mlsanityData to 7 Oct 2026

Amplitude-Phase Recombination: Rethinking Robustness of Convolutional Neural Networks in Frequency Domain

arXiv 2108.08487 ↗First posted 19 Aug 2021cs.CV cs.LGcited by 70

Not on the map. Why?

Abstract (arXiv)

Recently, the generalization behavior of Convolutional Neural Networks (CNN) is gradually transparent through explanation techniques with the frequency components decomposition. However, the importance of the phase spectrum of the image for a robust vision system is still ignored. In this paper, we notice that the CNN tends to converge at the local optimum which is closely related to the high-frequency components of the training images, while the amplitude spectrum is easily disturbed such as noises or common corruptions. In contrast, more empirical studies found that humans rely on more phase components to achieve robust recognition. This observation leads to more explanations of the CNN's generalization behaviors in both robustness to common perturbations and out-of-distribution detection, and motivates a new perspective on data augmentation designed by re-combing the phase spectrum of the current image and the amplitude spectrum of the distracter image. That is, the generated samples force the CNN to pay more attention to the structured information from phase components and keep robust to the variation of the amplitude. Experiments on several image datasets indicate that the proposed method achieves state-of-the-art performances on multiple generalizations and calibration tasks, including adaptability for common corruptions and surface variations, out-of-distribution detection, and adversarial attack.

Key facts. Cited by 70 papers in the map (data through 7 Oct 2026). Builds on 38 of its 56 references that are in the map. First posted on arXiv 19 Aug 2021.

Builds on

38 of 56 references.

References · 38

  1. 2015Deep Residual Learning for Image Recognitioncited by 51,809
  2. 2014ImageNet Large Scale Visual Recognition Challengecited by 8,441
  3. 2014Explaining and Harnessing Adversarial Examplescited by 7,287
  4. 2016Densely Connected Convolutional Networkscited by 6,691
  5. 2017mixup: Beyond Empirical Risk Minimizationcited by 5,155
  6. 2015Delving Deep into Rectifiers: Surpassing Human-Level Performance on ImageNet Classificationcited by 3,590
  7. 2016Wide Residual Networkscited by 3,057
  8. 2019CutMix: Regularization Strategy to Train Strong Classifiers with Localizable Featurescited by 2,875
  9. 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,857
  10. 2020Supervised Contrastive Learningcited by 2,803
  11. 2016Aggregated Residual Transformations for Deep Neural Networkscited by 2,540
  12. 2016A Baseline for Detecting Misclassified and Out-of-Distribution Examples in Neural Networkscited by 2,362
26 more
  1. 2020The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalizationcited by 1,842
  2. 2017Improved Regularization of Convolutional Neural Networks with Cutoutcited by 1,623
  3. 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,442
  4. 2018ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustnesscited by 1,430
  5. 2019Natural Adversarial Examplescited by 1,401
  6. 2017Enhancing The Reliability of Out-of-distribution Image Detection in Neural Networkscited by 1,325
  7. 2019Adversarial Examples Are Not Bugs, They Are Featurescited by 950
  8. 2019AugMix: A Simple Data Processing Method to Improve Robustness and Uncertaintycited by 897
  9. 2018AutoAugment: Learning Augmentation Policies from Datacited by 728
  10. 2020Fast is better than free: Revisiting adversarial trainingcited by 723
  11. 2017Dynamic Routing Between Capsulescited by 689
  12. 2016Weight Normalization: A Simple Reparameterization to Accelerate Training of Deep Neural Networkscited by 541
  13. 2020CSI: Novelty Detection via Contrastive Learning on Distributionally Shifted Instancescited by 441
  14. 2020Generalized ODIN: Detecting Out-of-distribution Image without Learning from Out-of-distribution Datacited by 408
  15. 2018Adversarially Robust Generalization Requires More Datacited by 318
  16. 2019High Frequency Component Helps Explain the Generalization of Convolutional Neural Networkscited by 310
  17. 2021Spatial-Phase Shallow Learning: Rethinking Face Forgery Detection in Frequency Domaincited by 241
  18. 2018Reducing Network Agnostophobiacited by 165
  19. 2018MixUp as Locally Linear Out-Of-Manifold Regularizationcited by 158
  20. 2021Adversarial Reciprocal Points Learning for Open Set Recognitioncited by 153
  21. 2019Adversarial Training Can Hurt Generalizationcited by 131
  22. 2021How to represent part-whole hierarchies in a neural networkcited by 123
  23. 2020Learning Open Set Network with Discriminative Reciprocal Pointscited by 115
  24. 2018Low Frequency Adversarial Perturbationcited by 80
  25. 2019On the Effectiveness of Low Frequency Perturbationscited by 56
  26. 2019A Simple Explanation for the Existence of Adversarial Examples with Small Hamming Distancecited by 32

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2021: 2; 2022: 12; 2023: 18; 2024: 13; 2025: 16; 2026: 9.

70 papers.

Sort:

By area:

  1. 2021Generalized Out-of-Distribution Detection: A Surveycited by 796
  2. 2022Uncertainty Modeling for Out-of-Distribution Generalizationcited by 122
  3. 2023MedViT: A Robust Vision Transformer for Generalized Medical Image Classificationcited by 89
  4. 2021PRIME: A few primitives can boost robustness to common corruptionscited by 40
  5. 2022PASTA: Proportional Amplitude Spectrum Training Augmentation for Syn-to-Real Domain Generalizationcited by 38
  6. 2023COCO-O: A Benchmark for Object Detectors under Natural Distribution Shiftscited by 34
  7. 2023What do neural networks learn in image classification? A frequency shortcut perspectivecited by 28
  8. 2023Training Full Spike Neural Networks via Auxiliary Accumulation Pathwaycited by 26
  9. 2023Decompose, Adjust, Compose: Effective Normalization by Playing with Frequency for Domain Generalizationcited by 25
  10. 2024Learning Spectral-Decomposed Tokens for Domain Generalized Semantic Segmentationcited by 21
  11. 2023A Survey on the Robustness of Computer Vision Models against Common Corruptionscited by 20
  12. 2024Fourier-basis Functions to Bridge Augmentation Gap: Rethinking Frequency Augmentation in Image Classificationcited by 18
38 more
  1. 2023Frequency Compensated Diffusion Model for Real-scene Dehazingcited by 17
  2. 2024Lightweight Frequency Masker for Cross-Domain Few-Shot Semantic Segmentationcited by 17
  3. 2023The RoboDepth Challenge: Methods and Advancements Towards Robust Depth Estimationcited by 13
  4. 2023HybridAugment++: Unified Frequency Spectra Perturbations for Model Robustnesscited by 12
  5. 2024DAT: Improving Adversarial Robustness via Generative Amplitude Mix-up in Frequency Domaincited by 12
  6. 2023MRFP: Learning Generalizable Semantic Segmentation from Sim-2-Real with Multi-Resolution Feature Perturbationcited by 11
  7. 2022PADDLES: Phase-Amplitude Spectrum Disentangled Early Stopping for Learning with Noisy Labelscited by 10
  8. 2023It Is All About Data: A Survey on the Effects of Data on Adversarial Robustnesscited by 9
  9. 2024Generalization Boosted Adapter for Open-Vocabulary Segmentationcited by 9
  10. 2022Exploring Adversarial Robustness of Vision Transformers in the Spectral Perspectivecited by 8
  11. 2025The Devil is in Low-Level Features for Cross-Domain Few-Shot Segmentationcited by 8
  12. 2024Direct Distillation between Different Domainscited by 7
  13. 2022Deeper Insights into the Robustness of ViTs towards Common Corruptionscited by 5
  14. 2023Improving Model Generalization by On-manifold Adversarial Augmentation in the Frequency Domaincited by 5
  15. 2023Adversarial Attacks and Defenses in Machine Learning-Powered Networks: A Contemporary Surveycited by 5
  16. 2022Revisiting the Shape-Bias of Deep Learning for Dermoscopic Skin Lesion Classificationcited by 4
  17. 2022Low-Mid Adversarial Perturbation against Unauthorized Face Recognition Systemcited by 4
  18. 2022Improving Robustness to Out-of-Distribution Data by Frequency-based Augmentationcited by 4
  19. 2023DFM-X: Augmentation by Leveraging Prior Knowledge of Shortcut Learningcited by 4
  20. 2022Toward Robust Diagnosis: A Contour Attention Preserving Adversarial Defense for COVID-19 Detectioncited by 3
  21. 2024Frequency Domain Modality-invariant Feature Learning for Visible-infrared Person Re-Identificationcited by 3
  22. 2025Revisiting Continuity of Image Tokens for Cross-domain Few-shot Learningcited by 3
  23. 2024A Modular System for Enhanced Robustness of Multimedia Understanding Networks via Deep Parametric Estimationcited by 2
  24. 2024FIESTA: Fourier-Based Semantic Augmentation with Uncertainty Guidance for Enhanced Domain Generalizability in Medical Image Segmentationcited by 2
  25. 2025DGSSA: Domain generalization with structural and stylistic augmentation for retinal vessel segmentationcited by 2
  26. 2025PAD: Phase-Amplitude Decoupling Fusion for Multi-Modal Land Cover Classificationcited by 2
  27. 2025PAID: Pairwise Angular-Invariant Decomposition for Continual Test-Time Adaptationcited by 2
  28. 2025DenoDet V2: Phase-Amplitude Cross Denoising for SAR Object Detectioncited by 2
  29. 2025Divide, Conquer and Unite: Hierarchical Style-Recalibrated Prototype Alignment for Federated Medical Segmentationcited by 2
  30. 2025Bridging Granularity Gaps: Hierarchical Semantic Learning for Cross-domain Few-shot Segmentationcited by 2
  31. 2022Adversarial amplitude swap towards robust image classifierscited by 1
  32. 2022Models Out of Line: A Fourier Lens on Distribution Shift Robustnesscited by 1
  33. 2022Robustness and invariance properties of image classifierscited by 1
  34. 2024FFT-based Selection and Optimization of Statistics for Robust Recognition of Severely Corrupted Imagescited by 1
  35. 2024Enhanced Model Robustness to Input Corruptions by Per-corruption Adaptation of Normalization Statisticscited by 1
  36. 2024Exploring connections of spectral analysis and transfer learning in medical imagingcited by 1
  37. 2026Learning Adaptive Distribution Alignment with Neural Characteristic Function for Graph Domain Adaptationcited by 1
  38. 2026Internally Referenced Low-Light Enhancementcited by 1

50 most cited of 70 All 70 (JSON)