Feature-level augmentation to improve robustness of deep neural networks to affine transformations
Not on the map. Why?
Abstract (arXiv)
Recent studies revealed that convolutional neural networks do not generalize well to small image transformations, e.g. rotations by a few degrees or translations of a few pixels. To improve the robustness to such transformations, we propose to introduce data augmentation at intermediate layers of the neural architecture, in addition to the common data augmentation applied on the input images. By introducing small perturbations to activation maps (features) at various levels, we develop the capacity of the neural network to cope with such transformations. We conduct experiments on three image classification benchmarks (Tiny ImageNet, Caltech-256 and Food-101), considering two different convolutional architectures (ResNet-18 and DenseNet-121). When compared with two state-of-the-art stabilization methods, the empirical results show that our approach consistently attains the best trade-off between accuracy and mean flip rate.
Key facts. Cited by 4 papers in the map (data through 7 Oct 2026). Builds on 17 of its 21 references that are in the map. First posted on arXiv 10 Feb 2022.
Builds on
17 of 21 references.
References · 17
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2014Adam: A Method for Stochastic Optimizationcited by 36,960
- 2014ImageNet Large Scale Visual Recognition Challengecited by 8,441
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2016Densely Connected Convolutional Networkscited by 6,691
- 2013Intriguing properties of neural networkscited by 5,114
- 2022A ConvNet for the 2020scited by 3,545
- 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,857
- 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,315
- 2021Transformers in Vision: A Surveycited by 1,009
- 2021CvT: Introducing Convolutions to Vision Transformerscited by 946
- 2016Practical Black-Box Attacks against Machine Learningcited by 893
5 more
- 2019Making Convolutional Networks Shift-Invariant Againcited by 390
- 2019Benchmarking Robustness in Object Detection: Autonomous Driving when Winter is Comingcited by 332
- 2018Why do deep convolutional networks generalize so poorly to small image transformations?cited by 198
- 2016Improving the Robustness of Deep Neural Networks via Stability Trainingcited by 156
- 2020Truly shift-invariant convolutional neural networkscited by 53
Built on by
Citing papers per year: 2022: 1; 2023: 0; 2024: 0; 2025: 2; 2026: 1.
4 papers.
- 2022Self-Supervised Masked Convolutional Transformer Block for Anomaly Detectioncited by 34
- 2025GeMix: Conditional GAN-Based Mixup for Improved Medical Image Augmentationcited by 0
- 2025IGAff: Benchmarking Adversarial Iterative and Genetic Affine Algorithms on Deep Neural Networkscited by 0
- 2026Synesthesia via Direct Latent Augmentation:Bypassing the Decode-Encode Loop for Cross-Modal Distillationcited by 0
- 2026Synesthesia via Direct Latent Augmentation:Bypassing the Decode-Encode Loop for Cross-Modal Distillation6 Jun 2026
- 2025IGAff: Benchmarking Adversarial Iterative and Genetic Affine Algorithms on Deep Neural Networks8 Sep 2025
- 2025GeMix: Conditional GAN-Based Mixup for Improved Medical Image Augmentation21 Jul 2025
- 2022Self-Supervised Masked Convolutional Transformer Block for Anomaly Detection25 Sep 2022