mlsanityData to 14 Oct 2026

PRIME: A few primitives can boost robustness to common corruptions

arXiv 2112.13547 ↗First posted 27 Dec 2021cs.CV cs.LGcited by 40

Not on the map. Why?

Abstract (arXiv)

Despite their impressive performance on image classification tasks, deep networks have a hard time generalizing to unforeseen corruptions of their data. To fix this vulnerability, prior works have built complex data augmentation strategies, combining multiple methods to enrich the training data. However, introducing intricate design choices or heuristics makes it hard to understand which elements of these methods are indeed crucial for improving robustness. In this work, we take a step back and follow a principled approach to achieve robustness to common corruptions. We propose PRIME, a general data augmentation scheme that relies on simple yet rich families of max-entropy image transformations. PRIME outperforms the prior art in terms of corruption robustness, while its simplicity and plug-and-play nature enable combination with other methods to further boost their robustness. We analyze PRIME to shed light on the importance of the mixing strategy on synthesizing corrupted images, and to reveal the robustness-accuracy trade-offs arising in the context of common corruptions. Finally, we show that the computational efficiency of our method allows it to be easily used in both on-line and off-line data augmentation schemes.

Key facts. Cited by 40 papers in the map (data through 14 Oct 2026). Builds on 39 of its 55 references that are in the map. First posted on arXiv 27 Dec 2021.

Builds on

39 of 55 references.

References · 39

  1. 2015Deep Residual Learning for Image Recognitioncited by 52,096
  2. 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
  3. 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,305
  4. 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,177
  5. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
  6. 2017mixup: Beyond Empirical Risk Minimizationcited by 5,183
  7. 2019CutMix: Regularization Strategy to Train Strong Classifiers with Localizable Featurescited by 2,884
  8. 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,877
  9. 2020The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalizationcited by 1,850
  10. 2017Improved Regularization of Convolutional Neural Networks with Cutoutcited by 1,628
  11. 2019Do ImageNet Classifiers Generalize to ImageNet?cited by 1,515
  12. 2018ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustnesscited by 1,432
27 more
  1. 2019Natural Adversarial Examplescited by 1,408
  2. 2020Big Self-Supervised Models are Strong Semi-Supervised Learnerscited by 1,380
  3. 2018Robustness May Be at Odds with Accuracycited by 880
  4. 2020RobustBench: a standardized adversarial robustness benchmarkcited by 661
  5. 2020Measuring Robustness to Natural Distribution Shifts in Image Classificationcited by 454
  6. 2020Improving robustness against common corruptions by covariate shift adaptationcited by 431
  7. 2017Information-theoretic analysis of generalization capability of learning algorithmscited by 303
  8. 2021Understanding Robustness of Transformers for Image Classificationcited by 249
  9. 2018Generalisation in humans and deep neural networkscited by 237
  10. 2017Super-Convergence: Very Fast Training of Neural Networks Using Large Learning Ratescited by 199
  11. 2020Understanding and Mitigating the Tradeoff Between Robustness and Accuracycited by 149
  12. 2016Understanding How Image Quality Affects Deep Neural Networkscited by 119
  13. 2019Improving Robustness Without Sacrificing Accuracy with Patch Gaussian Augmentationcited by 105
  14. 2021On Interaction Between Augmentations and Corruptions in Natural Corruption Robustnesscited by 97
  15. 2021AugMax: Adversarial Composition of Random Augmentations for Robust Trainingcited by 90
  16. 2015Analysis of classifiers' robustness to adversarial perturbationscited by 76
  17. 2021On the effectiveness of adversarial training against common corruptionscited by 71
  18. 2021Amplitude-Phase Recombination: Rethinking Robustness of Convolutional Neural Networks in Frequency Domaincited by 71
  19. 2021Improved OOD Generalization via Adversarial Training and Pre-trainingcited by 66
  20. 2021A Winning Hand: Compressing Deep Networks Can Improve Out-Of-Distribution Robustnesscited by 62
  21. 2020Revisiting Batch Normalization for Improving Corruption Robustnesscited by 55
  22. 2021Improving robustness against common corruptions with frequency biased modelscited by 34
  23. 2021Defending Against Image Corruptions Through Adversarial Augmentationscited by 28
  24. 2021Certified Adversarial Defenses Meet Out-of-Distribution Corruptions: Benchmarking Robustness and Simple Baselinescited by 17
  25. 2021Exploring Corruption Robustness: Inductive Biases in Vision Transformers and MLP-Mixerscited by 13
  26. 2021Relative stability toward diffeomorphisms indicates performance in deep netscited by 12
  27. 2021Sample Efficient Detection and Classification of Adversarial Attacks via Self-Supervised Embeddingscited by 11

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2022: 8; 2023: 11; 2024: 12; 2025: 4; 2026: 5.

40 papers.

Sort:

  1. 2023A Primer on Bayesian Neural Networks: Review and Debatescited by 27
  2. 2023A Survey on the Robustness of Computer Vision Models against Common Corruptionscited by 21
  3. 2023Object-Aware Domain Generalization for Object Detectioncited by 21
  4. 2022Does Robustness on ImageNet Transfer to Downstream Tasks?cited by 20
  5. 2024Can Biases in ImageNet Models Explain Generalization?cited by 20
  6. 2024Fourier-basis Functions to Bridge Augmentation Gap: Rethinking Frequency Augmentation in Image Classificationcited by 18
  7. 2023IPMix: Label-Preserving Data Augmentation Method for Training Robust Classifierscited by 14
  8. 2024RoDLA: Benchmarking the Robustness of Document Layout Analysis Modelscited by 13
  9. 2023HybridAugment++: Unified Frequency Spectra Perturbations for Model Robustnesscited by 12
  10. 2024Dynamic Sparse Training versus Dense Training: The Unexpected Winner in Image Corruption Robustnesscited by 11
  11. 2024PhysAug: A Physical-guided and Frequency-based Data Augmentation for Single-Domain Generalized Object Detectioncited by 11
  12. 2023Benchmark Generation Framework with Customizable Distortions for Image Classifier Robustnesscited by 7
28 more
  1. 2023RobustCLEVR: A Benchmark and Framework for Evaluating Robustness in Object-centric Learningcited by 6
  2. 2022Deeper Insights into the Robustness of ViTs towards Common Corruptionscited by 5
  3. 2023Domain Generalization with Vital Phase Augmentationcited by 5
  4. 2022Internal Representations of Vision Models Through the Lens of Frames on Data Manifoldscited by 3
  5. 2024How Do Training Methods Influence the Utilization of Vision Models?cited by 3
  6. 2022Robust Universal Adversarial Perturbationscited by 2
  7. 2022Assessing Neural Network Robustness via Adversarial Pivotal Tuningcited by 2
  8. 2023Singular Value Penalization and Semantic Data Augmentation for Fully Test-Time Adaptationcited by 2
  9. 2024A Modular System for Enhanced Robustness of Multimedia Understanding Networks via Deep Parametric Estimationcited by 2
  10. 2024PushPull-Net: Inhibition-driven ResNet robust to image corruptionscited by 2
  11. 2025DGSSA: Domain generalization with structural and stylistic augmentation for retinal vessel segmentationcited by 2
  12. 2025Data-Agnostic Augmentations for Unknown Variations: Out-of-Distribution Generalisation in MRI Segmentationcited by 2
  13. 2022Data augmentation with mixtures of max-entropy transformations for filling-level classificationcited by 1
  14. 2022Robustness and invariance properties of image classifierscited by 1
  15. 2023Frequency-Based Vulnerability Analysis of Deep Learning Models against Image Corruptionscited by 1
  16. 2023A Comprehensive Assessment Benchmark for Rigorously Evaluating Deep Learning Image Classifierscited by 1
  17. 2024Label Augmentation for Neural Networks Robustnesscited by 1
  18. 2026One Model, Many Behaviors: Training-Induced Effects on Out-of-Distribution Detectioncited by 1
  19. 2026On the Reliability of Cue Conflict and Beyondcited by 1
  20. 2022FACM: Intermediate Layer Still Retain Effective Features against Adversarial Examplescited by 0
  21. 2024Discerning the Chaos: Detecting Adversarial Perturbations while Disentangling Intentional from Unintentional Noisescited by 0
  22. 2024Pixel-Based Similarities as an Alternative to Neural Data for Improving Convolutional Neural Network Adversarial Robustnesscited by 0
  23. 2024Growing Efficient Accurate and Robust Neural Networks on the Edgecited by 0
  24. 2025EasyRobust: A Comprehensive and Easy-to-use Toolkit for Robust and Generalized Visioncited by 0
  25. 2025DART: A Server-side Plug-in for Resource-efficient Robust Federated Learningcited by 0
  26. 2026Incorruptible Neural Networks: Training Models that can Generalize to Large Internal Perturbationscited by 0
  27. 2026Robustness Emerges Early in Training Dynamics, but Is Not Preservedcited by 0
  28. 2026Suppress and Diversify: Refining Robust Pathways for Corruption Robustnesscited by 0