Sandwich Batch Normalization: A Drop-In Replacement for Feature Distribution Heterogeneity
Not on the map. Why?
Abstract (arXiv)
We present Sandwich Batch Normalization (SaBN), a frustratingly easy improvement of Batch Normalization (BN) with only a few lines of code changes. SaBN is motivated by addressing the inherent feature distribution heterogeneity that one can be identified in many tasks, which can arise from data heterogeneity (multiple input domains) or model heterogeneity (dynamic architectures, model conditioning, etc.). Our SaBN factorizes the BN affine layer into one shared sandwich affine layer, cascaded by several parallel independent affine layers. Concrete analysis reveals that, during optimization, SaBN promotes balanced gradient norms while still preserving diverse gradient directions -- a property that many application tasks seem to favor. We demonstrate the prevailing effectiveness of SaBN as a drop-in replacement in four tasks: conditional image generation, neural architecture search (NAS), adversarial training, and arbitrary style transfer. Leveraging SaBN immediately achieves better Inception Score and FID on CIFAR-10 and ImageNet conditional image generation with three state-of-the-art GANs; boosts the performance of a state-of-the-art weight-sharing NAS algorithm significantly on NAS-Bench-201; substantially improves the robust and standard accuracies for adversarial defense; and produces superior arbitrary stylized results. We also provide visualizations and analysis to help understand why SaBN works. Codes are available at: https://github.com/VITA-Group/Sandwich-Batch-Normalization.
Key facts. Cited by 7 papers in the map (data through 7 Oct 2026). Builds on 61 of its 73 references that are in the map. First posted on arXiv 22 Feb 2021.
Builds on
61 of 73 references.
References · 61
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2014Microsoft COCO: Common Objects in Contextcited by 17,498
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2015Batch Normalization: Accelerating Deep Network Training by Reducing Internal Covariate Shiftcited by 6,979
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 5,986
- 2016Layer Normalizationcited by 5,579
- 2017Progressive Growing of GANs for Improved Quality, Stability, and Variationcited by 2,967
- 2016Improved Techniques for Training GANscited by 2,938
- 2018Large Scale GAN Training for High Fidelity Natural Image Synthesiscited by 2,609
- 2017Improved Training of Wasserstein GANscited by 2,223
- 2017Arbitrary Style Transfer in Real-time with Adaptive Instance Normalizationcited by 1,998
38 more
- 2018DARTS: Differentiable Architecture Searchcited by 1,782
- 2018Spectral Normalization for Generative Adversarial Networkscited by 1,618
- 2018Group Normalizationcited by 1,514
- 2016Neural Architecture Search with Reinforcement Learningcited by 1,489
- 2019Semantic Image Synthesis with Spatially-Adaptive Normalizationcited by 1,295
- 2020Gradient Surgery for Multi-Task Learningcited by 1,210
- 2016Instance Normalization: The Missing Ingredient for Fast Stylizationcited by 1,187
- 2018Efficient Neural Architecture Search via Parameter Sharingcited by 831
- 2018Self-Attention Generative Adversarial Networkscited by 809
- 2017Wasserstein GANcited by 635
- 2017Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networkscited by 484
- 2018How Does Batch Normalization Help Optimization?cited by 355
- 2016A Learned Representation For Artistic Stylecited by 340
- 2019NAS-Bench-101: Towards Reproducible Neural Architecture Searchcited by 340
- 2017Defense against Adversarial Attacks Using High-Level Representation Guided Denoisercited by 329
- 2018Slimmable Neural Networkscited by 301
- 2016Revisiting Batch Normalization For Practical Domain Adaptationcited by 285
- 2019Adversarial Examples Improve Image Recognitioncited by 283
- 2017MagNet: a Two-Pronged Defense against Adversarial Examplescited by 268
- 2019Searching for A Robust Neural Architecture in Four GPU Hourscited by 258
- 2018cGANs with Projection Discriminatorcited by 253
- 2020Neural Architecture Search without Trainingcited by 241
- 2018The relativistic discriminator: a key element missing from standard GANcited by 234
- 2018Stochastic Activation Pruning for Robust Adversarial Defensecited by 171
- 2017Modulating early visual processing by languagecited by 167
- 2018Understanding Batch Normalizationcited by 157
- 2019FairNAS: Rethinking Evaluation Fairness of Weight Sharing Neural Architecture Searchcited by 129
- 2017Batch Renormalization: Towards Reducing Minibatch Dependence in Batch-Normalized Modelscited by 127
- 2020Training BatchNorm and Only BatchNorm: On the Expressive Power of Random Features in CNNscited by 103
- 2019AutoGAN: Neural Architecture Search for Generative Adversarial Networkscited by 94
- 2018Theoretical Analysis of Auto Rate-Tuning by Batch Normalizationcited by 65
- 2020NAS-Bench-1Shot1: Benchmarking and Dissecting One-shot Neural Architecture Searchcited by 64
- 2019Filter Response Normalization Layer: Eliminating Batch Dependence in the Training of Deep Neural Networkscited by 45
- 2020Passport-aware Normalization for Deep Model Protectioncited by 42
- 2020Distilling portable Generative Adversarial Networks for Image Translationcited by 36
- 2019ReNAS:Relativistic Evaluation of Neural Architecture Searchcited by 35
- 2019Intriguing properties of adversarial training at scalecited by 33
- 2019Positional Normalizationcited by 28
50 most cited of 61 All 61 (JSON)
Built on by
Citing papers per year: 2022: 1; 2023: 1; 2024: 2; 2025: 2; 2026: 1.
7 papers.
- 2023Dataset Distillation via the Wasserstein Metriccited by 31
- 2024STIV: Scalable Text and Image Conditioned Video Generationcited by 24
- 2022U-Sleep's resilience to AASM guidelinescited by 12
- 2025DiT-Air: Revisiting the Efficiency of Diffusion Model Architecture Design in Text to Image Generationcited by 8
- 2026Semantic Routing: Exploring Multi-Layer LLM Feature Weighting for Diffusion Transformerscited by 4
- 2025GPAS: Accelerating Convergence of LLM Pretraining via Gradient-Preserving Activation Scalingcited by 2
- 2024Towards Understanding Dual BN In Hybrid Adversarial Trainingcited by 0
- 2026Semantic Routing: Exploring Multi-Layer LLM Feature Weighting for Diffusion Transformers3 Feb 2026
- 2025GPAS: Accelerating Convergence of LLM Pretraining via Gradient-Preserving Activation Scaling27 Jun 2025
- 2025DiT-Air: Revisiting the Efficiency of Diffusion Model Architecture Design in Text to Image Generation13 Mar 2025
- 2024STIV: Scalable Text and Image Conditioned Video Generation10 Dec 2024
- 2024Towards Understanding Dual BN In Hybrid Adversarial Training28 Mar 2024
- 2023Dataset Distillation via the Wasserstein Metric30 Nov 2023
- 2022U-Sleep's resilience to AASM guidelines19 Sep 2022