PRIME: A few primitives can boost robustness to common corruptions
Not on the map. Why?
Abstract (arXiv)
Despite their impressive performance on image classification tasks, deep networks have a hard time generalizing to unforeseen corruptions of their data. To fix this vulnerability, prior works have built complex data augmentation strategies, combining multiple methods to enrich the training data. However, introducing intricate design choices or heuristics makes it hard to understand which elements of these methods are indeed crucial for improving robustness. In this work, we take a step back and follow a principled approach to achieve robustness to common corruptions. We propose PRIME, a general data augmentation scheme that relies on simple yet rich families of max-entropy image transformations. PRIME outperforms the prior art in terms of corruption robustness, while its simplicity and plug-and-play nature enable combination with other methods to further boost their robustness. We analyze PRIME to shed light on the importance of the mixing strategy on synthesizing corrupted images, and to reveal the robustness-accuracy trade-offs arising in the context of common corruptions. Finally, we show that the computational efficiency of our method allows it to be easily used in both on-line and off-line data augmentation schemes.
Key facts. Cited by 40 papers in the map (data through 14 Oct 2026). Builds on 39 of its 55 references that are in the map. First posted on arXiv 27 Dec 2021.
Builds on
39 of 55 references.
References · 39
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
- 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,305
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,177
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2017mixup: Beyond Empirical Risk Minimizationcited by 5,183
- 2019CutMix: Regularization Strategy to Train Strong Classifiers with Localizable Featurescited by 2,884
- 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,877
- 2020The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalizationcited by 1,850
- 2017Improved Regularization of Convolutional Neural Networks with Cutoutcited by 1,628
- 2019Do ImageNet Classifiers Generalize to ImageNet?cited by 1,515
- 2018ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustnesscited by 1,432
27 more
- 2019Natural Adversarial Examplescited by 1,408
- 2020Big Self-Supervised Models are Strong Semi-Supervised Learnerscited by 1,380
- 2018Robustness May Be at Odds with Accuracycited by 880
- 2020RobustBench: a standardized adversarial robustness benchmarkcited by 661
- 2020Measuring Robustness to Natural Distribution Shifts in Image Classificationcited by 454
- 2020Improving robustness against common corruptions by covariate shift adaptationcited by 431
- 2017Information-theoretic analysis of generalization capability of learning algorithmscited by 303
- 2021Understanding Robustness of Transformers for Image Classificationcited by 249
- 2018Generalisation in humans and deep neural networkscited by 237
- 2017Super-Convergence: Very Fast Training of Neural Networks Using Large Learning Ratescited by 199
- 2020Understanding and Mitigating the Tradeoff Between Robustness and Accuracycited by 149
- 2016Understanding How Image Quality Affects Deep Neural Networkscited by 119
- 2019Improving Robustness Without Sacrificing Accuracy with Patch Gaussian Augmentationcited by 105
- 2021On Interaction Between Augmentations and Corruptions in Natural Corruption Robustnesscited by 97
- 2021AugMax: Adversarial Composition of Random Augmentations for Robust Trainingcited by 90
- 2015Analysis of classifiers' robustness to adversarial perturbationscited by 76
- 2021On the effectiveness of adversarial training against common corruptionscited by 71
- 2021Amplitude-Phase Recombination: Rethinking Robustness of Convolutional Neural Networks in Frequency Domaincited by 71
- 2021Improved OOD Generalization via Adversarial Training and Pre-trainingcited by 66
- 2021A Winning Hand: Compressing Deep Networks Can Improve Out-Of-Distribution Robustnesscited by 62
- 2020Revisiting Batch Normalization for Improving Corruption Robustnesscited by 55
- 2021Improving robustness against common corruptions with frequency biased modelscited by 34
- 2021Defending Against Image Corruptions Through Adversarial Augmentationscited by 28
- 2021Certified Adversarial Defenses Meet Out-of-Distribution Corruptions: Benchmarking Robustness and Simple Baselinescited by 17
- 2021Exploring Corruption Robustness: Inductive Biases in Vision Transformers and MLP-Mixerscited by 13
- 2021Relative stability toward diffeomorphisms indicates performance in deep netscited by 12
- 2021Sample Efficient Detection and Classification of Adversarial Attacks via Self-Supervised Embeddingscited by 11
Built on by
Citing papers per year: 2022: 8; 2023: 11; 2024: 12; 2025: 4; 2026: 5.
40 papers.
Sort:
- 2023A Primer on Bayesian Neural Networks: Review and Debatescited by 27
- 2023A Survey on the Robustness of Computer Vision Models against Common Corruptionscited by 21
- 2023Object-Aware Domain Generalization for Object Detectioncited by 21
- 2022Does Robustness on ImageNet Transfer to Downstream Tasks?cited by 20
- 2024Can Biases in ImageNet Models Explain Generalization?cited by 20
- 2024Fourier-basis Functions to Bridge Augmentation Gap: Rethinking Frequency Augmentation in Image Classificationcited by 18
- 2023IPMix: Label-Preserving Data Augmentation Method for Training Robust Classifierscited by 14
- 2024RoDLA: Benchmarking the Robustness of Document Layout Analysis Modelscited by 13
- 2023HybridAugment++: Unified Frequency Spectra Perturbations for Model Robustnesscited by 12
- 2024Dynamic Sparse Training versus Dense Training: The Unexpected Winner in Image Corruption Robustnesscited by 11
- 2024PhysAug: A Physical-guided and Frequency-based Data Augmentation for Single-Domain Generalized Object Detectioncited by 11
- 2023Benchmark Generation Framework with Customizable Distortions for Image Classifier Robustnesscited by 7
28 more
- 2023RobustCLEVR: A Benchmark and Framework for Evaluating Robustness in Object-centric Learningcited by 6
- 2022Deeper Insights into the Robustness of ViTs towards Common Corruptionscited by 5
- 2023Domain Generalization with Vital Phase Augmentationcited by 5
- 2022Internal Representations of Vision Models Through the Lens of Frames on Data Manifoldscited by 3
- 2024How Do Training Methods Influence the Utilization of Vision Models?cited by 3
- 2022Robust Universal Adversarial Perturbationscited by 2
- 2022Assessing Neural Network Robustness via Adversarial Pivotal Tuningcited by 2
- 2023Singular Value Penalization and Semantic Data Augmentation for Fully Test-Time Adaptationcited by 2
- 2024A Modular System for Enhanced Robustness of Multimedia Understanding Networks via Deep Parametric Estimationcited by 2
- 2024PushPull-Net: Inhibition-driven ResNet robust to image corruptionscited by 2
- 2025DGSSA: Domain generalization with structural and stylistic augmentation for retinal vessel segmentationcited by 2
- 2025Data-Agnostic Augmentations for Unknown Variations: Out-of-Distribution Generalisation in MRI Segmentationcited by 2
- 2022Data augmentation with mixtures of max-entropy transformations for filling-level classificationcited by 1
- 2022Robustness and invariance properties of image classifierscited by 1
- 2023Frequency-Based Vulnerability Analysis of Deep Learning Models against Image Corruptionscited by 1
- 2023A Comprehensive Assessment Benchmark for Rigorously Evaluating Deep Learning Image Classifierscited by 1
- 2024Label Augmentation for Neural Networks Robustnesscited by 1
- 2026One Model, Many Behaviors: Training-Induced Effects on Out-of-Distribution Detectioncited by 1
- 2026On the Reliability of Cue Conflict and Beyondcited by 1
- 2022FACM: Intermediate Layer Still Retain Effective Features against Adversarial Examplescited by 0
- 2024Discerning the Chaos: Detecting Adversarial Perturbations while Disentangling Intentional from Unintentional Noisescited by 0
- 2024Pixel-Based Similarities as an Alternative to Neural Data for Improving Convolutional Neural Network Adversarial Robustnesscited by 0
- 2024Growing Efficient Accurate and Robust Neural Networks on the Edgecited by 0
- 2025EasyRobust: A Comprehensive and Easy-to-use Toolkit for Robust and Generalized Visioncited by 0
- 2025DART: A Server-side Plug-in for Resource-efficient Robust Federated Learningcited by 0
- 2026Incorruptible Neural Networks: Training Models that can Generalize to Large Internal Perturbationscited by 0
- 2026Robustness Emerges Early in Training Dynamics, but Is Not Preservedcited by 0
- 2026Suppress and Diversify: Refining Robust Pathways for Corruption Robustnesscited by 0
- 2026Suppress and Diversify: Refining Robust Pathways for Corruption Robustness7 Aug 2026
- 2026Robustness Emerges Early in Training Dynamics, but Is Not Preserved5 Aug 2026
- 2026On the Reliability of Cue Conflict and Beyond11 Mar 2026
- 2026Incorruptible Neural Networks: Training Models that can Generalize to Large Internal Perturbations7 Feb 2026
- 2026One Model, Many Behaviors: Training-Induced Effects on Out-of-Distribution Detection15 Jan 2026
- 2025DART: A Server-side Plug-in for Resource-efficient Robust Federated Learning24 Aug 2025
- 2025Data-Agnostic Augmentations for Unknown Variations: Out-of-Distribution Generalisation in MRI Segmentation15 May 2025
- 2025EasyRobust: A Comprehensive and Easy-to-use Toolkit for Robust and Generalized Vision21 Mar 2025
- 2025DGSSA: Domain generalization with structural and stylistic augmentation for retinal vessel segmentation7 Jan 2025
- 2024PhysAug: A Physical-guided and Frequency-based Data Augmentation for Single-Domain Generalized Object Detection16 Dec 2024
- 2024How Do Training Methods Influence the Utilization of Vision Models?18 Oct 2024
- 2024Growing Efficient Accurate and Robust Neural Networks on the Edge10 Oct 2024
28 more
- 2024Pixel-Based Similarities as an Alternative to Neural Data for Improving Convolutional Neural Network Adversarial Robustness4 Oct 2024
- 2024Dynamic Sparse Training versus Dense Training: The Unexpected Winner in Image Corruption Robustness3 Oct 2024
- 2024Discerning the Chaos: Detecting Adversarial Perturbations while Disentangling Intentional from Unintentional Noises29 Sep 2024
- 2024PushPull-Net: Inhibition-driven ResNet robust to image corruptions7 Aug 2024
- 2024Label Augmentation for Neural Networks Robustness4 Aug 2024
- 2024Can Biases in ImageNet Models Explain Generalization?1 Apr 2024
- 2024RoDLA: Benchmarking the Robustness of Document Layout Analysis Models21 Mar 2024
- 2024Fourier-basis Functions to Bridge Augmentation Gap: Rethinking Frequency Augmentation in Image Classification4 Mar 2024
- 2024A Modular System for Enhanced Robustness of Multimedia Understanding Networks via Deep Parametric Estimation28 Feb 2024
- 2023Domain Generalization with Vital Phase Augmentation27 Dec 2023
- 2023Object-Aware Domain Generalization for Object Detection19 Dec 2023
- 2023Singular Value Penalization and Semantic Data Augmentation for Fully Test-Time Adaptation10 Dec 2023
- 2023Benchmark Generation Framework with Customizable Distortions for Image Classifier Robustness28 Oct 2023
- 2023IPMix: Label-Preserving Data Augmentation Method for Training Robust Classifiers7 Oct 2023
- 2023A Primer on Bayesian Neural Networks: Review and Debates28 Sep 2023
- 2023RobustCLEVR: A Benchmark and Framework for Evaluating Robustness in Object-centric Learning28 Aug 2023
- 2023A Comprehensive Assessment Benchmark for Rigorously Evaluating Deep Learning Image Classifiers8 Aug 2023
- 2023HybridAugment++: Unified Frequency Spectra Perturbations for Model Robustness21 Jul 2023
- 2023Frequency-Based Vulnerability Analysis of Deep Learning Models against Image Corruptions12 Jun 2023
- 2023A Survey on the Robustness of Computer Vision Models against Common Corruptions10 May 2023
- 2022Internal Representations of Vision Models Through the Lens of Frames on Data Manifolds19 Nov 2022
- 2022Assessing Neural Network Robustness via Adversarial Pivotal Tuning17 Nov 2022
- 2022Robustness and invariance properties of image classifiers30 Aug 2022
- 2022Robust Universal Adversarial Perturbations22 Jun 2022
- 2022FACM: Intermediate Layer Still Retain Effective Features against Adversarial Examples2 Jun 2022
- 2022Deeper Insights into the Robustness of ViTs towards Common Corruptions26 Apr 2022
- 2022Does Robustness on ImageNet Transfer to Downstream Tasks?8 Apr 2022
- 2022Data augmentation with mixtures of max-entropy transformations for filling-level classification8 Mar 2022
- 2023A Primer on Bayesian Neural Networks: Review and Debatescited by 27
- 2023A Survey on the Robustness of Computer Vision Models against Common Corruptionscited by 21
- 2023Object-Aware Domain Generalization for Object Detectioncited by 21
- 2022Does Robustness on ImageNet Transfer to Downstream Tasks?cited by 20
- 2024Can Biases in ImageNet Models Explain Generalization?cited by 20
- 2024Fourier-basis Functions to Bridge Augmentation Gap: Rethinking Frequency Augmentation in Image Classificationcited by 18
- 2023IPMix: Label-Preserving Data Augmentation Method for Training Robust Classifierscited by 14
- 2024RoDLA: Benchmarking the Robustness of Document Layout Analysis Modelscited by 13
- 2023HybridAugment++: Unified Frequency Spectra Perturbations for Model Robustnesscited by 12
- 2024Dynamic Sparse Training versus Dense Training: The Unexpected Winner in Image Corruption Robustnesscited by 11
- 2024PhysAug: A Physical-guided and Frequency-based Data Augmentation for Single-Domain Generalized Object Detectioncited by 11
- 2023Benchmark Generation Framework with Customizable Distortions for Image Classifier Robustnesscited by 7
12 most cited of 40 All 40 (JSON)
- 2026Suppress and Diversify: Refining Robust Pathways for Corruption Robustness7 Aug 2026
- 2026Robustness Emerges Early in Training Dynamics, but Is Not Preserved5 Aug 2026
- 2026On the Reliability of Cue Conflict and Beyond11 Mar 2026
- 2026Incorruptible Neural Networks: Training Models that can Generalize to Large Internal Perturbations7 Feb 2026
- 2026One Model, Many Behaviors: Training-Induced Effects on Out-of-Distribution Detection15 Jan 2026
- 2025DART: A Server-side Plug-in for Resource-efficient Robust Federated Learning24 Aug 2025
- 2025Data-Agnostic Augmentations for Unknown Variations: Out-of-Distribution Generalisation in MRI Segmentation15 May 2025
- 2025EasyRobust: A Comprehensive and Easy-to-use Toolkit for Robust and Generalized Vision21 Mar 2025
- 2025DGSSA: Domain generalization with structural and stylistic augmentation for retinal vessel segmentation7 Jan 2025
- 2024PhysAug: A Physical-guided and Frequency-based Data Augmentation for Single-Domain Generalized Object Detection16 Dec 2024
- 2024How Do Training Methods Influence the Utilization of Vision Models?18 Oct 2024
- 2024Growing Efficient Accurate and Robust Neural Networks on the Edge10 Oct 2024
12 newest of 40 All 40 (JSON)