Convolutional Normalization: Improving Deep Convolutional Network Robustness and Training
Not on the map. Why?
Abstract (arXiv)
Normalization techniques have become a basic component in modern convolutional neural networks (ConvNets). In particular, many recent works demonstrate that promoting the orthogonality of the weights helps train deep models and improve robustness. For ConvNets, most existing methods are based on penalizing or normalizing weight matrices derived from concatenating or flattening the convolutional kernels. These methods often destroy or ignore the benign convolutional structure of the kernels; therefore, they are often expensive or impractical for deep ConvNets. In contrast, we introduce a simple and efficient "Convolutional Normalization" (ConvNorm) method that can fully exploit the convolutional structure in the Fourier domain and serve as a simple plug-and-play module to be conveniently incorporated into any ConvNets. Our method is inspired by recent work on preconditioning methods for convolutional sparse coding and can effectively promote each layer's channel-wise isometry. Furthermore, we show that our ConvNorm can reduce the layerwise spectral norm of the weight matrices and hence improve the Lipschitzness of the network, leading to easier training and improved robustness for deep ConvNets. Applied to classification under noise corruptions and generative adversarial network (GAN), we show that the ConvNorm improves the robustness of common ConvNets such as ResNet and the performance of GAN. We verify our findings via numerical experiments on CIFAR and ImageNet.
Key facts. Cited by 15 papers in the map (data through 14 Oct 2026). Builds on 61 of its 77 references that are in the map. First posted on arXiv 1 Mar 2021.
Builds on
61 of 77 references.
References · 61
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,364
- 2014ImageNet Large Scale Visual Recognition Challengecited by 8,498
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2017Mask R-CNNcited by 7,277
- 2015Batch Normalization: Accelerating Deep Network Training by Reducing Internal Covariate Shiftcited by 7,005
- 2016Densely Connected Convolutional Networkscited by 6,720
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2016Layer Normalizationcited by 5,669
- 2015Rethinking the Inception Architecture for Computer Visioncited by 5,475
- 2014Going Deeper with Convolutionscited by 4,241
- 2016Improved Techniques for Training GANscited by 2,970
38 more
- 2020Exploring Simple Siamese Representation Learningcited by 2,866
- 2018Large Scale GAN Training for High Fidelity Natural Image Synthesiscited by 2,626
- 2016Aggregated Residual Transformations for Deep Neural Networkscited by 2,546
- 2017Improved Training of Wasserstein GANscited by 2,235
- 2018Spectral Normalization for Generative Adversarial Networkscited by 1,636
- 2018Group Normalizationcited by 1,524
- 2016Instance Normalization: The Missing Ingredient for Fast Stylizationcited by 1,198
- 2017A Closer Look at Memorization in Deep Networkscited by 942
- 2013Exact solutions to the nonlinear dynamics of learning in deep linear neural networkscited by 763
- 2016Making Deep Neural Networks Robust to Label Noise: a Loss Correction Approachcited by 665
- 2019Adversarial Training for Free!cited by 643
- 2016Weight Normalization: A Simple Reparameterization to Accelerate Training of Deep Neural Networkscited by 543
- 2019Algorithm Unrolling: Interpretable, Efficient Deep Learning for Signal and Image Processingcited by 421
- 2020Early-Learning Regularization Prevents Memorization of Noisy Labelscited by 416
- 2015Unitary Evolution Recurrent Neural Networkscited by 294
- 2017Parseval Networks: Improving Robustness to Adversarial Examplescited by 293
- 2017Are GANs Created Equal? A Large-Scale Studycited by 267
- 2019Simple Black-box Adversarial Attackscited by 251
- 2018Dynamical Isometry and a Mean Field Theory of CNNs: How to Train 10,000-Layer Vanilla Convolutional Neural Networkscited by 176
- 2019Gradient Descent with Early Stopping is Provably Robust to Label Noise for Overparameterized Neural Networkscited by 159
- 2019Cheap Orthogonal Constraints in Neural Networks: A Simple Parametrization of the Orthogonal and Unitary Groupcited by 134
- 2019Orthogonal Convolutional Neural Networkscited by 123
- 2018The Singular Values of Convolutional Layerscited by 95
- 2017Orthogonal Weight Normalization: Solution to Optimization over Multiple Dependent Stiefel Manifolds in Deep Neural Networkscited by 92
- 2020Normalization Techniques in Training DNNs: Methodology, Analysis and Applicationcited by 90
- 2019Preventing Gradient Attenuation in Lipschitz Constrained Convolutional Networkscited by 87
- 2017On orthogonality and learning recurrent networks with long term dependenciescited by 83
- 2017Orthogonal Recurrent Neural Networks with Scaled Cayley Transformcited by 83
- 2020Efficient Riemannian Optimization on the Stiefel Manifold via the Cayley Transformcited by 80
- 2018The Emergence of Spectral Universality in Deep Networkscited by 74
- 2020Provable Benefit of Orthogonal Initialization in Optimizing Deep Linear Networkscited by 73
- 2019Orthogonal Deep Neural Networkscited by 72
- 2017On Loss Functions for Deep Neural Networks in Classificationcited by 68
- 2017On the regularization of Wasserstein GANscited by 65
- 2018Can We Gain More from Orthogonality Regularizations in Training Deep CNNs?cited by 62
- 2020Deep Isometric Learning for Visual Recognitioncited by 39
- 2020Controllable Orthogonalization in Training DNNscited by 30
- 2019Lipschitz Generative Adversarial Netscited by 24
50 most cited of 61 All 61 (JSON)
Built on by
Citing papers per year: 2021: 5; 2022: 3; 2023: 5; 2024: 1; 2025: 0; 2026: 1.
15 papers.
Sort:
- 2021A Geometric Analysis of Neural Collapse with Unconstrained Featurescited by 227
- 2021ReduNet: A White-box Deep Network from the Principle of Maximizing Rate Reductioncited by 84
- 2021To Smooth or Not? When Label Smoothing Meets Noisy Labelscited by 70
- 2021How Powerful is Graph Convolution for Recommendation?cited by 50
- 2021Pay attention to your loss: understanding misconceptions about 1-Lipschitz neural networkscited by 30
- 2023A Survey on the Robustness of Computer Vision Models against Common Corruptionscited by 21
- 2026Fantastic Pretraining Optimizers and Where to Find Them II: Hyperball Optimizationcited by 16
- 2022Revisiting Sparse Convolutional Model for Visual Recognitioncited by 14
- 2023Robust One-Class Classification with Signed Distance Function using 1-Lipschitz Neural Networkscited by 10
- 2022Feedback Gradient Descent: Efficient and Stable Optimization with Orthogonality for DNNscited by 5
- 2023Closed-Loop Transcription via Convolutional Sparse Codingcited by 4
- 2022Kernel Normalized Convolutional Networkscited by 2
- 2026Fantastic Pretraining Optimizers and Where to Find Them II: Hyperball Optimization15 Jun 2026
- 2024Impact of Architectural Modifications on Deep Learning Adversarial Robustness3 May 2024
- 2023Resilient Graph Neural Networks: A Coupled Dynamical Systems Approach12 Nov 2023
- 2023Convolutional Monge Mapping Normalization for learning on sleep data30 May 2023
- 2023A Survey on the Robustness of Computer Vision Models against Common Corruptions10 May 2023
- 2023Closed-Loop Transcription via Convolutional Sparse Coding18 Feb 2023
- 2023Robust One-Class Classification with Signed Distance Function using 1-Lipschitz Neural Networks26 Jan 2023
- 2022Revisiting Sparse Convolutional Model for Visual Recognition24 Oct 2022
- 2022Kernel Normalized Convolutional Networks20 May 2022
- 2022Feedback Gradient Descent: Efficient and Stable Optimization with Orthogonality for DNNs12 May 2022
- 2021How Powerful is Graph Convolution for Recommendation?17 Aug 2021
- 2021To Smooth or Not? When Label Smoothing Meets Noisy Labels8 Jun 2021
- 2021A Geometric Analysis of Neural Collapse with Unconstrained Featurescited by 227
- 2021ReduNet: A White-box Deep Network from the Principle of Maximizing Rate Reductioncited by 84
- 2021To Smooth or Not? When Label Smoothing Meets Noisy Labelscited by 70
- 2021How Powerful is Graph Convolution for Recommendation?cited by 50
- 2021Pay attention to your loss: understanding misconceptions about 1-Lipschitz neural networkscited by 30
- 2023A Survey on the Robustness of Computer Vision Models against Common Corruptionscited by 21
- 2026Fantastic Pretraining Optimizers and Where to Find Them II: Hyperball Optimizationcited by 16
- 2022Revisiting Sparse Convolutional Model for Visual Recognitioncited by 14
- 2023Robust One-Class Classification with Signed Distance Function using 1-Lipschitz Neural Networkscited by 10
- 2022Feedback Gradient Descent: Efficient and Stable Optimization with Orthogonality for DNNscited by 5
- 2023Closed-Loop Transcription via Convolutional Sparse Codingcited by 4
- 2022Kernel Normalized Convolutional Networkscited by 2
12 most cited of 15 All 15 (JSON)
- 2026Fantastic Pretraining Optimizers and Where to Find Them II: Hyperball Optimization15 Jun 2026
- 2024Impact of Architectural Modifications on Deep Learning Adversarial Robustness3 May 2024
- 2023Resilient Graph Neural Networks: A Coupled Dynamical Systems Approach12 Nov 2023
- 2023Convolutional Monge Mapping Normalization for learning on sleep data30 May 2023
- 2023A Survey on the Robustness of Computer Vision Models against Common Corruptions10 May 2023
- 2023Closed-Loop Transcription via Convolutional Sparse Coding18 Feb 2023
- 2023Robust One-Class Classification with Signed Distance Function using 1-Lipschitz Neural Networks26 Jan 2023
- 2022Revisiting Sparse Convolutional Model for Visual Recognition24 Oct 2022
- 2022Kernel Normalized Convolutional Networks20 May 2022
- 2022Feedback Gradient Descent: Efficient and Stable Optimization with Orthogonality for DNNs12 May 2022
- 2021How Powerful is Graph Convolution for Recommendation?17 Aug 2021
- 2021To Smooth or Not? When Label Smoothing Meets Noisy Labels8 Jun 2021
12 newest of 15 All 15 (JSON)