When Human Pose Estimation Meets Robustness: Adversarial Algorithms and Benchmarks
Not on the map. Why?
Abstract (arXiv)
Human pose estimation is a fundamental yet challenging task in computer vision, which aims at localizing human anatomical keypoints. However, unlike human vision that is robust to various data corruptions such as blur and pixelation, current pose estimators are easily confused by these corruptions. This work comprehensively studies and addresses this problem by building rigorous robust benchmarks, termed COCO-C, MPII-C, and OCHuman-C, to evaluate the weaknesses of current advanced pose estimators, and a new algorithm termed AdvMix is proposed to improve their robustness in different corruptions. Our work has several unique benefits. (1) AdvMix is model-agnostic and capable in a wide-spectrum of pose estimation models. (2) AdvMix consists of adversarial augmentation and knowledge distillation. Adversarial augmentation contains two neural network modules that are trained jointly and competitively in an adversarial manner, where a generator network mixes different corrupted images to confuse a pose estimator, improving the robustness of the pose estimator by learning from harder samples. To compensate for the noise patterns by adversarial augmentation, knowledge distillation is applied to transfer clean pose structure knowledge to the target pose estimator. (3) Extensive experiments show that AdvMix significantly increases the robustness of pose estimations across a wide range of corruptions, while maintaining accuracy on clean data in various challenging benchmark datasets.
Key facts. Cited by 41 papers in the map (data through 7 Oct 2026). Builds on 39 of its 51 references that are in the map. First posted on arXiv 13 May 2021.
Builds on
39 of 51 references.
References · 39
- 2014Microsoft COCO: Common Objects in Contextcited by 17,498
- 2017mixup: Beyond Empirical Risk Minimizationcited by 5,155
- 2019CutMix: Regularization Strategy to Train Strong Classifiers with Localizable Featurescited by 2,875
- 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,857
- 2017Improved Regularization of Convolutional Neural Networks with Cutoutcited by 1,623
- 2018ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustnesscited by 1,430
- 2019Deep High-Resolution Representation Learning for Human Pose Estimationcited by 1,339
- 2019Self-training with Noisy Student improves ImageNet classificationcited by 1,304
- 2017Random Erasing Data Augmentationcited by 1,235
- 2016Realtime Multi-Person 2D Pose Estimation using Part Affinity Fieldscited by 1,061
- 2016Stacked Hourglass Networks for Human Pose Estimationcited by 913
- 2019AugMix: A Simple Data Processing Method to Improve Robustness and Uncertaintycited by 897
27 more
- 2018AutoAugment: Learning Augmentation Policies from Datacited by 728
- 2018Simple Baselines for Human Pose Estimation and Trackingcited by 502
- 2019Using Pre-Training Can Improve Model Robustness and Uncertaintycited by 373
- 2016RMPE: Regional Multi-person Pose Estimationcited by 340
- 2019Benchmarking Robustness in Object Detection: Autonomous Driving when Winter is Comingcited by 332
- 2016Convolutional Pose Machinescited by 325
- 2019A Fourier Perspective on Model Robustness in Computer Visioncited by 288
- 2019HigherHRNet: Scale-Aware Representation Learning for Bottom-Up Human Pose Estimationcited by 247
- 2018Generalisation in humans and deep neural networkscited by 237
- 2016Associative Embedding: End-to-End Learning for Joint Detection and Groupingcited by 211
- 2020Whole-Body Human Pose Estimation in the Wildcited by 178
- 2016Improving the Robustness of Deep Neural Networks via Stability Trainingcited by 156
- 2020GridMask Data Augmentationcited by 123
- 2019PifPaf: Composite Fields for Human Pose Estimationcited by 120
- 2016Understanding How Image Quality Affects Deep Neural Networkscited by 118
- 2019Benchmarking the Robustness of Semantic Segmentation Modelscited by 111
- 2019Adversarial AutoAugmentcited by 111
- 2018Pose2Seg: Detection Free Human Instance Segmentationcited by 107
- 20182D/3D Pose Estimation and Action Recognition using Multitask Deep Learningcited by 103
- 2018Fast Human Pose Estimationcited by 68
- 2016Examining the Impact of Blur on Recognition by Convolutional Networkscited by 58
- 2020Differentiable Hierarchical Graph Grouping for Multi-Person Pose Estimationcited by 52
- 2018Jointly Optimize Data Augmentation and Network Training: Adversarial Data Augmentation in Human Pose Estimationcited by 44
- 2019Multi-person Articulated Tracking with Spatial and Temporal Embeddingscited by 38
- 2018Hide-and-Seek: A Data Augmentation Technique for Weakly-Supervised Localization and Beyondcited by 36
- 2020Adversarial Semantic Data Augmentation for Human Pose Estimationcited by 22
- 2019TRB: A Novel Triplet Representation for Understanding 2D Human Bodycited by 10
Built on by
Citing papers per year: 2021: 4; 2022: 10; 2023: 12; 2024: 8; 2025: 5; 2026: 2.
41 papers.
Sort:
By area:
- 2023Robo3D: Towards Robust and Reliable 3D Perception against Corruptionscited by 128
- 2022Not All Tokens Are Equal: Human-centric Visual Analysis via Token Clustering Transformercited by 99
- 2021AugMax: Adversarial Composition of Random Augmentations for Robust Trainingcited by 89
- 2022On Adversarial Robustness of Trajectory Prediction for Autonomous Vehiclescited by 89
- 2023RoboDepth: Robust Out-of-Distribution Depth Estimation under Corruptionscited by 47
- 2021Benchmarking the Robustness of Spatial-Temporal Models Against Corruptionscited by 35
- 2022Perceptual Attacks of No-Reference Image Quality Models with Human-in-the-Loopcited by 30
- 2022Benchmarking the Robustness of Deep Neural Networks to Common Corruptions in Digital Pathologycited by 26
- 2023Teacher-Student Architecture for Knowledge Distillation: A Surveycited by 26
- 20222D Human Pose Estimation: A Surveycited by 21
- 2024Diffusion Model is a Good Pose Estimator from 3D RF-Visioncited by 21
- 2023Vision-Based Human Pose Estimation via Deep Learning: A Surveycited by 20
29 more
- 2022Intra-Source Style Augmentation for Improved Domain Generalizationcited by 17
- 2023Distracting Downpour: Adversarial Weather Attacks for Motion Estimationcited by 15
- 2024Adversarial Safety-Critical Scenario Generation using Naturalistic Human Driving Priorscited by 15
- 2022PoseTrans: A Simple Yet Effective Pose Transformation Augmentation for Human Pose Estimationcited by 14
- 2023The RoboDepth Challenge: Methods and Advancements Towards Robust Depth Estimationcited by 13
- 2021Benchmarks for Corruption Invariant Person Re-identificationcited by 9
- 2022Attacking Motion Estimation with Adversarial Snowcited by 9
- 2022Anatomy-guided domain adaptation for 3D in-bed human pose estimationcited by 9
- 2023You Only Learn One Query: Learning Unified Human Query for Single-Stage Multi-Person Multi-Task Human-Centric Perceptioncited by 9
- 2023Intra- & Extra-Source Exemplar-Based Style Synthesis for Improved Domain Generalizationcited by 7
- 2023KBody: Towards general, robust, and aligned monocular whole-body estimationcited by 6
- 2023Towards Robust and Expressive Whole-body Human Pose and Shape Estimationcited by 6
- 2024Adversarial Training: A Surveycited by 6
- 2022Non-Autoregressive Sign Language Production via Knowledge Distillationcited by 4
- 2023Improving the Robustness of 3D Human Pose Estimation: A Benchmark and Learning from Noisy Inputcited by 4
- 2024Towards Robust 3D Pose Transfer with Adversarial Learningcited by 4
- 2024PoseBench: Benchmarking the Robustness of Pose Estimation Models under Corruptionscited by 4
- 2024Data Augmentation in Human-Centric Visioncited by 2
- 2025textttAVROBUSTBENCH: Benchmarking the Robustness of Audio-Visual Recognition Models at Test-Timecited by 2
- 2021On Exploring and Improving Robustness of Scene Text Detection Modelscited by 1
- 2023Exploring the Robustness of Human Parsers Towards Common Corruptionscited by 1
- 2024SA-Attack: Speed-adaptive stealthy adversarial attack on trajectory predictioncited by 1
- 2024Common Corruptions for Enhancing and Evaluating Robustness in Air-to-Air Visual Object Detectioncited by 1
- 2025PoseSyn: Synthesizing Diverse 3D Pose Data from In-the-Wild 2D Datacited by 1
- 2025Towards Robust Unsupervised Attention Prediction in Autonomous Drivingcited by 0
- 2025SHARDeg: A Benchmark for Skeletal Human Action Recognition in Degraded Scenarioscited by 0
- 2025Harnessing Group-Oriented Consistency Constraints for Semi-Supervised Semantic Segmentation in CdZnTe Semiconductorscited by 0
- 2026A Point Cloud Transformer for Remote Monitoring and Automated Assessment of Physical Rehabilitation Exercisescited by 0
- 2026Self-Review Reinforcement Learning (SRRL) with Cross-Episode Memory and Policy Distillationcited by 0
- 2026Self-Review Reinforcement Learning (SRRL) with Cross-Episode Memory and Policy Distillation6 Jul 2026
- 2026A Point Cloud Transformer for Remote Monitoring and Automated Assessment of Physical Rehabilitation Exercises29 Jun 2026
- 2025Harnessing Group-Oriented Consistency Constraints for Semi-Supervised Semantic Segmentation in CdZnTe Semiconductors18 Aug 2025
- 2025textttAVROBUSTBENCH: Benchmarking the Robustness of Audio-Visual Recognition Models at Test-Time31 May 2025
- 2025SHARDeg: A Benchmark for Skeletal Human Action Recognition in Degraded Scenarios23 May 2025
- 2025PoseSyn: Synthesizing Diverse 3D Pose Data from In-the-Wild 2D Data17 Mar 2025
- 2025Towards Robust Unsupervised Attention Prediction in Autonomous Driving25 Jan 2025
- 2024Adversarial Training: A Survey19 Oct 2024
- 2024Adversarial Safety-Critical Scenario Generation using Naturalistic Human Driving Priors6 Aug 2024
- 2024PoseBench: Benchmarking the Robustness of Pose Estimation Models under Corruptions20 Jun 2024
- 2024Common Corruptions for Enhancing and Evaluating Robustness in Air-to-Air Visual Object Detection10 May 2024
- 2024SA-Attack: Speed-adaptive stealthy adversarial attack on trajectory prediction19 Apr 2024
29 more
- 2024Towards Robust 3D Pose Transfer with Adversarial Learning2 Apr 2024
- 2024Diffusion Model is a Good Pose Estimator from 3D RF-Vision24 Mar 2024
- 2024Data Augmentation in Human-Centric Vision13 Mar 2024
- 2023Towards Robust and Expressive Whole-body Human Pose and Shape Estimation14 Dec 2023
- 2023Improving the Robustness of 3D Human Pose Estimation: A Benchmark and Learning from Noisy Input11 Dec 2023
- 2023You Only Learn One Query: Learning Unified Human Query for Single-Stage Multi-Person Multi-Task Human-Centric Perception9 Dec 2023
- 2023RoboDepth: Robust Out-of-Distribution Depth Estimation under Corruptions23 Oct 2023
- 2023Exploring the Robustness of Human Parsers Towards Common Corruptions2 Sep 2023
- 2023Vision-Based Human Pose Estimation via Deep Learning: A Survey26 Aug 2023
- 2023Teacher-Student Architecture for Knowledge Distillation: A Survey8 Aug 2023
- 2023The RoboDepth Challenge: Methods and Advancements Towards Robust Depth Estimation27 Jul 2023
- 2023Intra- & Extra-Source Exemplar-Based Style Synthesis for Improved Domain Generalization2 Jul 2023
- 2023Distracting Downpour: Adversarial Weather Attacks for Motion Estimation11 May 2023
- 2023KBody: Towards general, robust, and aligned monocular whole-body estimation23 Apr 2023
- 2023Robo3D: Towards Robust and Reliable 3D Perception against Corruptions30 Mar 2023
- 2022Anatomy-guided domain adaptation for 3D in-bed human pose estimation22 Nov 2022
- 2022Attacking Motion Estimation with Adversarial Snow20 Oct 2022
- 2022Intra-Source Style Augmentation for Improved Domain Generalization18 Oct 2022
- 2022Perceptual Attacks of No-Reference Image Quality Models with Human-in-the-Loop3 Oct 2022
- 2022PoseTrans: A Simple Yet Effective Pose Transformation Augmentation for Human Pose Estimation16 Aug 2022
- 2022Non-Autoregressive Sign Language Production via Knowledge Distillation12 Aug 2022
- 2022Benchmarking the Robustness of Deep Neural Networks to Common Corruptions in Digital Pathology30 Jun 2022
- 2022Not All Tokens Are Equal: Human-centric Visual Analysis via Token Clustering Transformer19 Apr 2022
- 20222D Human Pose Estimation: A Survey15 Apr 2022
- 2022On Adversarial Robustness of Trajectory Prediction for Autonomous Vehicles13 Jan 2022
- 2021Benchmarks for Corruption Invariant Person Re-identification1 Nov 2021
- 2021AugMax: Adversarial Composition of Random Augmentations for Robust Training26 Oct 2021
- 2021Benchmarking the Robustness of Spatial-Temporal Models Against Corruptions13 Oct 2021
- 2021On Exploring and Improving Robustness of Scene Text Detection Models12 Oct 2021
- 2024Diffusion Model is a Good Pose Estimator from 3D RF-Visioncited by 21
- 2024Diffusion Model is a Good Pose Estimator from 3D RF-Vision24 Mar 2024
- 2023Robo3D: Towards Robust and Reliable 3D Perception against Corruptionscited by 128
- 2022Not All Tokens Are Equal: Human-centric Visual Analysis via Token Clustering Transformercited by 99
- 2021AugMax: Adversarial Composition of Random Augmentations for Robust Trainingcited by 89
- 2022On Adversarial Robustness of Trajectory Prediction for Autonomous Vehiclescited by 89
- 2023RoboDepth: Robust Out-of-Distribution Depth Estimation under Corruptionscited by 47
- 2021Benchmarking the Robustness of Spatial-Temporal Models Against Corruptionscited by 35
- 2022Perceptual Attacks of No-Reference Image Quality Models with Human-in-the-Loopcited by 30
- 2022Benchmarking the Robustness of Deep Neural Networks to Common Corruptions in Digital Pathologycited by 26
- 2023Teacher-Student Architecture for Knowledge Distillation: A Surveycited by 26
- 20222D Human Pose Estimation: A Surveycited by 21
- 2023Vision-Based Human Pose Estimation via Deep Learning: A Surveycited by 20
- 2022Intra-Source Style Augmentation for Improved Domain Generalizationcited by 17
12 most cited of 39 All 39 (JSON)
- 2026Self-Review Reinforcement Learning (SRRL) with Cross-Episode Memory and Policy Distillation6 Jul 2026
- 2026A Point Cloud Transformer for Remote Monitoring and Automated Assessment of Physical Rehabilitation Exercises29 Jun 2026
- 2025Harnessing Group-Oriented Consistency Constraints for Semi-Supervised Semantic Segmentation in CdZnTe Semiconductors18 Aug 2025
- 2025textttAVROBUSTBENCH: Benchmarking the Robustness of Audio-Visual Recognition Models at Test-Time31 May 2025
- 2025SHARDeg: A Benchmark for Skeletal Human Action Recognition in Degraded Scenarios23 May 2025
- 2025PoseSyn: Synthesizing Diverse 3D Pose Data from In-the-Wild 2D Data17 Mar 2025
- 2025Towards Robust Unsupervised Attention Prediction in Autonomous Driving25 Jan 2025
- 2024Adversarial Training: A Survey19 Oct 2024
- 2024PoseBench: Benchmarking the Robustness of Pose Estimation Models under Corruptions20 Jun 2024
- 2024Common Corruptions for Enhancing and Evaluating Robustness in Air-to-Air Visual Object Detection10 May 2024
- 2024SA-Attack: Speed-adaptive stealthy adversarial attack on trajectory prediction19 Apr 2024
- 2024Towards Robust 3D Pose Transfer with Adversarial Learning2 Apr 2024
12 newest of 39 All 39 (JSON)