIFAR-100 datasets are two of the most heavily benchmarked datasets in computer vision and are often used to evaluate novel methods and model architectures in the field of deep learning. However, we find that 3.3% and 10% of the images from the test sets of these datasets have duplicates in the training set. These duplicates are easily recognizable by memorization and may, hence, bias the comparison of image recognition techniques regarding their generalization capability. To eliminate this bias, we provide the "fair CIFAR" (ciFAIR) dataset, where we replaced all duplicates in the test sets with new images sampled from the same domain. We then re-evaluate the classification performance of various popular state-of-the-art CNN architectures on these new test sets to investigate whether recent research has overfitted to memorizing data instead of learning abstract concepts. We find a significant drop in classification accuracy of between 9% and 14% relative to the original performance on the duplicate-free test set. The ciFAIR dataset and pre-trained models are available at https://cvjena.github.io/cifair/, where we also maintain a leaderboard.
Key facts. Cited by 61 papers in the map (data through 7 Oct 2026). First posted on arXiv 1 Feb 2019.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 7; 2022: 13; 2023: 12; 2024: 12; 2025: 4; 2026: 13.
61 papers.
Sort:
By area:
- 2023Exposing flaws of generative model evaluation metrics and their unfair treatment of diffusion modelscited by 199
- 2022Datamodels: Predicting Predictions from Training Datacited by 186
- 2023On Provable Copyright Protection for Generative Modelscited by 97
- 2021On Memorization in Probabilistic Deep Generative Modelscited by 60
- 2022When does dough become a bagel? Analyzing the remaining mistakes on ImageNetcited by 60
- 2023How Effective Are Neural Networks for Fixing Security Vulnerabilitiescited by 50
- 2024Repetita Iuvant: Data Repetition Allows SGD to Learn High-Dimensional Multi-Index Functionscited by 35
- 2022Is the Performance of My Deep Network Too Good to Be True? A Direct Approach to Estimating the Bayes Error in Binary Classificationcited by 24
- 2022Bugs in the Data: How ImageNet Misrepresents Biodiversitycited by 24
- 2023Memorization Through the Lens of Curvature of Loss Function Around Samplescited by 24
- 2021A Framework for Deprecating Datasets: Standardizing Documentation, Identification, and Communicationcited by 18
- 2021A Framework for Cluster and Classifier Evaluation in the Absence of Reference Labelscited by 16
38 more
- 2022Unsupervised visualization of image datasets using contrastive learningcited by 16
- 2024The Mirrored Influence Hypothesis: Efficient Data Influence Estimation by Harnessing Forward Passescited by 16
- 2023Do We Train on Test Data? The Impact of Near-Duplicates on License Plate Recognitioncited by 14
- 2021Tune It or Don't Use It: Benchmarking Data-Efficient Image Classificationcited by 11
- 2022Fix-A-Step: Semi-supervised Learning from Uncurated Unlabeled Datacited by 11
- 2023Reproducibility in Multiple Instance Learning: A Case For Algorithmic Unit Testscited by 11
- 2024What Do Machine Learning Researchers Mean by "Reproducible"?cited by 8
- 2022Deepchecks: A Library for Testing and Validating Machine Learning Models and Datacited by 7
- 2022A Siren Song of Open Source Reproducibilitycited by 7
- 2022A Pareto-optimal compositional energy-based model for sampling and optimization of protein sequencescited by 7
- 2024Automated Program Repair: Emerging trends pose and expose problems for benchmarkscited by 7
- 2025Benchmarking is Broken -- Don't Let AI be its Own Judgecited by 7
- 2023On Evaluation of Document Classification using RVL-CDIPcited by 5
- 2024Rethinking cluster-conditioned diffusion models for label-free image synthesiscited by 5
- 2025The Vendiscope: An Algorithmic Microscope For Data Collectionscited by 5
- 2021Rethinking Noisy Label Models: Labeler-Dependent Noise with Adversarial Awarenesscited by 4
- 2022ChimeraMix: Image Classification on Small Datasets via Masked Feature Mixingcited by 4
- 2022Reducing Training Sample Memorization in GANs by Training with Memorization Rejectioncited by 4
- 2022Image Classification with Small Datasets: Overview and Benchmarkcited by 4
- 2024Stochastic Resetting Mitigates Latent Gradient Bias of SGD from Label Noisecited by 4
- 2025Impact of Data Duplication on Deep Neural Network-Based Image Classifiers: Robust vs. Standard Modelscited by 4
- 2023Integrating Curricula with Replays: Its Effects on Continual Learningcited by 3
- 2023Benchmarking Pretrained Vision Embeddings for Near- and Duplicate Detection in Medical Imagescited by 3
- 2024Questionable practices in machine learningcited by 3
- 2026Fatigue-Aware Learning to Defer via Constrained Optimisationcited by 3
- 2022Perfectly Accurate Membership Inference by a Dishonest Central Server in Federated Learningcited by 2
- 2023Infinite Class Mixupcited by 2
- 2023Data-Efficient Energy-Aware Participant Selection for UAV-Enabled Federated Learningcited by 2
- 2021PEng4NN: An Accurate Performance Estimation Engine for Efficient Automated Neural Network Architecture Searchcited by 1
- 2023No Data Augmentation? Alternative Regularizations for Effective Training on Small Datasetscited by 1
- 2024Scaling Up Deep Clustering Methods Beyond ImageNet-1Kcited by 1
- 2024PDFed: Privacy-Preserving and Decentralized Asynchronous Federated Learning for Diffusion Modelscited by 1
- 2021A data-based comparative review and AI-driven symbolic model for longitudinal dispersion coefficient in natural streamscited by 0
- 2024Twin: Tuning Learning Rate and Weight Decay of Deep Homogeneous Classifiers without Validationcited by 0
- 2024Label Errors in the Tobacco3482 Datasetcited by 0
- 2024MBInception: A new Multi-Block Inception Model for Enhancing Image Processing Efficiencycited by 0
- 2025Finding the Reflection Point: Unpadding Images to Remove Data Augmentation Artifacts in Large Open Source Image Datasets for Machine Learningcited by 0
- 2026Deep Learning-Based Meat Freshness Detection with Segmentation and OOD-Aware Classificationcited by 0
50 most cited of 61 All 61 (JSON)
- 2026Scores That Hold, Benchmarks That Leak: Measuring Dataset Contamination in Public Brain-Tumor MRI Classification30 Sep 2026
- 2026Evaluation Choices Shape Biomedical ML Claims: A Pediatric Pneumonia Benchmark Case Study29 Sep 2026
- 2026Ten Architectures, One Error: Shared Failure Modes in Hyperspectral Classification under Spatially Disjoint Evaluation1 Sep 2026
- 2026CropCop: An Auditable 120-Class Plant-Health Model from Benchmark Reconstruction to a Quantised Runtime Artifact26 Aug 2026
- 2026When does fusing hand-crafted knowledge with learned representations pay? A cost-normalized benchmark of stacking, substitution, and interference21 Aug 2026
- 2026Random Label Prediction Heads for Studying Memorization in Deep Neural Networks13 Jul 2026
- 2026RCT: A Robot-Collected Touch-Vision-Language Dataset for Tactile Generalization30 Jun 2026
- 2026Revising RVL-CDIP: Quantifying Errors and Test-Train Overlap30 Jun 2026
- 2026Computer Vision for MOBA Analytics: A Dataset and Baseline for Visibility Analysis in Dota 225 Jun 2026
- 2026Certification of Machine Learning Models via Directional Sharpness23 Jun 2026
- 2026Fatigue-Aware Learning to Defer via Constrained Optimisation1 Apr 2026
- 2026Label-efficient underwater image classification with logistic regression on frozen foundation model embeddings31 Mar 2026
38 more
- 2026Deep Learning-Based Meat Freshness Detection with Segmentation and OOD-Aware Classification27 Feb 2026
- 2025Benchmarking is Broken -- Don't Let AI be its Own Judge8 Oct 2025
- 2025Finding the Reflection Point: Unpadding Images to Remove Data Augmentation Artifacts in Large Open Source Image Datasets for Machine Learning4 Apr 2025
- 2025Impact of Data Duplication on Deep Neural Network-Based Image Classifiers: Robust vs. Standard Models1 Apr 2025
- 2025The Vendiscope: An Algorithmic Microscope For Data Collections15 Feb 2025
- 2024MBInception: A new Multi-Block Inception Model for Enhancing Image Processing Efficiency18 Dec 2024
- 2024Label Errors in the Tobacco3482 Dataset17 Dec 2024
- 2024What Do Machine Learning Researchers Mean by "Reproducible"?5 Dec 2024
- 2024PDFed: Privacy-Preserving and Decentralized Asynchronous Federated Learning for Diffusion Models26 Sep 2024
- 2024Questionable practices in machine learning17 Jul 2024
- 2024Scaling Up Deep Clustering Methods Beyond ImageNet-1K3 Jun 2024
- 2024Stochastic Resetting Mitigates Latent Gradient Bias of SGD from Label Noise1 Jun 2024
- 2024Repetita Iuvant: Data Repetition Allows SGD to Learn High-Dimensional Multi-Index Functions24 May 2024
- 2024Automated Program Repair: Emerging trends pose and expose problems for benchmarks8 May 2024
- 2024Twin: Tuning Learning Rate and Weight Decay of Deep Homogeneous Classifiers without Validation8 Mar 2024
- 2024Rethinking cluster-conditioned diffusion models for label-free image synthesis1 Mar 2024
- 2024The Mirrored Influence Hypothesis: Efficient Data Influence Estimation by Harnessing Forward Passes14 Feb 2024
- 2023Benchmarking Pretrained Vision Embeddings for Near- and Duplicate Detection in Medical Images12 Dec 2023
- 2023Reproducibility in Multiple Instance Learning: A Case For Algorithmic Unit Tests27 Oct 2023
- 2023No Data Augmentation? Alternative Regularizations for Effective Training on Small Datasets4 Sep 2023
- 2023Data-Efficient Energy-Aware Participant Selection for UAV-Enabled Federated Learning14 Aug 2023
- 2023Memorization Through the Lens of Curvature of Loss Function Around Samples11 Jul 2023
- 2023Integrating Curricula with Replays: Its Effects on Continual Learning8 Jul 2023
- 2023On Evaluation of Document Classification using RVL-CDIP21 Jun 2023
- 2023Exposing flaws of generative model evaluation metrics and their unfair treatment of diffusion models7 Jun 2023
- 2023How Effective Are Neural Networks for Fixing Security Vulnerabilities29 May 2023
- 2023Infinite Class Mixup17 May 2023
- 2023Do We Train on Test Data? The Impact of Near-Duplicates on License Plate Recognition10 Apr 2023
- 2023On Provable Copyright Protection for Generative Models21 Feb 2023
- 2022Image Classification with Small Datasets: Overview and Benchmark23 Dec 2022
- 2022Reducing Training Sample Memorization in GANs by Training with Memorization Rejection21 Oct 2022
- 2022A Pareto-optimal compositional energy-based model for sampling and optimization of protein sequences19 Oct 2022
- 2022Unsupervised visualization of image datasets using contrastive learning18 Oct 2022
- 2022Fix-A-Step: Semi-supervised Learning from Uncurated Unlabeled Data25 Aug 2022
- 2022Bugs in the Data: How ImageNet Misrepresents Biodiversity24 Aug 2022
- 2022When does dough become a bagel? Analyzing the remaining mistakes on ImageNet9 May 2022
- 2022A Siren Song of Open Source Reproducibility9 Apr 2022
- 2022Perfectly Accurate Membership Inference by a Dishonest Central Server in Federated Learning30 Mar 2022
50 newest of 61 All 61 (JSON)
- 2023Exposing flaws of generative model evaluation metrics and their unfair treatment of diffusion modelscited by 199
- 2024Rethinking cluster-conditioned diffusion models for label-free image synthesiscited by 5
- 2024PDFed: Privacy-Preserving and Decentralized Asynchronous Federated Learning for Diffusion Modelscited by 1
- 2024PDFed: Privacy-Preserving and Decentralized Asynchronous Federated Learning for Diffusion Models26 Sep 2024
- 2024Rethinking cluster-conditioned diffusion models for label-free image synthesis1 Mar 2024
- 2023Exposing flaws of generative model evaluation metrics and their unfair treatment of diffusion models7 Jun 2023
- 2022Datamodels: Predicting Predictions from Training Datacited by 186
- 2023On Provable Copyright Protection for Generative Modelscited by 97
- 2021On Memorization in Probabilistic Deep Generative Modelscited by 60
- 2022When does dough become a bagel? Analyzing the remaining mistakes on ImageNetcited by 60
- 2023How Effective Are Neural Networks for Fixing Security Vulnerabilitiescited by 50
- 2024Repetita Iuvant: Data Repetition Allows SGD to Learn High-Dimensional Multi-Index Functionscited by 35
- 2022Is the Performance of My Deep Network Too Good to Be True? A Direct Approach to Estimating the Bayes Error in Binary Classificationcited by 24
- 2022Bugs in the Data: How ImageNet Misrepresents Biodiversitycited by 24
- 2023Memorization Through the Lens of Curvature of Loss Function Around Samplescited by 24
- 2021A Framework for Deprecating Datasets: Standardizing Documentation, Identification, and Communicationcited by 18
- 2021A Framework for Cluster and Classifier Evaluation in the Absence of Reference Labelscited by 16
- 2022Unsupervised visualization of image datasets using contrastive learningcited by 16
12 most cited of 57 All 57 (JSON)
- 2026Scores That Hold, Benchmarks That Leak: Measuring Dataset Contamination in Public Brain-Tumor MRI Classification30 Sep 2026
- 2026Evaluation Choices Shape Biomedical ML Claims: A Pediatric Pneumonia Benchmark Case Study29 Sep 2026
- 2026Ten Architectures, One Error: Shared Failure Modes in Hyperspectral Classification under Spatially Disjoint Evaluation1 Sep 2026
- 2026CropCop: An Auditable 120-Class Plant-Health Model from Benchmark Reconstruction to a Quantised Runtime Artifact26 Aug 2026
- 2026When does fusing hand-crafted knowledge with learned representations pay? A cost-normalized benchmark of stacking, substitution, and interference21 Aug 2026
- 2026Random Label Prediction Heads for Studying Memorization in Deep Neural Networks13 Jul 2026
- 2026RCT: A Robot-Collected Touch-Vision-Language Dataset for Tactile Generalization30 Jun 2026
- 2026Revising RVL-CDIP: Quantifying Errors and Test-Train Overlap30 Jun 2026
- 2026Computer Vision for MOBA Analytics: A Dataset and Baseline for Visibility Analysis in Dota 225 Jun 2026
- 2026Certification of Machine Learning Models via Directional Sharpness23 Jun 2026
- 2026Fatigue-Aware Learning to Defer via Constrained Optimisation1 Apr 2026
- 2026Label-efficient underwater image classification with logistic regression on frozen foundation model embeddings31 Mar 2026
12 newest of 57 All 57 (JSON)