PixMix: Dreamlike Pictures Comprehensively Improve Safety Measures
Not on the map. Why?
Abstract (arXiv)
In real-world applications of machine learning, reliable and safe systems must consider measures of performance beyond standard test set accuracy. These other goals include out-of-distribution (OOD) robustness, prediction consistency, resilience to adversaries, calibrated uncertainty estimates, and the ability to detect anomalous inputs. However, improving performance towards these goals is often a balancing act that today's methods cannot achieve without sacrificing performance on other safety axes. For instance, adversarial training improves adversarial robustness but sharply degrades other classifier performance metrics. Similarly, strong data augmentation and regularization techniques often improve OOD robustness but harm anomaly detection, raising the question of whether a Pareto improvement on all existing safety measures is possible. To meet this challenge, we design a new data augmentation strategy utilizing the natural structural complexity of pictures such as fractals, which outperforms numerous baselines, is near Pareto-optimal, and roundly improves safety measures.
Key facts. Cited by 131 papers in the map (data through 14 Oct 2026). Builds on 42 of its 58 references that are in the map. First posted on arXiv 9 Dec 2021.
Builds on
42 of 58 references.
References · 42
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2017mixup: Beyond Empirical Risk Minimizationcited by 5,183
- 2016SGDR: Stochastic Gradient Descent with Warm Restartscited by 5,045
- 2017On Calibration of Modern Neural Networkscited by 4,960
- 2016Simple and Scalable Predictive Uncertainty Estimation using Deep Ensemblescited by 3,926
- 2016Wide Residual Networkscited by 3,070
- 2019CutMix: Regularization Strategy to Train Strong Classifiers with Localizable Featurescited by 2,884
- 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,877
- 2016A Baseline for Detecting Misclassified and Out-of-Distribution Examples in Neural Networkscited by 2,385
- 2013Describing Textures in the Wildcited by 2,125
- 2020The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalizationcited by 1,850
- 2017Improved Regularization of Convolutional Neural Networks with Cutoutcited by 1,628
30 more
- 2018A Simple Unified Framework for Detecting Out-of-Distribution Samples and Adversarial Attackscited by 1,485
- 2018ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustnesscited by 1,432
- 2020WILDS: A Benchmark of in-the-Wild Distribution Shiftscited by 1,375
- 2015LSUN: Construction of a Large-scale Image Dataset using Deep Learning with Humans in the Loopcited by 1,355
- 2017Enhancing The Reliability of Out-of-distribution Image Detection in Neural Networkscited by 1,328
- 2019Can You Trust Your Model's Uncertainty? Evaluating Predictive Uncertainty Under Dataset Shiftcited by 1,287
- 2019Distributionally Robust Neural Networks for Group Shifts: On the Importance of Regularization for Worst-Case Generalizationcited by 1,247
- 2017Random Erasing Data Augmentationcited by 1,239
- 2018Deep Anomaly Detection with Outlier Exposurecited by 942
- 2019AugMix: A Simple Data Processing Method to Improve Robustness and Uncertaintycited by 901
- 2018Robustness May Be at Odds with Accuracycited by 880
- 2018AutoAugment: Learning Augmentation Policies from Datacited by 730
- 2021How to train your ViT? Data, Augmentation, and Regularization in Vision Transformerscited by 569
- 2019Using Self-Supervised Learning Can Improve Model Robustness and Uncertaintycited by 514
- 2020A Unifying Review of Deep and Shallow Anomaly Detectioncited by 425
- 2017Training Confidence-calibrated Classifiers for Detecting Out-of-Distribution Samplescited by 389
- 2019Using Pre-Training Can Improve Model Robustness and Uncertaintycited by 373
- 2021Unsolved Problems in ML Safetycited by 292
- 2019A Fourier Perspective on Model Robustness in Computer Visioncited by 288
- 2018Learning Confidence for Out-of-Distribution Detection in Neural Networkscited by 245
- 2019Improving Robustness Without Sacrificing Accuracy with Patch Gaussian Augmentationcited by 105
- 2021Pre-training without Natural Imagescited by 100
- 2021On Interaction Between Augmentations and Corruptions in Natural Corruption Robustnesscited by 97
- 2021Learning to See by Looking at Noisecited by 92
- 2018Data Augmentation using Random Image Cropping and Patching for Deep CNNscited by 88
- 2015Posterior calibration and exploratory analysis for natural language processing modelscited by 76
- 2017Between-class Learning for Image Classificationcited by 50
- 2021Can Vision Transformers Learn without Natural Images?cited by 32
- 2020An Empirical Evaluation on Robustness and Uncertainty of Regularization Methodscited by 28
- 2021VisDA-2021 Competition Universal Domain Adaptation to Improve Performance on Out-of-Distribution Datacited by 19
Built on by
Citing papers per year: 2022: 22; 2023: 37; 2024: 33; 2025: 23; 2026: 16.
131 papers.
Sort:
By area:
- 2025Humanity's Last Examcited by 491
- 2022OpenOOD: Benchmarking Generalized Out-of-Distribution Detectioncited by 268
- 2023OpenOOD v1.5: Enhanced Benchmark for Out-of-Distribution Detectioncited by 179
- 2023Leaving Reality to Imagination: Robust Classification via Generated Datasetscited by 91
- 2023FLIRT: Feedback Loop In-context Red Teamingcited by 83
- 2024DiffuseMix: Label-Preserving Data Augmentation with Diffusion Modelscited by 78
- 2022SVFormer: Semi-supervised Video Transformer for Action Recognitioncited by 68
- 2023On Pitfalls of Test-Time Adaptationcited by 64
- 2024Safetywashing: Do AI Safety Benchmarks Actually Measure Safety Progress?cited by 61
- 2022Eliciting and Learning with Soft Labels from Every Annotatorcited by 43
- 2024Video-Language Understanding: A Survey from Model Architecture, Model Training, and Data Perspectivescited by 37
- 2022A Survey of Mix-based Data Augmentation: Taxonomy, Methods, Applications, and Explainabilitycited by 31
38 more
- 2022Large-scale Robustness Analysis of Video Action Recognition Modelscited by 29
- 2022On the Strong Correlation Between Model Invariance and Generalizationcited by 23
- 2022You Only Cut Once: Boosting Data Augmentation with a Single Cutcited by 22
- 2023A Survey on the Robustness of Computer Vision Models against Common Corruptionscited by 21
- 2023A Closer Look at Model Adaptation using Feature Distortion and Simplicity Biascited by 20
- 2023Strong but simple: A Baseline for Domain Generalized Dense Perception by CLIP-based Transfer Learningcited by 20
- 2024Can Biases in ImageNet Models Explain Generalization?cited by 20
- 2024Intelligent Clinical Documentation: Harnessing Generative AI for Patient-Centric Clinical Note Generationcited by 20
- 2024A Survey on Mixup Augmentations and Beyondcited by 20
- 2022Not Just Pretty Pictures: Toward Interventional Data Augmentation Using Text-to-Image Generatorscited by 17
- 2022Concept-based Explanations for Out-Of-Distribution Detectorscited by 16
- 2024AdaNeg: Adaptive Negative Proxy Guided OOD Detection with Vision-Language Modelscited by 16
- 2023How Reliable is Your Regression Model's Uncertainty Under Real-World Distribution Shifts?cited by 14
- 2023IPMix: Label-Preserving Data Augmentation Method for Training Robust Classifierscited by 14
- 2024GenMix: Effective Data Augmentation with Generative Diffusion Model Image Editingcited by 14
- 2025Handling Out-of-Distribution Data: A Surveycited by 14
- 2023OOD-CV-v2: An extended Benchmark for Robustness to Out-of-Distribution Shifts of Individual Nuisances in Natural Imagescited by 12
- 2023HybridAugment++: Unified Frequency Spectra Perturbations for Model Robustnesscited by 12
- 2024SUMix: Mixup with Semantic and Uncertain Informationcited by 12
- 2024ReMoDetect: Reward Models Recognize Aligned LLM's Generationscited by 11
- 2022When Neural Networks Fail to Generalize? A Model Sensitivity Perspectivecited by 10
- 2022Aries: Efficient Testing of Deep Neural Networks via Labeling-Free Accuracy Estimationcited by 9
- 2023R-Mixup: Riemannian Mixup for Biological Networkscited by 9
- 2024Energy-based Hopfield Boosting for Out-of-Distribution Detectioncited by 9
- 2025Context-guided Responsible Data Augmentation with Diffusion Modelscited by 9
- 2022CropMix: Sampling a Rich Input Distribution via Multi-Scale Croppingcited by 8
- 2022Human-in-the-Loop Mixupcited by 8
- 2023Calibrated Out-of-Distribution Detection with a Generic Representationcited by 8
- 2023Learning Better with Less: Effective Augmentation for Sample-Efficient Visual Reinforcement Learningcited by 8
- 2023A Re-Parameterized Vision Transformer (ReVT) for Domain-Generalized Semantic Segmentationcited by 8
- 2023Generalization Analogies: A Testbed for Generalizing AI Oversight to Hard-To-Measure Domainscited by 8
- 2024Accurate and Scalable Estimation of Epistemic Uncertainty for Graph Neural Networkscited by 8
- 2024A Unified Approach Towards Active Learning and Out-of-Distribution Detectioncited by 7
- 2025AdaSCALE: Adaptive Scaling for OOD Detectioncited by 7
- 2024Out-of-Distribution Data: An Acquaintance of Adversarial Examples -- A Surveycited by 6
- 2025Graph Synthetic Out-of-Distribution Exposure with Large Language Modelscited by 6
- 2022Deeper Insights into the Robustness of ViTs towards Common Corruptionscited by 5
- 2022Diffusion Denoising Process for Perceptron Bias in Out-of-distribution Detectioncited by 5
50 most cited of 131 All 131 (JSON)
- 2026TestifAI: Tomography-Based Testing for Deep Learning Systems19 Aug 2026
- 2026S2-FracMix: Label-Preserving Self-Saliency Mixup Augmentation24 Jun 2026
- 2026FlowDec: Temporal Conditional Flow Decorruptor for Robust Continuous Vision-Language Navigation21 Jun 2026
- 2026MM++: Post-Hoc Scale-Invariant Multilayer OOD Detection via Top-K Gated Feature Fusion15 Jun 2026
- 2026FDDet: Achieving Data-Efficient Food Defect Detection Under Real-World Scenarios23 May 2026
- 2026TINS: Test-time ID-prototype-separated Negative Semantics Learning for OOD Detection11 May 2026
- 2026MoireMix: A Formula-Based Data Augmentation for Improving Image Classification Robustness26 Mar 2026
- 2026On the Reliability of Cue Conflict and Beyond11 Mar 2026
- 2026Margin and Consistency Supervision for Calibrated and Robust Vision Models6 Mar 2026
- 2026Task-Relevant and Irrelevant Region-Aware Augmentation for Generalizable Vision-Based Imitation Learning in Agricultural Manipulation5 Mar 2026
- 2026From Misclassifications to Outliers: Joint Reliability Assessment in Classification4 Mar 2026
- 2026Mind the Way You Select Negative Texts: Pursuing the Distance Consistency in OOD Detection with VLMs3 Mar 2026
38 more
- 2026Vendi Novelty Scores for Out-of-Distribution Detection10 Feb 2026
- 2026AP-OOD: Attention Pooling for Out-of-Distribution Detection5 Feb 2026
- 2026Cognitive Fusion of ZC Sequences and Time-Frequency Images for Out-of-Distribution Detection of Drone Signals26 Jan 2026
- 2026One Model, Many Behaviors: Training-Induced Effects on Out-of-Distribution Detection15 Jan 2026
- 2025Stylized Synthetic Augmentation further improves Corruption Robustness17 Dec 2025
- 2025Out-of-Distribution Detection for Continual Learning: Design Principles and Benchmarking16 Dec 2025
- 2025SG-OIF: A Stability-Guided Online Influence Framework for Reliable Vision Data21 Nov 2025
- 2025Diffusion-Guided Mask-Consistent Paired Mixing for Endoscopic Image Segmentation5 Nov 2025
- 2025PQ-DAF: Pose-driven Quality-controlled Data Augmentation for Data-scarce Driver Distraction Detection14 Aug 2025
- 2025Handling Out-of-Distribution Data: A Survey25 Jul 2025
- 2025Enhancing Ambiguous Dynamic Facial Expression Recognition with Soft Label-based Data Augmentation25 Jun 2025
- 2025Robust Training with Data Augmentation for Medical Imaging Classification20 Jun 2025
- 2025One Period to Rule Them All: Identifying Critical Learning Periods in Deep Networks19 Jun 2025
- 2025Enclosing Prototypical Variational Autoencoder for Explainable Out-of-Distribution Detection17 Jun 2025
- 2025Improving Out-of-Distribution Detection via Dynamic Covariance Calibration11 Jun 2025
- 2025A Flat Minima Perspective on Understanding Augmentations and Model Robustness30 May 2025
- 2025Pseudo Multi-Source Domain Generalization: Bridging the Gap Between Single and Multi-Source Domain Generalization29 May 2025
- 2025Do We Need All the Synthetic Data? Targeted Image Augmentation via Diffusion Models27 May 2025
- 2025Are vision language models robust to uncertain inputs?17 May 2025
- 2025Graph Synthetic Out-of-Distribution Exposure with Large Language Models29 Apr 2025
- 2025Context-guided Responsible Data Augmentation with Diffusion Models12 Mar 2025
- 2025AdaSCALE: Adaptive Scaling for OOD Detection11 Mar 2025
- 2025Out-of-Distribution Detection using Synthetic Data Generation5 Feb 2025
- 2025MoireDB: Formula-generated Interference-fringe Image Dataset3 Feb 2025
- 2025Humanity's Last Exam24 Jan 2025
- 2025LayerMix: Enhanced Data Augmentation through Fractal Integration for Robust Deep Learning8 Jan 2025
- 2025DGSSA: Domain generalization with structural and stylistic augmentation for retinal vessel segmentation7 Jan 2025
- 2024GenMix: Effective Data Augmentation with Generative Diffusion Model Image Editing3 Dec 2024
- 2024TIDE: Training Locally Interpretable Domain Generalization Models Enables Test-time Correction25 Nov 2024
- 2024Layer Pruning with Consensus: A Triple-Win Solution21 Nov 2024
- 2024AdaNeg: Adaptive Negative Proxy Guided OOD Detection with Vision-Language Models26 Oct 2024
- 2024How Do Training Methods Influence the Utilization of Vision Models?18 Oct 2024
- 2024Robust Imitation Learning for Mobile Manipulator Focusing on Task-Related Viewpoints and Regions2 Oct 2024
- 2024LCM: Log Conformal Maps for Robust Representation Learning to Mitigate Perspective Distortion20 Sep 2024
- 2024NBBOX: Noisy Bounding Box Improves Remote Sensing Object Detection14 Sep 2024
- 2024A Survey on Mixup Augmentations and Beyond8 Sep 2024
- 2024Space-scale Exploration of the Poor Reliability of Deep Learning Models: the Case of the Remote Sensing of Rooftop Photovoltaic Systems31 Jul 2024
- 2024Safetywashing: Do AI Safety Benchmarks Actually Measure Safety Progress?31 Jul 2024
50 newest of 131 All 131 (JSON)
- 2024DiffuseMix: Label-Preserving Data Augmentation with Diffusion Modelscited by 78
- 2024GenMix: Effective Data Augmentation with Generative Diffusion Model Image Editingcited by 14
- 2025Context-guided Responsible Data Augmentation with Diffusion Modelscited by 9
- 2024Mind the Gap Between Synthetic and Real: Utilizing Transfer Learning to Probe the Boundaries of Stable Diffusion Generated Datacited by 5
- 2024Efficient Diffusion-Driven Corruption Editor for Test-Time Adaptationcited by 4
- 2025Do We Need All the Synthetic Data? Targeted Image Augmentation via Diffusion Modelscited by 2
- 2025Do We Need All the Synthetic Data? Targeted Image Augmentation via Diffusion Models27 May 2025
- 2025Context-guided Responsible Data Augmentation with Diffusion Models12 Mar 2025
- 2024GenMix: Effective Data Augmentation with Generative Diffusion Model Image Editing3 Dec 2024
- 2024Mind the Gap Between Synthetic and Real: Utilizing Transfer Learning to Probe the Boundaries of Stable Diffusion Generated Data6 May 2024
- 2024DiffuseMix: Label-Preserving Data Augmentation with Diffusion Models5 Apr 2024
- 2024Efficient Diffusion-Driven Corruption Editor for Test-Time Adaptation16 Mar 2024
- 2023Strong but simple: A Baseline for Domain Generalized Dense Perception by CLIP-based Transfer Learningcited by 20
- 2024AdaNeg: Adaptive Negative Proxy Guided OOD Detection with Vision-Language Modelscited by 16
- 2025Are vision language models robust to uncertain inputs?cited by 3
- 2025PQ-DAF: Pose-driven Quality-controlled Data Augmentation for Data-scarce Driver Distraction Detectioncited by 0
- 2026TINS: Test-time ID-prototype-separated Negative Semantics Learning for OOD Detectioncited by 0
- 2026TINS: Test-time ID-prototype-separated Negative Semantics Learning for OOD Detection11 May 2026
- 2025PQ-DAF: Pose-driven Quality-controlled Data Augmentation for Data-scarce Driver Distraction Detection14 Aug 2025
- 2025Are vision language models robust to uncertain inputs?17 May 2025
- 2024AdaNeg: Adaptive Negative Proxy Guided OOD Detection with Vision-Language Models26 Oct 2024
- 2023Strong but simple: A Baseline for Domain Generalized Dense Perception by CLIP-based Transfer Learning4 Dec 2023
- 2025Humanity's Last Examcited by 491
- 2022OpenOOD: Benchmarking Generalized Out-of-Distribution Detectioncited by 268
- 2023OpenOOD v1.5: Enhanced Benchmark for Out-of-Distribution Detectioncited by 179
- 2023Leaving Reality to Imagination: Robust Classification via Generated Datasetscited by 91
- 2022SVFormer: Semi-supervised Video Transformer for Action Recognitioncited by 68
- 2023On Pitfalls of Test-Time Adaptationcited by 64
- 2024Safetywashing: Do AI Safety Benchmarks Actually Measure Safety Progress?cited by 61
- 2022Eliciting and Learning with Soft Labels from Every Annotatorcited by 43
- 2024Video-Language Understanding: A Survey from Model Architecture, Model Training, and Data Perspectivescited by 37
- 2022A Survey of Mix-based Data Augmentation: Taxonomy, Methods, Applications, and Explainabilitycited by 31
- 2022Large-scale Robustness Analysis of Video Action Recognition Modelscited by 29
- 2022On the Strong Correlation Between Model Invariance and Generalizationcited by 23
12 most cited of 112 All 112 (JSON)
- 2026TestifAI: Tomography-Based Testing for Deep Learning Systems19 Aug 2026
- 2026S2-FracMix: Label-Preserving Self-Saliency Mixup Augmentation24 Jun 2026
- 2026FlowDec: Temporal Conditional Flow Decorruptor for Robust Continuous Vision-Language Navigation21 Jun 2026
- 2026MM++: Post-Hoc Scale-Invariant Multilayer OOD Detection via Top-K Gated Feature Fusion15 Jun 2026
- 2026FDDet: Achieving Data-Efficient Food Defect Detection Under Real-World Scenarios23 May 2026
- 2026MoireMix: A Formula-Based Data Augmentation for Improving Image Classification Robustness26 Mar 2026
- 2026On the Reliability of Cue Conflict and Beyond11 Mar 2026
- 2026Margin and Consistency Supervision for Calibrated and Robust Vision Models6 Mar 2026
- 2026From Misclassifications to Outliers: Joint Reliability Assessment in Classification4 Mar 2026
- 2026Mind the Way You Select Negative Texts: Pursuing the Distance Consistency in OOD Detection with VLMs3 Mar 2026
- 2026Vendi Novelty Scores for Out-of-Distribution Detection10 Feb 2026
- 2026AP-OOD: Attention Pooling for Out-of-Distribution Detection5 Feb 2026
12 newest of 112 All 112 (JSON)