Joint rotational invariance and adversarial training of a dual-stream Transformer yields state of the art Brain-Score for Area V4
Not on the map. Why?
Abstract (arXiv)
Modern high-scoring models of vision in the brain score competition do not stem from Vision Transformers. However, in this paper, we provide evidence against the unexpected trend of Vision Transformers (ViT) being not perceptually aligned with human visual representations by showing how a dual-stream Transformer, a CrossViT~textita la Chen et al. (2021), under a joint rotationally-invariant and adversarial optimization procedure yields 2nd place in the aggregate Brain-Score 2022 competition(Schrimpf et al., 2020b) averaged across all visual categories, and at the time of the competition held 1st place for the highest explainable variance of area V4. In addition, our current Transformer-based model also achieves greater explainable variance for areas V4, IT and Behaviour than a biologically-inspired CNN (ResNet50) that integrates a frontal V1-like computation module (Dapello et al.,2020). To assess the contribution of the optimization scheme with respect to the CrossViT architecture, we perform several additional experiments on differently optimized CrossViT's regarding adversarial robustness, common corruption benchmarks, mid-ventral stimuli interpretation and feature inversion. Against our initial expectations, our family of results provides tentative support for an textit"All roads lead to Rome" argument enforced via a joint optimization rule even for non biologically-motivated models of vision such as Vision Transformers. Code is available at https://github.com/williamberrios/BrainScore-Transformers
Key facts. Cited by 7 papers in the map (data through 7 Oct 2026). Builds on 31 of its 72 references that are in the map. First posted on arXiv 8 Mar 2022.
Builds on
31 of 72 references.
References · 31
- 2017Attention Is All You Needcited by 59,932
- 2014Adam: A Method for Stochastic Optimizationcited by 36,960
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2013Intriguing properties of neural networkscited by 5,114
- 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,857
- 2020The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalizationcited by 1,842
- 2019Similarity of Neural Network Representations Revisitedcited by 1,695
- 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,510
- 2018ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustnesscited by 1,430
- 2019Natural Adversarial Examplescited by 1,401
19 more
- 2021CrossViT: Cross-Attention Multi-Scale Vision Transformer for Image Classificationcited by 806
- 2020Fast is better than free: Revisiting adversarial trainingcited by 723
- 2014Understanding Deep Image Representations by Inverting Themcited by 399
- 2020Are we done with ImageNet?cited by 329
- 2019Approximating CNNs with Bag-of-local-Features models works surprisingly well on ImageNetcited by 260
- 2021Understanding Robustness of Transformers for Image Classificationcited by 250
- 2021Partial success in closing the gap between human and machine visioncited by 185
- 2021Are Convolutional Neural Networks or Transformers more like human vision?cited by 109
- 2018Adversarial Examples that Fool both Computer Vision and Time-Limited Humanscited by 73
- 2021On the effectiveness of adversarial training against common corruptionscited by 71
- 2020Autonomous Driving with Deep Learning: A Survey of State-of-Art Technologiescited by 41
- 2020A Simple Fine-tuning Is All You Need: Towards Robust Deep Learning Via Adversarial Fine-tuningcited by 30
- 2017Eigen-Distortions of Hierarchical Representationscited by 25
- 2019Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?cited by 25
- 2018A rotation-equivariant convolutional neural network model of primary visual cortexcited by 15
- 2020Texture Interpolation for Probing Visual Perceptioncited by 15
- 2022Finding Biological Plausibility for Adversarially Robust Features via Metameric Taskscited by 11
- 2020Local Convolutions Cause an Implicit Bias towards High Frequency Adversarial Examplescited by 9
- 2019Assessment of Faster R-CNN in Man-Machine collaborative searchcited by 5
Built on by
Citing papers per year: 2022: 2; 2023: 4; 2024: 0; 2025: 0; 2026: 1.
7 papers.
- 2022Harmonizing the object recognition strategies of deep neural networks with humanscited by 59
- 2023Performance-optimized deep neural networks are evolving into worse models of inferotemporal visual cortexcited by 18
- 2023A Dual-Stream Neural Network Explains the Functional Segregation of Dorsal and Ventral Visual Pathways in Human Brainscited by 12
- 2023System identification of neural systems: If we got it right, would we know?cited by 9
- 2023V1T: large-scale mouse V1 response prediction using a Vision Transformercited by 5
- 2022Human Eyes Inspired Recurrent Neural Networks are More Robust Against Adversarial Noisescited by 4
- 2026Robusto-2: Benchmarking Humans & VLMs for Autonomous Driving in Lima & New York Citycited by 0
- 2026Robusto-2: Benchmarking Humans & VLMs for Autonomous Driving in Lima & New York City18 Jun 2026
- 2023A Dual-Stream Neural Network Explains the Functional Segregation of Dorsal and Ventral Visual Pathways in Human Brains20 Oct 2023
- 2023Performance-optimized deep neural networks are evolving into worse models of inferotemporal visual cortex6 Jun 2023
- 2023System identification of neural systems: If we got it right, would we know?13 Feb 2023
- 2023V1T: large-scale mouse V1 response prediction using a Vision Transformer6 Feb 2023
- 2022Harmonizing the object recognition strategies of deep neural networks with humans8 Nov 2022
- 2022Human Eyes Inspired Recurrent Neural Networks are More Robust Against Adversarial Noises15 Jun 2022