Plug-In Inversion: Model-Agnostic Inversion for Vision with Data Augmentations
Not on the map. Why?
Abstract (arXiv)
Existing techniques for model inversion typically rely on hard-to-tune regularizers, such as total variation or feature regularization, which must be individually calibrated for each network in order to produce adequate images. In this work, we introduce Plug-In Inversion, which relies on a simple set of augmentations and does not require excessive hyper-parameter tuning. Under our proposed augmentation-based scheme, the same set of augmentation hyper-parameters can be used for inverting a wide range of image classification models, regardless of input dimensions or the architecture. We illustrate the practicality of our approach by inverting Vision Transformers (ViTs) and Multi-Layer Perceptrons (MLPs) trained on the ImageNet dataset, tasks which to the best of our knowledge have not been successfully accomplished by any previous works.
Key facts. Cited by 18 papers in the map (data through 14 Oct 2026). Builds on 36 of its 49 references that are in the map. First posted on arXiv 31 Jan 2022.
Builds on
36 of 49 references.
References · 36
- 2017Attention Is All You Needcited by 60,361
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2014Adam: A Method for Stochastic Optimizationcited by 37,240
- 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,305
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,364
- 2021Swin Transformer: Hierarchical Vision Transformer using Shifted Windowscited by 12,139
- 2015Batch Normalization: Accelerating Deep Network Training by Reducing Internal Covariate Shiftcited by 7,005
- 2016Densely Connected Convolutional Networkscited by 6,720
- 2018MobileNetV2: Inverted Residuals and Linear Bottleneckscited by 4,795
- 2020Training data-efficient image transformers & distillation through attentioncited by 4,586
- 2014Going Deeper with Convolutionscited by 4,241
- 2016Wide Residual Networkscited by 3,070
24 more
- 2016Improved Techniques for Training GANscited by 2,970
- 2016Aggregated Residual Transformations for Deep Neural Networkscited by 2,546
- 2013Deep Inside Convolutional Networks: Visualising Image Classification Models and Saliency Mapscited by 2,371
- 2013Visualizing and Understanding Convolutional Networkscited by 2,290
- 2020Improved Baselines with Momentum Contrastive Learningcited by 2,287
- 2019Searching for MobileNetV3cited by 1,994
- 2021MLP-Mixer: An all-MLP Architecture for Visioncited by 1,446
- 2018ShuffleNet V2: Practical Guidelines for Efficient CNN Architecture Designcited by 1,136
- 2016SqueezeNet: AlexNet-level accuracy with 50x fewer parameters and <0.5MB model sizecited by 1,060
- 2018MnasNet: Platform-Aware Neural Architecture Search for Mobilecited by 943
- 2018Robustness May Be at Odds with Accuracycited by 880
- 2019Adversarial Training for Free!cited by 643
- 2021Twins: Revisiting the Design of Spatial Attention in Vision Transformerscited by 565
- 2021ConViT: Improving Vision Transformers with Soft Convolutional Inductive Biasescited by 484
- 2019Dreaming to Distill: Data-free Knowledge Transfer via DeepInversioncited by 423
- 2014Understanding Deep Image Representations by Inverting Themcited by 403
- 2021Pay Attention to MLPscited by 368
- 2021Rethinking Spatial Dimensions of Vision Transformerscited by 361
- 2021ResMLP: Feedforward networks for image classification with data-efficient trainingcited by 339
- 2021Co-Scale Conv-Attentional Image Transformerscited by 224
- 2015Inverting Visual Representations with Convolutional Networkscited by 170
- 2021Sleeper Agent: Scalable Hidden Trigger Backdoors for Neural Networks Trained from Scratchcited by 102
- 2019Are Perceptually-Aligned Gradients a General Property of Robust Classifiers?cited by 43
- 2019Robust or Private? Adversarial Training Makes Models More Vulnerable to Privacy Attackscited by 11
Built on by
Citing papers per year: 2022: 2; 2023: 4; 2024: 7; 2025: 5.
18 papers.
Sort:
By area:
- 2022Diffusion Art or Digital Forgery? Investigating Data Replication in Diffusion Modelscited by 424
- 2022What do Vision Transformers Learn? A Visual Explorationcited by 76
- 2025Universal Sparse Autoencoders: Interpretable Cross-Model Concept Alignmentcited by 62
- 2023Unlocking Feature Visualization for Deeper Networks with MAgnitude Constrained Optimizationcited by 27
- 2023Deconstructing Data Reconstruction: Multiclass, Weight Decay and General Lossescited by 26
- 2024What do we learn from inverting CLIP models?cited by 13
- 2024Model Inversion Attacks: A Survey of Approaches and Countermeasurescited by 11
- 2024U Can't Gen This? A Survey of Intellectual Property Protection Methods for Data in Generative AIcited by 7
- 2024Feature Accentuation: Revealing 'What' Features Respond to in Natural Imagescited by 5
- 2025VITAL: More Understandable Feature Visualization through Distribution Alignment and Relevant Information Flowcited by 3
- 2023Leaping Into Memories: Space-Time Deep Feature Synthesiscited by 2
- 2024LazyDP: Co-Designing Algorithm-Software for Scalable Training of Differentially Private Recommendation Modelscited by 1
6 more
- 2025MIMIC: Multimodal Inversion for Model Interpretation and Conceptualizationcited by 1
- 2023NeuroInspect: Interpretable Neuron-based Debugging Framework through Class-conditional Visualizationscited by 0
- 2024On mitigating stability-plasticity dilemma in CLIP-guided image morphing via geodesic distillation losscited by 0
- 2024DataFreeShield: Defending Adversarial Attacks without Training Datacited by 0
- 2025When Model Knowledge meets Diffusion Model: Diffusion-assisted Data-free Image Synthesis with Alignment of Domain and Classcited by 0
- 2025TRANSPORTER: Transferring Visual Semantics from VLM Manifoldscited by 0
- 2025TRANSPORTER: Transferring Visual Semantics from VLM Manifolds23 Nov 2025
- 2025MIMIC: Multimodal Inversion for Model Interpretation and Conceptualization11 Aug 2025
- 2025When Model Knowledge meets Diffusion Model: Diffusion-assisted Data-free Image Synthesis with Alignment of Domain and Class18 Jun 2025
- 2025VITAL: More Understandable Feature Visualization through Distribution Alignment and Relevant Information Flow28 Mar 2025
- 2025Universal Sparse Autoencoders: Interpretable Cross-Model Concept Alignment6 Feb 2025
- 2024Model Inversion Attacks: A Survey of Approaches and Countermeasures15 Nov 2024
- 2024DataFreeShield: Defending Adversarial Attacks without Training Data21 Jun 2024
- 2024U Can't Gen This? A Survey of Intellectual Property Protection Methods for Data in Generative AI22 Apr 2024
- 2024LazyDP: Co-Designing Algorithm-Software for Scalable Training of Differentially Private Recommendation Models12 Apr 2024
- 2024What do we learn from inverting CLIP models?5 Mar 2024
- 2024Feature Accentuation: Revealing 'What' Features Respond to in Natural Images15 Feb 2024
- 2024On mitigating stability-plasticity dilemma in CLIP-guided image morphing via geodesic distillation loss19 Jan 2024
6 more
- 2023NeuroInspect: Interpretable Neuron-based Debugging Framework through Class-conditional Visualizations11 Oct 2023
- 2023Deconstructing Data Reconstruction: Multiclass, Weight Decay and General Losses4 Jul 2023
- 2023Unlocking Feature Visualization for Deeper Networks with MAgnitude Constrained Optimization11 Jun 2023
- 2023Leaping Into Memories: Space-Time Deep Feature Synthesis17 Mar 2023
- 2022What do Vision Transformers Learn? A Visual Exploration13 Dec 2022
- 2022Diffusion Art or Digital Forgery? Investigating Data Replication in Diffusion Models7 Dec 2022
- 2022What do Vision Transformers Learn? A Visual Explorationcited by 76
- 2023Unlocking Feature Visualization for Deeper Networks with MAgnitude Constrained Optimizationcited by 27
- 2023Deconstructing Data Reconstruction: Multiclass, Weight Decay and General Lossescited by 26
- 2024What do we learn from inverting CLIP models?cited by 13
- 2024Model Inversion Attacks: A Survey of Approaches and Countermeasurescited by 11
- 2024U Can't Gen This? A Survey of Intellectual Property Protection Methods for Data in Generative AIcited by 7
- 2024Feature Accentuation: Revealing 'What' Features Respond to in Natural Imagescited by 5
- 2025VITAL: More Understandable Feature Visualization through Distribution Alignment and Relevant Information Flowcited by 3
- 2023Leaping Into Memories: Space-Time Deep Feature Synthesiscited by 2
- 2024LazyDP: Co-Designing Algorithm-Software for Scalable Training of Differentially Private Recommendation Modelscited by 1
- 2023NeuroInspect: Interpretable Neuron-based Debugging Framework through Class-conditional Visualizationscited by 0
- 2024On mitigating stability-plasticity dilemma in CLIP-guided image morphing via geodesic distillation losscited by 0
12 most cited of 14 All 14 (JSON)
- 2025TRANSPORTER: Transferring Visual Semantics from VLM Manifolds23 Nov 2025
- 2025VITAL: More Understandable Feature Visualization through Distribution Alignment and Relevant Information Flow28 Mar 2025
- 2024Model Inversion Attacks: A Survey of Approaches and Countermeasures15 Nov 2024
- 2024DataFreeShield: Defending Adversarial Attacks without Training Data21 Jun 2024
- 2024U Can't Gen This? A Survey of Intellectual Property Protection Methods for Data in Generative AI22 Apr 2024
- 2024LazyDP: Co-Designing Algorithm-Software for Scalable Training of Differentially Private Recommendation Models12 Apr 2024
- 2024What do we learn from inverting CLIP models?5 Mar 2024
- 2024Feature Accentuation: Revealing 'What' Features Respond to in Natural Images15 Feb 2024
- 2024On mitigating stability-plasticity dilemma in CLIP-guided image morphing via geodesic distillation loss19 Jan 2024
- 2023NeuroInspect: Interpretable Neuron-based Debugging Framework through Class-conditional Visualizations11 Oct 2023
- 2023Deconstructing Data Reconstruction: Multiclass, Weight Decay and General Losses4 Jul 2023
- 2023Unlocking Feature Visualization for Deeper Networks with MAgnitude Constrained Optimization11 Jun 2023
12 newest of 14 All 14 (JSON)