MaxUp: A Simple Way to Improve Generalization of Neural Network Training
Not on the map. Why?
Abstract (arXiv)
We propose MaxUp, an embarrassingly simple, highly effective technique for improving the generalization performance of machine learning models, especially deep neural networks. The idea is to generate a set of augmented data with some random perturbations or transforms and minimize the maximum, or worst case loss over the augmented data. By doing so, we implicitly introduce a smoothness or robustness regularization against the random perturbations, and hence improve the generation performance. For example, in the case of Gaussian perturbation, MaxUp is asymptotically equivalent to using the gradient norm of the loss as a penalty to encourage smoothness. We test MaxUp on a range of tasks, including image classification, language modeling, and adversarial certification, on which MaxUp consistently outperforms the existing best baseline methods, without introducing substantial computational overhead. In particular, we improve ImageNet classification from the state-of-the-art top-1 accuracy 85.5% without extra data to 85.8%. Code will be released soon.
Key facts. Cited by 27 papers in the map (data through 14 Oct 2026). First posted on arXiv 20 Feb 2020.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 14; 2022: 7; 2023: 5; 2024: 1.
27 papers.
Sort:
By area:
- 2021High-Performance Large-Scale Image Recognition Without Normalizationcited by 360
- 2021AugMax: Adversarial Composition of Random Augmentations for Robust Trainingcited by 90
- 2022Data-free Backdoor Removal based on Channel Lipschitznesscited by 79
- 2021Vision Transformers with Patch Diversificationcited by 45
- 2021DP-InstaHide: Provably Defusing Poisoning and Backdoor Attacks with Differentially Private Data Augmentationscited by 34
- 2021Noisy Feature Mixupcited by 27
- 2021Taxonomy of Machine Learning Safety: A Survey and Primercited by 25
- 2022Indiscriminate Data Poisoning Attacks on Neural Networkscited by 25
- 2022Removing Batch Normalization Boosts Adversarial Trainingcited by 24
- 2022ALLSH: Active Learning Guided by Local Sensitivity and Hardnesscited by 23
- 2021What Doesn't Kill You Makes You Robust(er): How to Adversarially Train against Data Poisoningcited by 22
- 2021On the Inherent Regularization Effects of Noise Injection During Trainingcited by 18
15 more
- 2023Run-Off Election: Improved Provable Defense against Data Poisoning Attackscited by 17
- 2023Distilling Out-of-Distribution Robustness from Vision-Language Foundation Modelscited by 9
- 2022Accelerating Self-Supervised Learning via Efficient Training Strategiescited by 5
- 2023GAT: Guided Adversarial Training with Pareto-optimal Auxiliary Taskscited by 4
- 2021Ortho-Shot: Low Displacement Rank Regularization with Data Augmentation for Few-Shot Learningcited by 3
- 2022Boosting Factorization Machines via Saliency-Guided Mixupcited by 3
- 2021Improving Robustness of Learning-based Autonomous Steering Using Adversarial Imagescited by 2
- 2021Generalising via Meta-Examples for Continual Learning in the Wildcited by 1
- 2021SanitAIs: Unsupervised Data Augmentation to Sanitize Trojaned Neural Networkscited by 1
- 2021HCDG: A Hierarchical Consistency Framework for Domain Generalization on Medical Image Segmentationcited by 1
- 2024Preventing Model Collapse in Deep Canonical Correlation Analysis by Noise Regularizationcited by 1
- 2021On Hard Episodes in Meta-Learningcited by 0
- 2022Multi-Augmentation for Efficient Visual Representation Learning for Self-supervised Pre-trainingcited by 0
- 2023Improving Generalization in Meta-Learning via Meta-Gradient Augmentationcited by 0
- 2023Hazards in Deep Learning Testing: Prevalence, Impact and Recommendationscited by 0
- 2024Preventing Model Collapse in Deep Canonical Correlation Analysis by Noise Regularization1 Nov 2024
- 2023Distilling Out-of-Distribution Robustness from Vision-Language Foundation Models2 Nov 2023
- 2023Hazards in Deep Learning Testing: Prevalence, Impact and Recommendations11 Sep 2023
- 2023Improving Generalization in Meta-Learning via Meta-Gradient Augmentation14 Jun 2023
- 2023GAT: Guided Adversarial Training with Pareto-optimal Auxiliary Tasks6 Feb 2023
- 2023Run-Off Election: Improved Provable Defense against Data Poisoning Attacks5 Feb 2023
- 2022Accelerating Self-Supervised Learning via Efficient Training Strategies11 Dec 2022
- 2022Data-free Backdoor Removal based on Channel Lipschitzness5 Aug 2022
- 2022Removing Batch Normalization Boosts Adversarial Training4 Jul 2022
- 2022Boosting Factorization Machines via Saliency-Guided Mixup17 Jun 2022
- 2022Multi-Augmentation for Efficient Visual Representation Learning for Self-supervised Pre-training24 May 2022
- 2022ALLSH: Active Learning Guided by Local Sensitivity and Hardness10 May 2022
15 more
- 2022Indiscriminate Data Poisoning Attacks on Neural Networks19 Apr 2022
- 2021AugMax: Adversarial Composition of Random Augmentations for Robust Training26 Oct 2021
- 2021On Hard Episodes in Meta-Learning21 Oct 2021
- 2021Ortho-Shot: Low Displacement Rank Regularization with Data Augmentation for Few-Shot Learning18 Oct 2021
- 2021Noisy Feature Mixup5 Oct 2021
- 2021HCDG: A Hierarchical Consistency Framework for Domain Generalization on Medical Image Segmentation13 Sep 2021
- 2021SanitAIs: Unsupervised Data Augmentation to Sanitize Trojaned Neural Networks9 Sep 2021
- 2021Taxonomy of Machine Learning Safety: A Survey and Primer9 Jun 2021
- 2021Vision Transformers with Patch Diversification26 Apr 2021
- 2021DP-InstaHide: Provably Defusing Poisoning and Backdoor Attacks with Differentially Private Data Augmentations2 Mar 2021
- 2021What Doesn't Kill You Makes You Robust(er): How to Adversarially Train against Data Poisoning26 Feb 2021
- 2021Improving Robustness of Learning-based Autonomous Steering Using Adversarial Images26 Feb 2021
- 2021On the Inherent Regularization Effects of Noise Injection During Training15 Feb 2021
- 2021High-Performance Large-Scale Image Recognition Without Normalization11 Feb 2021
- 2021Generalising via Meta-Examples for Continual Learning in the Wild28 Jan 2021
- 2022Indiscriminate Data Poisoning Attacks on Neural Networkscited by 25
- 2021What Doesn't Kill You Makes You Robust(er): How to Adversarially Train against Data Poisoningcited by 22
- 2023Run-Off Election: Improved Provable Defense against Data Poisoning Attackscited by 17
- 2021SanitAIs: Unsupervised Data Augmentation to Sanitize Trojaned Neural Networkscited by 1
- 2023Run-Off Election: Improved Provable Defense against Data Poisoning Attacks5 Feb 2023
- 2022Indiscriminate Data Poisoning Attacks on Neural Networks19 Apr 2022
- 2021SanitAIs: Unsupervised Data Augmentation to Sanitize Trojaned Neural Networks9 Sep 2021
- 2021What Doesn't Kill You Makes You Robust(er): How to Adversarially Train against Data Poisoning26 Feb 2021
- 2021High-Performance Large-Scale Image Recognition Without Normalizationcited by 360
- 2021AugMax: Adversarial Composition of Random Augmentations for Robust Trainingcited by 90
- 2022Data-free Backdoor Removal based on Channel Lipschitznesscited by 79
- 2021Vision Transformers with Patch Diversificationcited by 45
- 2021DP-InstaHide: Provably Defusing Poisoning and Backdoor Attacks with Differentially Private Data Augmentationscited by 34
- 2021Noisy Feature Mixupcited by 27
- 2021Taxonomy of Machine Learning Safety: A Survey and Primercited by 25
- 2022Removing Batch Normalization Boosts Adversarial Trainingcited by 24
- 2022ALLSH: Active Learning Guided by Local Sensitivity and Hardnesscited by 23
- 2021On the Inherent Regularization Effects of Noise Injection During Trainingcited by 18
- 2022Accelerating Self-Supervised Learning via Efficient Training Strategiescited by 5
- 2023GAT: Guided Adversarial Training with Pareto-optimal Auxiliary Taskscited by 4
12 most cited of 21 All 21 (JSON)
- 2023Hazards in Deep Learning Testing: Prevalence, Impact and Recommendations11 Sep 2023
- 2023Improving Generalization in Meta-Learning via Meta-Gradient Augmentation14 Jun 2023
- 2023GAT: Guided Adversarial Training with Pareto-optimal Auxiliary Tasks6 Feb 2023
- 2022Accelerating Self-Supervised Learning via Efficient Training Strategies11 Dec 2022
- 2022Data-free Backdoor Removal based on Channel Lipschitzness5 Aug 2022
- 2022Removing Batch Normalization Boosts Adversarial Training4 Jul 2022
- 2022Boosting Factorization Machines via Saliency-Guided Mixup17 Jun 2022
- 2022Multi-Augmentation for Efficient Visual Representation Learning for Self-supervised Pre-training24 May 2022
- 2022ALLSH: Active Learning Guided by Local Sensitivity and Hardness10 May 2022
- 2021AugMax: Adversarial Composition of Random Augmentations for Robust Training26 Oct 2021
- 2021On Hard Episodes in Meta-Learning21 Oct 2021
- 2021Ortho-Shot: Low Displacement Rank Regularization with Data Augmentation for Few-Shot Learning18 Oct 2021
12 newest of 21 All 21 (JSON)