Amplitude-Phase Recombination: Rethinking Robustness of Convolutional Neural Networks in Frequency Domain
Not on the map. Why?
Abstract (arXiv)
Recently, the generalization behavior of Convolutional Neural Networks (CNN) is gradually transparent through explanation techniques with the frequency components decomposition. However, the importance of the phase spectrum of the image for a robust vision system is still ignored. In this paper, we notice that the CNN tends to converge at the local optimum which is closely related to the high-frequency components of the training images, while the amplitude spectrum is easily disturbed such as noises or common corruptions. In contrast, more empirical studies found that humans rely on more phase components to achieve robust recognition. This observation leads to more explanations of the CNN's generalization behaviors in both robustness to common perturbations and out-of-distribution detection, and motivates a new perspective on data augmentation designed by re-combing the phase spectrum of the current image and the amplitude spectrum of the distracter image. That is, the generated samples force the CNN to pay more attention to the structured information from phase components and keep robust to the variation of the amplitude. Experiments on several image datasets indicate that the proposed method achieves state-of-the-art performances on multiple generalizations and calibration tasks, including adaptability for common corruptions and surface variations, out-of-distribution detection, and adversarial attack.
Key facts. Cited by 70 papers in the map (data through 7 Oct 2026). Builds on 38 of its 56 references that are in the map. First posted on arXiv 19 Aug 2021.
Builds on
38 of 56 references.
References · 38
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2014ImageNet Large Scale Visual Recognition Challengecited by 8,441
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2016Densely Connected Convolutional Networkscited by 6,691
- 2017mixup: Beyond Empirical Risk Minimizationcited by 5,155
- 2015Delving Deep into Rectifiers: Surpassing Human-Level Performance on ImageNet Classificationcited by 3,590
- 2016Wide Residual Networkscited by 3,057
- 2019CutMix: Regularization Strategy to Train Strong Classifiers with Localizable Featurescited by 2,875
- 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,857
- 2020Supervised Contrastive Learningcited by 2,803
- 2016Aggregated Residual Transformations for Deep Neural Networkscited by 2,540
- 2016A Baseline for Detecting Misclassified and Out-of-Distribution Examples in Neural Networkscited by 2,362
26 more
- 2020The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalizationcited by 1,842
- 2017Improved Regularization of Convolutional Neural Networks with Cutoutcited by 1,623
- 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,442
- 2018ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustnesscited by 1,430
- 2019Natural Adversarial Examplescited by 1,401
- 2017Enhancing The Reliability of Out-of-distribution Image Detection in Neural Networkscited by 1,325
- 2019Adversarial Examples Are Not Bugs, They Are Featurescited by 950
- 2019AugMix: A Simple Data Processing Method to Improve Robustness and Uncertaintycited by 897
- 2018AutoAugment: Learning Augmentation Policies from Datacited by 728
- 2020Fast is better than free: Revisiting adversarial trainingcited by 723
- 2017Dynamic Routing Between Capsulescited by 689
- 2016Weight Normalization: A Simple Reparameterization to Accelerate Training of Deep Neural Networkscited by 541
- 2020CSI: Novelty Detection via Contrastive Learning on Distributionally Shifted Instancescited by 441
- 2020Generalized ODIN: Detecting Out-of-distribution Image without Learning from Out-of-distribution Datacited by 408
- 2018Adversarially Robust Generalization Requires More Datacited by 318
- 2019High Frequency Component Helps Explain the Generalization of Convolutional Neural Networkscited by 310
- 2021Spatial-Phase Shallow Learning: Rethinking Face Forgery Detection in Frequency Domaincited by 241
- 2018Reducing Network Agnostophobiacited by 165
- 2018MixUp as Locally Linear Out-Of-Manifold Regularizationcited by 158
- 2021Adversarial Reciprocal Points Learning for Open Set Recognitioncited by 153
- 2019Adversarial Training Can Hurt Generalizationcited by 131
- 2021How to represent part-whole hierarchies in a neural networkcited by 123
- 2020Learning Open Set Network with Discriminative Reciprocal Pointscited by 115
- 2018Low Frequency Adversarial Perturbationcited by 80
- 2019On the Effectiveness of Low Frequency Perturbationscited by 56
- 2019A Simple Explanation for the Existence of Adversarial Examples with Small Hamming Distancecited by 32
Built on by
Citing papers per year: 2021: 2; 2022: 12; 2023: 18; 2024: 13; 2025: 16; 2026: 9.
70 papers.
Sort:
By area:
- 2021Generalized Out-of-Distribution Detection: A Surveycited by 796
- 2022Uncertainty Modeling for Out-of-Distribution Generalizationcited by 122
- 2023MedViT: A Robust Vision Transformer for Generalized Medical Image Classificationcited by 89
- 2021PRIME: A few primitives can boost robustness to common corruptionscited by 40
- 2022PASTA: Proportional Amplitude Spectrum Training Augmentation for Syn-to-Real Domain Generalizationcited by 38
- 2023COCO-O: A Benchmark for Object Detectors under Natural Distribution Shiftscited by 34
- 2023What do neural networks learn in image classification? A frequency shortcut perspectivecited by 28
- 2023Training Full Spike Neural Networks via Auxiliary Accumulation Pathwaycited by 26
- 2023Decompose, Adjust, Compose: Effective Normalization by Playing with Frequency for Domain Generalizationcited by 25
- 2024Learning Spectral-Decomposed Tokens for Domain Generalized Semantic Segmentationcited by 21
- 2023A Survey on the Robustness of Computer Vision Models against Common Corruptionscited by 20
- 2024Fourier-basis Functions to Bridge Augmentation Gap: Rethinking Frequency Augmentation in Image Classificationcited by 18
38 more
- 2023Frequency Compensated Diffusion Model for Real-scene Dehazingcited by 17
- 2024Lightweight Frequency Masker for Cross-Domain Few-Shot Semantic Segmentationcited by 17
- 2023The RoboDepth Challenge: Methods and Advancements Towards Robust Depth Estimationcited by 13
- 2023HybridAugment++: Unified Frequency Spectra Perturbations for Model Robustnesscited by 12
- 2024DAT: Improving Adversarial Robustness via Generative Amplitude Mix-up in Frequency Domaincited by 12
- 2023MRFP: Learning Generalizable Semantic Segmentation from Sim-2-Real with Multi-Resolution Feature Perturbationcited by 11
- 2022PADDLES: Phase-Amplitude Spectrum Disentangled Early Stopping for Learning with Noisy Labelscited by 10
- 2023It Is All About Data: A Survey on the Effects of Data on Adversarial Robustnesscited by 9
- 2024Generalization Boosted Adapter for Open-Vocabulary Segmentationcited by 9
- 2022Exploring Adversarial Robustness of Vision Transformers in the Spectral Perspectivecited by 8
- 2025The Devil is in Low-Level Features for Cross-Domain Few-Shot Segmentationcited by 8
- 2024Direct Distillation between Different Domainscited by 7
- 2022Deeper Insights into the Robustness of ViTs towards Common Corruptionscited by 5
- 2023Improving Model Generalization by On-manifold Adversarial Augmentation in the Frequency Domaincited by 5
- 2023Adversarial Attacks and Defenses in Machine Learning-Powered Networks: A Contemporary Surveycited by 5
- 2022Revisiting the Shape-Bias of Deep Learning for Dermoscopic Skin Lesion Classificationcited by 4
- 2022Low-Mid Adversarial Perturbation against Unauthorized Face Recognition Systemcited by 4
- 2022Improving Robustness to Out-of-Distribution Data by Frequency-based Augmentationcited by 4
- 2023DFM-X: Augmentation by Leveraging Prior Knowledge of Shortcut Learningcited by 4
- 2022Toward Robust Diagnosis: A Contour Attention Preserving Adversarial Defense for COVID-19 Detectioncited by 3
- 2024Frequency Domain Modality-invariant Feature Learning for Visible-infrared Person Re-Identificationcited by 3
- 2025Revisiting Continuity of Image Tokens for Cross-domain Few-shot Learningcited by 3
- 2024A Modular System for Enhanced Robustness of Multimedia Understanding Networks via Deep Parametric Estimationcited by 2
- 2024FIESTA: Fourier-Based Semantic Augmentation with Uncertainty Guidance for Enhanced Domain Generalizability in Medical Image Segmentationcited by 2
- 2025DGSSA: Domain generalization with structural and stylistic augmentation for retinal vessel segmentationcited by 2
- 2025PAD: Phase-Amplitude Decoupling Fusion for Multi-Modal Land Cover Classificationcited by 2
- 2025PAID: Pairwise Angular-Invariant Decomposition for Continual Test-Time Adaptationcited by 2
- 2025DenoDet V2: Phase-Amplitude Cross Denoising for SAR Object Detectioncited by 2
- 2025Divide, Conquer and Unite: Hierarchical Style-Recalibrated Prototype Alignment for Federated Medical Segmentationcited by 2
- 2025Bridging Granularity Gaps: Hierarchical Semantic Learning for Cross-domain Few-shot Segmentationcited by 2
- 2022Adversarial amplitude swap towards robust image classifierscited by 1
- 2022Models Out of Line: A Fourier Lens on Distribution Shift Robustnesscited by 1
- 2022Robustness and invariance properties of image classifierscited by 1
- 2024FFT-based Selection and Optimization of Statistics for Robust Recognition of Severely Corrupted Imagescited by 1
- 2024Enhanced Model Robustness to Input Corruptions by Per-corruption Adaptation of Normalization Statisticscited by 1
- 2024Exploring connections of spectral analysis and transfer learning in medical imagingcited by 1
- 2026Learning Adaptive Distribution Alignment with Neural Characteristic Function for Graph Domain Adaptationcited by 1
- 2026Internally Referenced Low-Light Enhancementcited by 1
50 most cited of 70 All 70 (JSON)
- 2026Cross-Modal Attention Acts as a Frequency Filter: Why Verbose Prompts Improve Robustness in Vision-Language Models17 Sep 2026
- 2026Forbid Your Attention: Fooling Multimodal Large Language Models by Selectively Removing Intrinsic Focus in Spectral Domain1 Sep 2026
- 2026Close Shortcut Wins Long: Seeking Diverse and Stable Generators for Data-Free Knowledge Distillation22 Aug 2026
- 2026FreqAdapt: Frequency-Adaptive Processing for RAW Object Detection4 Aug 2026
- 2026The Importance of Phase in Neural Representations: An Internal Oppenheim-Lim Test of Image Classifiers15 Jun 2026
- 2026Internally Referenced Low-Light Enhancement27 May 2026
- 2026LISA: Language-guided Interference-aware Spatial-Frequency Attention for Driver Gaze Estimation17 May 2026
- 2026Defending against Patch-Based and Texture-Based Adversarial Attacks with Spectral Decomposition12 Apr 2026
- 2026Learning Adaptive Distribution Alignment with Neural Characteristic Function for Graph Domain Adaptation11 Feb 2026
- 2025PAGen: Phase-guided Amplitude Generation for Domain-adaptive Object Detection27 Nov 2025
- 2025Continual Error Correction on Low-Resource Devices26 Nov 2025
- 2025Bridging Granularity Gaps: Hierarchical Semantic Learning for Cross-domain Few-shot Segmentation15 Nov 2025
38 more
- 2025Divide, Conquer and Unite: Hierarchical Style-Recalibrated Prototype Alignment for Federated Medical Segmentation14 Nov 2025
- 2025DenoDet V2: Phase-Amplitude Cross Denoising for SAR Object Detection12 Aug 2025
- 2025FreeDNA: Endowing Domain Adaptation of Diffusion-Based Dense Prediction with Training-Free Domain Noise Alignment26 Jun 2025
- 2025FREQuency ATTribution: benchmarking frequency-based occlusion for time series data23 Jun 2025
- 2025Revisiting Continuity of Image Tokens for Cross-domain Few-shot Learning3 Jun 2025
- 2025PAID: Pairwise Angular-Invariant Decomposition for Continual Test-Time Adaptation3 Jun 2025
- 2025Image Restoration Learning via Noisy Supervision in the Fourier Domain31 May 2025
- 2025Frequency Composition for Compressed and Domain-Adaptive Neural Networks27 May 2025
- 2025PAD: Phase-Amplitude Decoupling Fusion for Multi-Modal Land Cover Classification27 Apr 2025
- 2025The Devil is in Low-Level Features for Cross-Domain Few-Shot Segmentation27 Mar 2025
- 2025EasyRobust: A Comprehensive and Easy-to-use Toolkit for Robust and Generalized Vision21 Mar 2025
- 2025Improving Adversarial Robustness via Phase and Amplitude-aware Prompting6 Feb 2025
- 2025DGSSA: Domain generalization with structural and stylistic augmentation for retinal vessel segmentation7 Jan 2025
- 2024Lightweight Frequency Masker for Cross-Domain Few-Shot Semantic Segmentation29 Oct 2024
- 2024DAT: Improving Adversarial Robustness via Generative Amplitude Mix-up in Frequency Domain16 Oct 2024
- 2024DyMix: Dynamic Frequency Mixup Scheduler based Unsupervised Domain Adaptation for Enhancing Alzheimer's Disease Identification2 Oct 2024
- 2024Generalization Boosted Adapter for Open-Vocabulary Segmentation13 Sep 2024
- 2024Learning Spectral-Decomposed Tokens for Domain Generalized Semantic Segmentation26 Jul 2024
- 2024Exploring connections of spectral analysis and transfer learning in medical imaging16 Jul 2024
- 2024Enhanced Model Robustness to Input Corruptions by Per-corruption Adaptation of Normalization Statistics8 Jul 2024
- 2024FIESTA: Fourier-Based Semantic Augmentation with Uncertainty Guidance for Enhanced Domain Generalizability in Medical Image Segmentation20 Jun 2024
- 2024FFT-based Selection and Optimization of Statistics for Robust Recognition of Severely Corrupted Images21 Mar 2024
- 2024Fourier-basis Functions to Bridge Augmentation Gap: Rethinking Frequency Augmentation in Image Classification4 Mar 2024
- 2024A Modular System for Enhanced Robustness of Multimedia Understanding Networks via Deep Parametric Estimation28 Feb 2024
- 2024Direct Distillation between Different Domains12 Jan 2024
- 2024Frequency Domain Modality-invariant Feature Learning for Visible-infrared Person Re-Identification3 Jan 2024
- 2023MRFP: Learning Generalizable Semantic Segmentation from Sim-2-Real with Multi-Resolution Feature Perturbation30 Nov 2023
- 2023Frequency Compensated Diffusion Model for Real-scene Dehazing21 Aug 2023
- 2023DFM-X: Augmentation by Leveraging Prior Knowledge of Shortcut Learning12 Aug 2023
- 2023The RoboDepth Challenge: Methods and Advancements Towards Robust Depth Estimation27 Jul 2023
- 2023COCO-O: A Benchmark for Object Detectors under Natural Distribution Shifts24 Jul 2023
- 2023Phase Matching for Out-of-Distribution Generalization24 Jul 2023
- 2023HybridAugment++: Unified Frequency Spectra Perturbations for Model Robustness21 Jul 2023
- 2023What do neural networks learn in image classification? A frequency shortcut perspective19 Jul 2023
- 2023SysNoise: Exploring and Benchmarking Training-Deployment System Inconsistency1 Jul 2023
- 2023Exploiting Frequency Spectrum of Adversarial Images for General Robustness15 May 2023
- 2023A Survey on the Robustness of Computer Vision Models against Common Corruptions10 May 2023
- 2023Frequency Decomposition to Tap the Potential of Single Domain for Generalization14 Apr 2023
50 newest of 70 All 70 (JSON)
- 2024Generalization Boosted Adapter for Open-Vocabulary Segmentationcited by 9
- 2026Forbid Your Attention: Fooling Multimodal Large Language Models by Selectively Removing Intrinsic Focus in Spectral Domaincited by 0
- 2026Cross-Modal Attention Acts as a Frequency Filter: Why Verbose Prompts Improve Robustness in Vision-Language Modelscited by 0
- 2026Cross-Modal Attention Acts as a Frequency Filter: Why Verbose Prompts Improve Robustness in Vision-Language Models17 Sep 2026
- 2026Forbid Your Attention: Fooling Multimodal Large Language Models by Selectively Removing Intrinsic Focus in Spectral Domain1 Sep 2026
- 2024Generalization Boosted Adapter for Open-Vocabulary Segmentation13 Sep 2024
- 2021Generalized Out-of-Distribution Detection: A Surveycited by 796
- 2022Uncertainty Modeling for Out-of-Distribution Generalizationcited by 122
- 2023MedViT: A Robust Vision Transformer for Generalized Medical Image Classificationcited by 89
- 2021PRIME: A few primitives can boost robustness to common corruptionscited by 40
- 2022PASTA: Proportional Amplitude Spectrum Training Augmentation for Syn-to-Real Domain Generalizationcited by 38
- 2023COCO-O: A Benchmark for Object Detectors under Natural Distribution Shiftscited by 34
- 2023What do neural networks learn in image classification? A frequency shortcut perspectivecited by 28
- 2023Training Full Spike Neural Networks via Auxiliary Accumulation Pathwaycited by 26
- 2023Decompose, Adjust, Compose: Effective Normalization by Playing with Frequency for Domain Generalizationcited by 25
- 2024Learning Spectral-Decomposed Tokens for Domain Generalized Semantic Segmentationcited by 21
- 2023A Survey on the Robustness of Computer Vision Models against Common Corruptionscited by 20
- 2024Fourier-basis Functions to Bridge Augmentation Gap: Rethinking Frequency Augmentation in Image Classificationcited by 18
12 most cited of 65 All 65 (JSON)
- 2026Close Shortcut Wins Long: Seeking Diverse and Stable Generators for Data-Free Knowledge Distillation22 Aug 2026
- 2026FreqAdapt: Frequency-Adaptive Processing for RAW Object Detection4 Aug 2026
- 2026The Importance of Phase in Neural Representations: An Internal Oppenheim-Lim Test of Image Classifiers15 Jun 2026
- 2026Internally Referenced Low-Light Enhancement27 May 2026
- 2026LISA: Language-guided Interference-aware Spatial-Frequency Attention for Driver Gaze Estimation17 May 2026
- 2026Defending against Patch-Based and Texture-Based Adversarial Attacks with Spectral Decomposition12 Apr 2026
- 2026Learning Adaptive Distribution Alignment with Neural Characteristic Function for Graph Domain Adaptation11 Feb 2026
- 2025PAGen: Phase-guided Amplitude Generation for Domain-adaptive Object Detection27 Nov 2025
- 2025Continual Error Correction on Low-Resource Devices26 Nov 2025
- 2025Bridging Granularity Gaps: Hierarchical Semantic Learning for Cross-domain Few-shot Segmentation15 Nov 2025
- 2025Divide, Conquer and Unite: Hierarchical Style-Recalibrated Prototype Alignment for Federated Medical Segmentation14 Nov 2025
- 2025DenoDet V2: Phase-Amplitude Cross Denoising for SAR Object Detection12 Aug 2025
12 newest of 65 All 65 (JSON)