Maximum-Entropy Adversarial Data Augmentation for Improved Generalization and Robustness
Not on the map. Why?
Abstract (arXiv)
Adversarial data augmentation has shown promise for training robust deep neural networks against unforeseen data shifts or corruptions. However, it is difficult to define heuristics to generate effective fictitious target distributions containing "hard" adversarial perturbations that are largely different from the source distribution. In this paper, we propose a novel and effective regularization term for adversarial data augmentation. We theoretically derive it from the information bottleneck principle, which results in a maximum-entropy formulation. Intuitively, this regularization term encourages perturbing the underlying source distribution to enlarge predictive uncertainty of the current model, so that the generated "hard" adversarial perturbations can improve the model robustness during training. Experimental results on three standard benchmarks demonstrate that our method consistently outperforms the existing state of the art by a statistically significant margin.
Key facts. Cited by 121 papers in the map (data through 7 Oct 2026). First posted on arXiv 15 Oct 2020.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 14; 2022: 21; 2023: 37; 2024: 26; 2025: 15; 2026: 8.
121 papers.
Sort:
By area:
- 2023SmoothLLM: Defending Large Language Models Against Jailbreaking Attackscited by 434
- 2022Improving Out-of-Distribution Robustness via Selective Augmentationcited by 202
- 2021Learning to Diversify for Single Domain Generalizationcited by 170
- 2021Progressive Domain Expansion Network for Single Domain Generalizationcited by 96
- 2021AugMax: Adversarial Composition of Random Augmentations for Robust Trainingcited by 89
- 2021Adversarially Adaptive Normalization for Single Domain Generalizationcited by 85
- 2022Adversarial Style Augmentation for Domain Generalized Urban-Scene Segmentationcited by 69
- 2022DrugOOD: Out-of-Distribution (OOD) Dataset Curator and Benchmark for AI-aided Drug Discovery -- A Focus on Affinity Prediction Problems with Noise Annotationscited by 54
- 2021Non-Transferable Learning: A New Approach for Model Ownership Verification and Applicability Authorizationcited by 50
- 2023Training on Thin Air: Improve Image Classification with Generated Datacited by 50
- 2021A Systematic Review of Robustness in Deep Learning for Computer Vision: Mind the gap?cited by 48
- 2023Meta-causal Learning for Single Domain Generalizationcited by 43
38 more
- 2021Uncertainty-guided Model Generalization to Unseen Domainscited by 41
- 2023Robust and Interpretable Medical Image Classifiers via Concept Bottleneck Modelscited by 40
- 2022Attention Consistency on Visual Corruptions for Single-Source Domain Generalizationcited by 37
- 2023StyLIP: Multi-Scale Style-Conditioned Prompt Learning for CLIP-based Domain Generalizationcited by 36
- 2023Progressive Random Convolutions for Single Domain Generalizationcited by 33
- 2024Improving Single Domain-Generalized Object Detection: A Focus on Diversification and Alignmentcited by 29
- 2021Ranking Distance Calibration for Cross-Domain Few-Shot Learningcited by 27
- 2024Prompt-Driven Dynamic Object-Centric Learning for Single Domain Generalizationcited by 24
- 2021Taxonomy of Machine Learning Safety: A Survey and Primercited by 22
- 2022Style-Hallucinated Dual Consistency Learning: A Unified Framework for Visual Domain Generalizationcited by 22
- 2023A Survey on the Robustness of Computer Vision Models against Common Corruptionscited by 20
- 2024Distribution-Aware Data Expansion with Diffusion Modelscited by 20
- 2023Domain Generalization via Balancing Training Difficulty and Model Capabilitycited by 19
- 2021Out-of-Domain Generalization from a Single Source: An Uncertainty Quantification Approachcited by 18
- 2024Robust Domain Generalization for Multi-modal Object Recognitioncited by 18
- 2022Not Just Pretty Pictures: Toward Interventional Data Augmentation Using Text-to-Image Generatorscited by 17
- 2022Bootstrap Generalization Ability from Loss Landscape Perspectivecited by 16
- 2023Adversarial AutoMixupcited by 16
- 2023AdvST: Revisiting Data Augmentations for Single Domain Generalizationcited by 16
- 2022Gate-Shift-Fuse for Video Action Recognitioncited by 15
- 2022Adversarial Unlearning: Reducing Confidence Along Adversarial Directionscited by 14
- 2023Towards Artificial General Intelligence (AGI) in the Internet of Things (IoT): Opportunities and Challengescited by 14
- 2022Learning Instance-Specific Adaptation for Cross-Domain Segmentationcited by 13
- 2022Learning Robust Representations for Continual Relation Extraction via Adversarial Class Augmentationcited by 13
- 2022GSMFlow: Generation Shifts Mitigating Flow for Generalized Zero-Shot Learningcited by 12
- 2023Fourier Test-time Adaptation with Multi-level Consistency for Robust Classificationcited by 12
- 2025Robustness in Large Language Models: A Survey of Mitigation Strategies and Evaluation Metricscited by 12
- 2022Global-Local Regularization Via Distributional Robustnesscited by 11
- 2024PhysAug: A Physical-guided and Frequency-based Data Augmentation for Single-Domain Generalized Object Detectioncited by 11
- 2021Cooperative Training and Latent Space Data Augmentation for Robust Medical Image Segmentationcited by 9
- 2023Complementary Domain Adaptation and Generalization for Unsupervised Continual Domain Shift Learningcited by 9
- 2023Activate and Reject: Towards Safe Domain Generalization under Category Shiftcited by 9
- 2023Visual Data-Type Understanding does not emerge from Scaling Vision-Language Modelscited by 9
- 2022GeoECG: Data Augmentation via Wasserstein Geodesic Perturbation for Robust Electrocardiogram Predictioncited by 8
- 2022A.I. Robustness: a Human-Centered Perspective on Technological Challenges and Opportunitiescited by 8
- 2022Adversarial Purification with the Manifold Hypothesiscited by 8
- 2023Learning Class and Domain Augmentations for Single-Source Open-Domain Generalizationcited by 8
- 2024Generalizable Person Re-identification via Balancing Alignment and Uniformitycited by 8
50 most cited of 121 All 121 (JSON)
- 2026PAPT++: Risk-Aware Adversarial Tuning and Generation for Single Domain Generalization4 Sep 2026
- 2026Reversible Unlearnable Examples: Towards the Copyright Protection in Deep Learning Era6 Aug 2026
- 2026S2-FracMix: Label-Preserving Self-Saliency Mixup Augmentation24 Jun 2026
- 2026Adversarial Domain Prompt Tuning and Generation for Single Domain Generalization19 Jun 2026
- 2026Representation-Conditioned Diffusion Models for Guided Training Data Generation26 May 2026
- 2026Cross-Sample Relational Fusion: Unifying Domain Generalization and Class-Incremental Learning9 May 2026
- 2026Bi-Level Optimization for Single Domain Generalization7 Apr 2026
- 2026YOLOv10-Based Multi-Task Framework for Hand Localization and Laterality Classification in Surgical Videos21 Feb 2026
- 2025Humanoid-inspired Causal Representation Learning for Domain Generalization18 Oct 2025
- 2025Target-Oriented Single Domain Generalization30 Aug 2025
- 2025Mask6D: Masked Pose Priors For 6D Object Pose Estimation9 Jul 2025
- 2025Adversarial Data Augmentation for Single Domain Generalization via Lyapunov Exponent-Guided Optimization6 Jul 2025
38 more
- 2025Domain Generalization for Person Re-identification: A Survey Towards Domain-Agnostic Person Matching14 Jun 2025
- 2025Dealing with the Evil Twins: Improving Random Augmentation by Addressing Catastrophic Forgetting of Diverse Augmentations9 Jun 2025
- 2025A Flat Minima Perspective on Understanding Augmentations and Model Robustness30 May 2025
- 2025Pseudo Multi-Source Domain Generalization: Bridging the Gap Between Single and Multi-Source Domain Generalization29 May 2025
- 2025Robustness in Large Language Models: A Survey of Mitigation Strategies and Evaluation Metrics24 May 2025
- 2025Boosting Single-domain Generalized Object Detection via Vision-Language Knowledge Interaction27 Apr 2025
- 2025FrogDogNet: Fourier frequency Retained visual prompt Output Guidance for Domain Generalization of CLIP in Remote Sensing23 Apr 2025
- 2025Single Domain Generalization with Adversarial Memory8 Mar 2025
- 2025A Guide to Failure in Machine Learning: Reliability and Robustness from Foundations to Practice1 Mar 2025
- 2025Single Domain Generalization with Model-aware Parametric Batch-wise Mixup22 Feb 2025
- 2025Why Domain Generalization Fail? A View of Necessity and Sufficiency15 Feb 2025
- 2024Federated Hybrid Training and Self-Adversarial Distillation: Towards Robust Edge Networks26 Dec 2024
- 2024PhysAug: A Physical-guided and Frequency-based Data Augmentation for Single-Domain Generalized Object Detection16 Dec 2024
- 2024TIDE: Training Locally Interpretable Domain Generalization Models Enables Test-time Correction25 Nov 2024
- 2024Generalizable Person Re-identification via Balancing Alignment and Uniformity18 Nov 2024
- 2024Generalizable Single-Source Cross-modality Medical Image Segmentation via Invariant Causal Mechanisms7 Nov 2024
- 2024Domain Expansion and Boundary Growth for Open-Set Single-Source Domain Generalization5 Nov 2024
- 2024Attr-Int: A Simple and Effective Entity Alignment Framework for Heterogeneous Knowledge Graphs17 Oct 2024
- 2024Towards General Deepfake Detection with Dynamic Curriculum15 Oct 2024
- 2024Growing Efficient Accurate and Robust Neural Networks on the Edge10 Oct 2024
- 2024FedGCA: Global Consistent Augmentation Based Single-Source Federated Domain Generalization23 Sep 2024
- 2024Strategic Arms with Side Communication Prevail Over Low-Regret MAB Algorithms30 Aug 2024
- 2024Robust Domain Generalization for Multi-modal Object Recognition11 Aug 2024
- 2024TADA: Temporal Adversarial Data Augmentation for Time Series Data21 Jul 2024
- 2024SegSTRONG-C: Segmenting Surgical Tools Robustly On Non-adversarial Generated Corruptions -- An EndoVis'24 Challenge16 Jul 2024
- 2024What Does Softmax Probability Tell Us about Classifiers Ranking Across Diverse Test Conditions?14 Jun 2024
- 2024Causality-inspired Latent Feature Augmentation for Single Domain Generalization10 Jun 2024
- 2024StyDeSty: Min-Max Stylization and Destylization for Single Domain Generalization1 Jun 2024
- 2024MVAD: A Multiple Visual Artifact Detector for Video Streaming31 May 2024
- 2024Improving Single Domain-Generalized Object Detection: A Focus on Diversification and Alignment23 May 2024
- 2024IMO: Greedy Layer-Wise Sparse Representation Learning for Out-of-Distribution Text Classification with Pre-trained Models21 Apr 2024
- 2024T-Pixel2Mesh: Combining Global and Local Transformer for 3D Mesh Generation from a Single Image20 Mar 2024
- 2024Distribution-Aware Data Expansion with Diffusion Models11 Mar 2024
- 2024Overcoming Data Inequality across Domains with Semi-Supervised Domain Generalization8 Mar 2024
- 2024Prompt-Driven Dynamic Object-Centric Learning for Single Domain Generalization28 Feb 2024
- 2024TEN-GUARD: Tensor Decomposition for Backdoor Attack Detection in Deep Neural Networks6 Jan 2024
- 2024TRLS: A Time Series Representation Learning Framework via Spectrogram for Medical Signal Processing6 Jan 2024
- 2023DarkShot: Lighting Dark Images with Low-Compute and High-Quality28 Dec 2023
50 newest of 121 All 121 (JSON)
- 2023Training on Thin Air: Improve Image Classification with Generated Datacited by 50
- 2024Distribution-Aware Data Expansion with Diffusion Modelscited by 20
- 2026Adversarial Domain Prompt Tuning and Generation for Single Domain Generalizationcited by 4
- 2026Representation-Conditioned Diffusion Models for Guided Training Data Generationcited by 0
- 2026PAPT++: Risk-Aware Adversarial Tuning and Generation for Single Domain Generalizationcited by 0
- 2026PAPT++: Risk-Aware Adversarial Tuning and Generation for Single Domain Generalization4 Sep 2026
- 2026Adversarial Domain Prompt Tuning and Generation for Single Domain Generalization19 Jun 2026
- 2026Representation-Conditioned Diffusion Models for Guided Training Data Generation26 May 2026
- 2024Distribution-Aware Data Expansion with Diffusion Models11 Mar 2024
- 2023Training on Thin Air: Improve Image Classification with Generated Data24 May 2023
- 2023SmoothLLM: Defending Large Language Models Against Jailbreaking Attackscited by 434
- 2021Non-Transferable Learning: A New Approach for Model Ownership Verification and Applicability Authorizationcited by 50
- 2022Adversarial Unlearning: Reducing Confidence Along Adversarial Directionscited by 14
- 2026Reversible Unlearnable Examples: Towards the Copyright Protection in Deep Learning Eracited by 0
- 2026Reversible Unlearnable Examples: Towards the Copyright Protection in Deep Learning Era6 Aug 2026
- 2023SmoothLLM: Defending Large Language Models Against Jailbreaking Attacks5 Oct 2023
- 2022Adversarial Unlearning: Reducing Confidence Along Adversarial Directions3 Jun 2022
- 2021Non-Transferable Learning: A New Approach for Model Ownership Verification and Applicability Authorization13 Jun 2021
- 2023Visual Data-Type Understanding does not emerge from Scaling Vision-Language Modelscited by 9
- 2023C-SAW: Self-Supervised Prompt Learning for Image Generalization in Remote Sensingcited by 6
- 2025FrogDogNet: Fourier frequency Retained visual prompt Output Guidance for Domain Generalization of CLIP in Remote Sensingcited by 2
- 2025FrogDogNet: Fourier frequency Retained visual prompt Output Guidance for Domain Generalization of CLIP in Remote Sensing23 Apr 2025
- 2023C-SAW: Self-Supervised Prompt Learning for Image Generalization in Remote Sensing27 Nov 2023
- 2023Visual Data-Type Understanding does not emerge from Scaling Vision-Language Models12 Oct 2023
- 2022Improving Out-of-Distribution Robustness via Selective Augmentationcited by 202
- 2021Learning to Diversify for Single Domain Generalizationcited by 170
- 2021Progressive Domain Expansion Network for Single Domain Generalizationcited by 96
- 2021AugMax: Adversarial Composition of Random Augmentations for Robust Trainingcited by 89
- 2021Adversarially Adaptive Normalization for Single Domain Generalizationcited by 85
- 2022Adversarial Style Augmentation for Domain Generalized Urban-Scene Segmentationcited by 69
- 2022DrugOOD: Out-of-Distribution (OOD) Dataset Curator and Benchmark for AI-aided Drug Discovery -- A Focus on Affinity Prediction Problems with Noise Annotationscited by 54
- 2021A Systematic Review of Robustness in Deep Learning for Computer Vision: Mind the gap?cited by 48
- 2023Meta-causal Learning for Single Domain Generalizationcited by 43
- 2021Uncertainty-guided Model Generalization to Unseen Domainscited by 41
- 2023Robust and Interpretable Medical Image Classifiers via Concept Bottleneck Modelscited by 40
- 2022Attention Consistency on Visual Corruptions for Single-Source Domain Generalizationcited by 37
12 most cited of 109 All 109 (JSON)
- 2026S2-FracMix: Label-Preserving Self-Saliency Mixup Augmentation24 Jun 2026
- 2026Cross-Sample Relational Fusion: Unifying Domain Generalization and Class-Incremental Learning9 May 2026
- 2026Bi-Level Optimization for Single Domain Generalization7 Apr 2026
- 2026YOLOv10-Based Multi-Task Framework for Hand Localization and Laterality Classification in Surgical Videos21 Feb 2026
- 2025Humanoid-inspired Causal Representation Learning for Domain Generalization18 Oct 2025
- 2025Target-Oriented Single Domain Generalization30 Aug 2025
- 2025Mask6D: Masked Pose Priors For 6D Object Pose Estimation9 Jul 2025
- 2025Adversarial Data Augmentation for Single Domain Generalization via Lyapunov Exponent-Guided Optimization6 Jul 2025
- 2025Domain Generalization for Person Re-identification: A Survey Towards Domain-Agnostic Person Matching14 Jun 2025
- 2025Dealing with the Evil Twins: Improving Random Augmentation by Addressing Catastrophic Forgetting of Diverse Augmentations9 Jun 2025
- 2025A Flat Minima Perspective on Understanding Augmentations and Model Robustness30 May 2025
- 2025Pseudo Multi-Source Domain Generalization: Bridging the Gap Between Single and Multi-Source Domain Generalization29 May 2025
12 newest of 109 All 109 (JSON)