mlsanityData to 7 Oct 2026

Joint rotational invariance and adversarial training of a dual-stream Transformer yields state of the art Brain-Score for Area V4

arXiv 2203.06649 ↗First posted 8 Mar 2022q-bio.NC cs.AI cs.CVcited by 7

Not on the map. Why?

Abstract (arXiv)

Modern high-scoring models of vision in the brain score competition do not stem from Vision Transformers. However, in this paper, we provide evidence against the unexpected trend of Vision Transformers (ViT) being not perceptually aligned with human visual representations by showing how a dual-stream Transformer, a CrossViT~textita la Chen et al. (2021), under a joint rotationally-invariant and adversarial optimization procedure yields 2nd place in the aggregate Brain-Score 2022 competition(Schrimpf et al., 2020b) averaged across all visual categories, and at the time of the competition held 1st place for the highest explainable variance of area V4. In addition, our current Transformer-based model also achieves greater explainable variance for areas V4, IT and Behaviour than a biologically-inspired CNN (ResNet50) that integrates a frontal V1-like computation module (Dapello et al.,2020). To assess the contribution of the optimization scheme with respect to the CrossViT architecture, we perform several additional experiments on differently optimized CrossViT's regarding adversarial robustness, common corruption benchmarks, mid-ventral stimuli interpretation and feature inversion. Against our initial expectations, our family of results provides tentative support for an textit"All roads lead to Rome" argument enforced via a joint optimization rule even for non biologically-motivated models of vision such as Vision Transformers. Code is available at https://github.com/williamberrios/BrainScore-Transformers

Key facts. Cited by 7 papers in the map (data through 7 Oct 2026). Builds on 31 of its 72 references that are in the map. First posted on arXiv 8 Mar 2022.

Builds on

31 of 72 references.

References · 31

  1. 2017Attention Is All You Needcited by 59,932
  2. 2014Adam: A Method for Stochastic Optimizationcited by 36,960
  3. 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
  4. 2014Explaining and Harnessing Adversarial Examplescited by 7,287
  5. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
  6. 2013Intriguing properties of neural networkscited by 5,114
  7. 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,857
  8. 2020The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalizationcited by 1,842
  9. 2019Similarity of Neural Network Representations Revisitedcited by 1,695
  10. 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,510
  11. 2018ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustnesscited by 1,430
  12. 2019Natural Adversarial Examplescited by 1,401
19 more
  1. 2021CrossViT: Cross-Attention Multi-Scale Vision Transformer for Image Classificationcited by 806
  2. 2020Fast is better than free: Revisiting adversarial trainingcited by 723
  3. 2014Understanding Deep Image Representations by Inverting Themcited by 399
  4. 2020Are we done with ImageNet?cited by 329
  5. 2019Approximating CNNs with Bag-of-local-Features models works surprisingly well on ImageNetcited by 260
  6. 2021Understanding Robustness of Transformers for Image Classificationcited by 250
  7. 2021Partial success in closing the gap between human and machine visioncited by 185
  8. 2021Are Convolutional Neural Networks or Transformers more like human vision?cited by 109
  9. 2018Adversarial Examples that Fool both Computer Vision and Time-Limited Humanscited by 73
  10. 2021On the effectiveness of adversarial training against common corruptionscited by 71
  11. 2020Autonomous Driving with Deep Learning: A Survey of State-of-Art Technologiescited by 41
  12. 2020A Simple Fine-tuning Is All You Need: Towards Robust Deep Learning Via Adversarial Fine-tuningcited by 30
  13. 2017Eigen-Distortions of Hierarchical Representationscited by 25
  14. 2019Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?cited by 25
  15. 2018A rotation-equivariant convolutional neural network model of primary visual cortexcited by 15
  16. 2020Texture Interpolation for Probing Visual Perceptioncited by 15
  17. 2022Finding Biological Plausibility for Adversarially Robust Features via Metameric Taskscited by 11
  18. 2020Local Convolutions Cause an Implicit Bias towards High Frequency Adversarial Examplescited by 9
  19. 2019Assessment of Faster R-CNN in Man-Machine collaborative searchcited by 5

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2022: 2; 2023: 4; 2024: 0; 2025: 0; 2026: 1.

7 papers.