NoisyMix: Boosting Model Robustness to Common Corruptions
Not on the map. Why?
Abstract (arXiv)
For many real-world applications, obtaining stable and robust statistical performance is more important than simply achieving state-of-the-art predictive test accuracy, and thus robustness of neural networks is an increasingly important topic. Relatedly, data augmentation schemes have been shown to improve robustness with respect to input perturbations and domain shifts. Motivated by this, we introduce NoisyMix, a novel training scheme that promotes stability as well as leverages noisy augmentations in input and feature space to improve both model robustness and in-domain accuracy. NoisyMix produces models that are consistently more robust and that provide well-calibrated estimates of class membership probabilities. We demonstrate the benefits of NoisyMix on a range of benchmark datasets, including ImageNet-C, ImageNet-R, and ImageNet-P. Moreover, we provide theory to understand implicit regularization and robustness of NoisyMix.
Key facts. Cited by 17 papers in the map (data through 7 Oct 2026). Builds on 45 of its 76 references that are in the map. First posted on arXiv 2 Feb 2022.
Builds on
45 of 76 references.
References · 45
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2015Distilling the Knowledge in a Neural Networkcited by 10,076
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2017mixup: Beyond Empirical Risk Minimizationcited by 5,155
- 2013Intriguing properties of neural networkscited by 5,114
- 2017On Calibration of Modern Neural Networkscited by 4,860
- 2016Wide Residual Networkscited by 3,057
- 2019CutMix: Regularization Strategy to Train Strong Classifiers with Localizable Featurescited by 2,875
- 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,857
- 2020Fourier Features Let Networks Learn High Frequency Functions in Low Dimensional Domainscited by 2,170
- 2016Identity Mappings in Deep Residual Networkscited by 1,960
33 more
- 2020The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalizationcited by 1,842
- 2017Improved Regularization of Convolutional Neural Networks with Cutoutcited by 1,623
- 2018ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustnesscited by 1,430
- 2019Self-training with Noisy Student improves ImageNet classificationcited by 1,304
- 2019Adversarial Examples Are Not Bugs, They Are Featurescited by 950
- 2019AugMix: A Simple Data Processing Method to Improve Robustness and Uncertaintycited by 897
- 2019Adversarial Training for Free!cited by 638
- 2020Overfitting in adversarially robust deep learningcited by 504
- 2020Measuring Robustness to Natural Distribution Shifts in Image Classificationcited by 452
- 2019Using Pre-Training Can Improve Model Robustness and Uncertaintycited by 373
- 2020Do Adversarially Robust ImageNet Models Transfer Better?cited by 315
- 2019A Fourier Perspective on Model Robustness in Computer Visioncited by 288
- 2020Puzzle Mix: Exploiting Saliency and Local Statistics for Optimal Mixupcited by 260
- 2018Adversarial Attacks and Defences: A Surveycited by 259
- 2021Fixing Data Augmentation to Improve Adversarial Robustnesscited by 201
- 2020How Does Mixup Help With Robustness and Generalization?cited by 193
- 2021On the Origin of Implicit Regularization in Stochastic Gradient Descentcited by 183
- 2021Revisiting ResNets: Improved Training and Scaling Strategiescited by 158
- 2016Improving the Robustness of Deep Neural Networks via Stability Trainingcited by 156
- 2013Stabilitycited by 119
- 2016Understanding How Image Quality Affects Deep Neural Networkscited by 118
- 2017Regularization for Deep Learning: A Taxonomycited by 91
- 2021AugMax: Adversarial Composition of Random Augmentations for Robust Trainingcited by 89
- 2021Generalized Jensen-Shannon Divergence Loss for Learning with Noisy Labelscited by 74
- 2019Adversarially robust transfer learningcited by 66
- 2021A Winning Hand: Compressing Deep Networks Can Improve Out-Of-Distribution Robustnesscited by 62
- 2020The Implicit Regularization of Stochastic Gradient Flow for Least Squarescited by 58
- 2016Noisy Activation Functionscited by 53
- 2019Interpolated Adversarial Training: Achieving Robust Neural Networks without Sacrificing Too Much Accuracycited by 49
- 2021Noisy Recurrent Neural Networkscited by 42
- 2020Explicit Regularisation in Gaussian Noise Injectionscited by 37
- 2019From GAN to WGANcited by 34
- 2021Noisy Feature Mixupcited by 27
Built on by
Citing papers per year: 2022: 2; 2023: 5; 2024: 4; 2025: 5; 2026: 1.
17 papers.
Sort:
- 2023Robustness of SAM: Segment Anything Under Corruptions and Beyondcited by 30
- 2023A Survey on the Robustness of Computer Vision Models against Common Corruptionscited by 20
- 2024Can Biases in ImageNet Models Explain Generalization?cited by 20
- 2023Classification robustness to common optical aberrationscited by 13
- 2023Tailoring Mixup to Data for Calibrationcited by 5
- 2022Dynamic Test-Time Augmentation via Differentiable Functionscited by 4
- 2024How Do Training Methods Influence the Utilization of Vision Models?cited by 3
- 2022Universum-inspired Supervised Contrastive Learningcited by 2
- 2024Assessing Visually-Continuous Corruption Robustness of Neural Networks Relative to Human Performancecited by 2
- 2025Examining the Impact of Optical Aberrations to Image Classification and Object Detection Modelscited by 2
- 2025Curvature Enhanced Data Augmentation for Regressioncited by 1
- 2025Improving Mixup Calibration with Wasserstein Distributionally Robust Optimizationcited by 1
5 more
- 2026One Model, Many Behaviors: Training-Induced Effects on Out-of-Distribution Detectioncited by 1
- 2023Don't Look into the Sun: Adversarial Solarization Attacks on Image Classifierscited by 0
- 2024Global Average Feature Augmentation for Robust Semantic Segmentation with Transformerscited by 0
- 2025Combined Image Data Augmentations diminish the benefits of Adaptive Label Smoothingcited by 0
- 2025Stylized Synthetic Augmentation further improves Corruption Robustnesscited by 0
- 2026One Model, Many Behaviors: Training-Induced Effects on Out-of-Distribution Detection15 Jan 2026
- 2025Stylized Synthetic Augmentation further improves Corruption Robustness17 Dec 2025
- 2025Combined Image Data Augmentations diminish the benefits of Adaptive Label Smoothing22 Jul 2025
- 2025Improving Mixup Calibration with Wasserstein Distributionally Robust Optimization22 Jun 2025
- 2025Curvature Enhanced Data Augmentation for Regression7 Jun 2025
- 2025Examining the Impact of Optical Aberrations to Image Classification and Object Detection Models25 Apr 2025
- 2024Global Average Feature Augmentation for Robust Semantic Segmentation with Transformers2 Dec 2024
- 2024How Do Training Methods Influence the Utilization of Vision Models?18 Oct 2024
- 2024Can Biases in ImageNet Models Explain Generalization?1 Apr 2024
- 2024Assessing Visually-Continuous Corruption Robustness of Neural Networks Relative to Human Performance29 Feb 2024
- 2023Tailoring Mixup to Data for Calibration2 Nov 2023
- 2023Classification robustness to common optical aberrations29 Aug 2023
5 more
- 2023Don't Look into the Sun: Adversarial Solarization Attacks on Image Classifiers24 Aug 2023
- 2023Robustness of SAM: Segment Anything Under Corruptions and Beyond13 Jun 2023
- 2023A Survey on the Robustness of Computer Vision Models against Common Corruptions10 May 2023
- 2022Dynamic Test-Time Augmentation via Differentiable Functions9 Dec 2022
- 2022Universum-inspired Supervised Contrastive Learning22 Apr 2022
- 2023Robustness of SAM: Segment Anything Under Corruptions and Beyondcited by 30
- 2023A Survey on the Robustness of Computer Vision Models against Common Corruptionscited by 20
- 2024Can Biases in ImageNet Models Explain Generalization?cited by 20
- 2023Classification robustness to common optical aberrationscited by 13
- 2023Tailoring Mixup to Data for Calibrationcited by 5
- 2022Dynamic Test-Time Augmentation via Differentiable Functionscited by 4
- 2024How Do Training Methods Influence the Utilization of Vision Models?cited by 3
- 2022Universum-inspired Supervised Contrastive Learningcited by 2
- 2024Assessing Visually-Continuous Corruption Robustness of Neural Networks Relative to Human Performancecited by 2
- 2025Examining the Impact of Optical Aberrations to Image Classification and Object Detection Modelscited by 2
- 2025Curvature Enhanced Data Augmentation for Regressioncited by 1
- 2025Improving Mixup Calibration with Wasserstein Distributionally Robust Optimizationcited by 1
12 most cited of 17 All 17 (JSON)
- 2026One Model, Many Behaviors: Training-Induced Effects on Out-of-Distribution Detection15 Jan 2026
- 2025Stylized Synthetic Augmentation further improves Corruption Robustness17 Dec 2025
- 2025Combined Image Data Augmentations diminish the benefits of Adaptive Label Smoothing22 Jul 2025
- 2025Improving Mixup Calibration with Wasserstein Distributionally Robust Optimization22 Jun 2025
- 2025Curvature Enhanced Data Augmentation for Regression7 Jun 2025
- 2025Examining the Impact of Optical Aberrations to Image Classification and Object Detection Models25 Apr 2025
- 2024Global Average Feature Augmentation for Robust Semantic Segmentation with Transformers2 Dec 2024
- 2024How Do Training Methods Influence the Utilization of Vision Models?18 Oct 2024
- 2024Can Biases in ImageNet Models Explain Generalization?1 Apr 2024
- 2024Assessing Visually-Continuous Corruption Robustness of Neural Networks Relative to Human Performance29 Feb 2024
- 2023Tailoring Mixup to Data for Calibration2 Nov 2023
- 2023Classification robustness to common optical aberrations29 Aug 2023
12 newest of 17 All 17 (JSON)