mlsanityData to 7 Oct 2026

Towards Robust 2D Convolution for Reliable Visual Recognition

arXiv 2203.09790 ↗First posted 18 Mar 2022cs.CVcited by 0

Not on the map. Why?

Abstract (arXiv)

2D convolution (Conv2d), which is responsible for extracting features from the input image, is one of the key modules of a convolutional neural network (CNN). However, Conv2d is vulnerable to image corruptions and adversarial samples. It is an important yet rarely investigated problem that whether we can design a more robust alternative of Conv2d for more reliable feature extraction. In this paper, inspired by the recently developed learnable sparse transform that learns to convert the CNN features into a compact and sparse latent space, we design a novel building block, denoted by RConv-MK, to strengthen the robustness of extracted convolutional features. Our method leverages a set of learnable kernels of different sizes to extract features at different frequencies and employs a normalized soft thresholding operator to adaptively remove noises and trivial features at different corruption levels. Extensive experiments on clean images, corrupted images as well as adversarial samples validate the effectiveness of the proposed robust module for reliable visual recognition. The source codes are enclosed in the submission.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 41 of its 53 references that are in the map. First posted on arXiv 18 Mar 2022.

Builds on

41 of 53 references.

References · 41

  1. 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,160
  2. 2014Microsoft COCO: Common Objects in Contextcited by 17,498
  3. 2015Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networkscited by 9,617
  4. 2014Explaining and Harnessing Adversarial Examplescited by 7,287
  5. 2017Mask R-CNNcited by 7,259
  6. 2015Batch Normalization: Accelerating Deep Network Training by Reducing Internal Covariate Shiftcited by 6,979
  7. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
  8. 2016Layer Normalizationcited by 5,579
  9. 2013Intriguing properties of neural networkscited by 5,114
  10. 2017Squeeze-and-Excitation Networkscited by 4,763
  11. 2017MobileNets: Efficient Convolutional Neural Networks for Mobile Vision Applicationscited by 3,827
  12. 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
29 more
  1. 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,857
  2. 2018CBAM: Convolutional Block Attention Modulecited by 2,463
  3. 2016Identity Mappings in Deep Residual Networkscited by 1,960
  4. 2019FCOS: Fully Convolutional One-Stage Object Detectioncited by 1,573
  5. 2018Group Normalizationcited by 1,514
  6. 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,510
  7. 2016Beyond a Gaussian Denoiser: Residual Learning of Deep CNN for Image Denoisingcited by 1,352
  8. 2018Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examplescited by 1,259
  9. 2016Instance Normalization: The Missing Ingredient for Fast Stylizationcited by 1,187
  10. 2020Fast is better than free: Revisiting adversarial trainingcited by 723
  11. 2017ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Modelscited by 656
  12. 2013Network In Networkcited by 600
  13. 2018Black-box Adversarial Attacks with Limited Queries and Informationcited by 499
  14. 2019On Evaluating Adversarial Robustnesscited by 442
  15. 2019Cascade R-CNN: High Quality Object Detection and Instance Segmentationcited by 428
  16. 2019High Frequency Component Helps Explain the Generalization of Convolutional Neural Networkscited by 310
  17. 2018Adversarial Risk and the Dangers of Evaluating Against Weak Attackscited by 221
  18. 2020Learning in the Frequency Domaincited by 196
  19. 2015MXNet: A Flexible and Efficient Machine Learning Library for Heterogeneous Distributed Systemscited by 195
  20. 2017EAD: Elastic-Net Attacks to Deep Neural Networks via Adversarial Examplescited by 154
  21. 2019Defense Against Adversarial Attacks Using Feature Scattering-based Adversarial Trainingcited by 95
  22. 2018Low Frequency Adversarial Perturbationcited by 80
  23. 2020Adversarial Distributional Training for Robust Deep Learningcited by 79
  24. 2019advertorch v0.1: An Adversarial Robustness Toolbox based on PyTorchcited by 69
  25. 2019Improving Adversarial Robustness via Guided Complement Entropycited by 15
  26. 2019Scale-wise Convolution for Image Restorationcited by 14
  27. 2018Fully Convolutional Network with Multi-Step Reinforcement Learning for Image Processingcited by 11
  28. 2018Distortion Robust Image Classification using Deep Convolutional Neural Network with Discrete Cosine Transformcited by 10
  29. 2020Diversity can be Transferred: Output Diversification for White- and Black-box Attackscited by 4

Built on by

Not cited yet.