Do Invariances in Deep Neural Networks Align with Human Perception?
Not on the map. Why?
Abstract (arXiv)
An evaluation criterion for safe and trustworthy deep learning is how well the invariances captured by representations of deep neural networks (DNNs) are shared with humans. We identify challenges in measuring these invariances. Prior works used gradient-based methods to generate identically represented inputs (IRIs), ie, inputs which have identical representations (on a given layer) of a neural network, and thus capture invariances of a given network. One necessary criterion for a network's invariances to align with human perception is for its IRIs look 'similar' to humans. Prior works, however, have mixed takeaways; some argue that later layers of DNNs do not learn human-like invariances (citejenelle2019metamers) yet others seem to indicate otherwise (citemahendran2014understanding). We argue that the loss function used to generate IRIs can heavily affect takeaways about invariances of the network and is the primary reason for these conflicting findings. We propose an adversarial regularizer on the IRI generation loss that finds IRIs that make any model appear to have very little shared invariance with humans. Based on this evidence, we argue that there is scope for improving models to have human-like invariances, and further, to have meaningful comparisons between models one should use IRIs generated using the regularizer-free loss. We then conduct an in-depth investigation of how different components (eg architectures, training losses, data augmentations) of the deep learning pipeline contribute to learning models that have good alignment with humans. We find that architectures with residual connections trained using a (self-supervised) contrastive loss with ℓp ball adversarial data augmentation tend to learn invariances that are most aligned with humans. Code: urlgithub.com/nvedant07/Human-NN-Alignment.
Key facts. Cited by 2 papers in the map (data through 7 Oct 2026). Builds on 38 of its 67 references that are in the map. First posted on arXiv 29 Nov 2021.
Builds on
38 of 67 references.
References · 38
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2014Adam: A Method for Stochastic Optimizationcited by 36,960
- 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,160
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
- 2020A Simple Framework for Contrastive Learning of Visual Representationscited by 11,979
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,029
- 2014ImageNet Large Scale Visual Recognition Challengecited by 8,441
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2015Batch Normalization: Accelerating Deep Network Training by Reducing Internal Covariate Shiftcited by 6,979
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2014Going Deeper with Convolutionscited by 4,231
- 2019Similarity of Neural Network Representations Revisitedcited by 1,695
26 more
- 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,510
- 2019Do ImageNet Classifiers Generalize to ImageNet?cited by 1,507
- 2018ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustnesscited by 1,430
- 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,324
- 2019Distributionally Robust Neural Networks for Group Shifts: On the Importance of Regularization for Worst-Case Generalizationcited by 1,232
- 2019Adversarial Examples Are Not Bugs, They Are Featurescited by 950
- 2016Practical Black-Box Attacks against Machine Learningcited by 893
- 2017Ensemble Adversarial Training: Attacks and Defensescited by 833
- 2015The Limitations of Deep Learning in Adversarial Settingscited by 784
- 2014Deep Neural Networks are Easily Fooled: High Confidence Predictions for Unrecognizable Imagescited by 774
- 2015Distillation as a Defense to Adversarial Perturbations against Deep Neural Networkscited by 675
- 2018Recognition in Terra Incognitacited by 655
- 2019Adversarial Training for Free!cited by 638
- 2020Measuring Robustness to Natural Distribution Shifts in Image Classificationcited by 452
- 2014Understanding Deep Image Representations by Inverting Themcited by 399
- 2018Insights on representational similarity in neural networks with canonical correlationcited by 318
- 2020Do Adversarially Robust ImageNet Models Transfer Better?cited by 315
- 2017Improving the Adversarial Robustness and Interpretability of Deep Neural Networks by Regularizing their Input Gradientscited by 236
- 2015Convergent Learning: Do different neural networks learn the same representations?cited by 215
- 2020Adversarial Robustness: From Self-Supervised Pre-Training to Fine-Tuningcited by 152
- 2014Towards Deep Neural Network Architectures Robust to Adversarial Examplescited by 146
- 2020Adversarial Self-Supervised Contrastive Learningcited by 138
- 2018Towards Understanding Learning Representations: To What Extent Do Different Neural Networks Learn the Same Representationcited by 62
- 2019Are Perceptually-Aligned Gradients a General Property of Robust Classifiers?cited by 42
- 2021Grounding Representation Similarity with Statistical Testingcited by 28
- 2020Enriching ImageNet with Human Similarity Judgments and Psychological Embeddingscited by 23
Built on by
Citing papers per year: 2025: 2.
2 papers.