Understanding The Robustness in Vision Transformers
Not on the map. Why?
Abstract (arXiv)
Recent studies show that Vision Transformers(ViTs) exhibit strong robustness against various corruptions. Although this property is partly attributed to the self-attention mechanism, there is still a lack of systematic understanding. In this paper, we examine the role of self-attention in learning robust representations. Our study is motivated by the intriguing properties of the emerging visual grouping in Vision Transformers, which indicates that self-attention may promote robustness through improved mid-level representations. We further propose a family of fully attentional networks (FANs) that strengthen this capability by incorporating an attentional channel processing design. We validate the design comprehensively on various hierarchical backbones. Our model achieves a state-of-the-art 87.1% accuracy and 35.8% mCE on ImageNet-1k and ImageNet-C with 76.8M parameters. We also demonstrate state-of-the-art accuracy and robustness in two downstream tasks: semantic segmentation and object detection. Code is available at: https://github.com/NVlabs/FAN.
Key facts. Cited by 144 papers in the map (data through 7 Oct 2026). Builds on 46 of its 61 references that are in the map. First posted on arXiv 26 Apr 2022.
Builds on
46 of 61 references.
References · 46
- 2017Attention Is All You Needcited by 59,932
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
- 2021Swin Transformer: Hierarchical Vision Transformer using Shifted Windowscited by 12,082
- 2015Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networkscited by 9,617
- 2020End-to-End Object Detection with Transformerscited by 7,384
- 2021Masked Autoencoders Are Scalable Vision Learnerscited by 7,339
- 2017Mask R-CNNcited by 7,259
- 2021Emerging Properties in Self-Supervised Vision Transformerscited by 6,893
- 2019EfficientNet: Rethinking Model Scaling for Convolutional Neural Networkscited by 6,415
- 2014Fully Convolutional Networks for Semantic Segmentationcited by 4,845
- 2018MobileNetV2: Inverted Residuals and Linear Bottleneckscited by 4,773
34 more
- 2017Squeeze-and-Excitation Networkscited by 4,763
- 2020Training data-efficient image transformers & distillation through attentioncited by 4,560
- 2022A ConvNet for the 2020scited by 3,545
- 2020Deformable DETR: Deformable Transformers for End-to-End Object Detectioncited by 3,410
- 2018Encoder-Decoder with Atrous Separable Convolution for Semantic Image Segmentationcited by 3,210
- 2021SegFormer: Simple and Efficient Design for Semantic Segmentation with Transformerscited by 2,923
- 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,857
- 2016Pyramid Scene Parsing Networkcited by 2,472
- 2021Pyramid Vision Transformer: A Versatile Backbone for Dense Prediction without Convolutionscited by 1,960
- 2019Natural Adversarial Examplescited by 1,401
- 2019MMDetection: Open MMLab Detection Toolbox and Benchmarkcited by 1,379
- 2020Rethinking Semantic Segmentation from a Sequence-to-Sequence Perspective with Transformerscited by 1,368
- 2015Multi-Scale Context Aggregation by Dilated Convolutionscited by 1,128
- 2021Tokens-to-Token ViT: Training Vision Transformers from Scratch on ImageNetcited by 1,096
- 2016Adversarial Machine Learning at Scalecited by 934
- 2015Deep Learning and the Information Bottleneck Principlecited by 793
- 2021Going deeper with Image Transformerscited by 759
- 2021Do Vision Transformers See Like Convolutional Neural Networks?cited by 671
- 2021Intriguing Properties of Vision Transformerscited by 446
- 2020End-to-End Video Instance Segmentation with Transformerscited by 443
- 2018Bag of Tricks for Image Classification with Convolutional Neural Networkscited by 430
- 2021Rethinking Spatial Dimensions of Vision Transformerscited by 361
- 2021XCiT: Cross-Covariance Image Transformerscited by 335
- 2017ICNet for Real-Time Semantic Segmentation on High-Resolution Imagescited by 261
- 2021Vision Transformers are Robust Learnerscited by 208
- 2021Are Transformers More Robust Than CNNs?cited by 187
- 2016Wider or Deeper: Revisiting the ResNet Model for Visual Recognitioncited by 184
- 2021Towards Robust Vision Transformercited by 137
- 2019Benchmarking the Robustness of Semantic Segmentation Modelscited by 111
- 2020End-to-End Object Detection with Adaptive Clustering Transformercited by 109
- 2021On the Adversarial Robustness of Vision Transformerscited by 104
- 2021Long-Short Transformer: Efficient Transformers for Language and Visioncited by 102
- 2021Refiner: Refining Self-attention for Vision Transformerscited by 38
- 2021Sparse MLP for Image Recognition: Is Self-Attention Really Necessary?cited by 38
Built on by
Citing papers per year: 2022: 26; 2023: 43; 2024: 35; 2025: 23; 2026: 17.
144 papers.
Sort:
By area:
- 2023PixArt-α: Fast Training of Diffusion Transformer for Photorealistic Text-to-Image Synthesiscited by 854
- 2022MagicVideo: Efficient Video Generation With Latent Diffusion Modelscited by 463
- 2022Scaling & Shifting Your Features: A New Baseline for Efficient Model Tuningcited by 292
- 2022MetaFormer Baselines for Visioncited by 131
- 2023Dual Aggregation Transformer for Image Super-Resolutioncited by 124
- 2022Diffusion Probabilistic Model Made Slimcited by 121
- 2023Delivering Arbitrary-Modal Semantic Segmentationcited by 115
- 2022Sharpness-Aware Training for Freecited by 95
- 2023RMT: Retentive Networks Meet Vision Transformerscited by 68
- 2022Next-ViT: Next Generation Vision Transformer for Efficient Deployment in Realistic Industrial Scenarioscited by 65
- 2022Delving into Masked Autoencoders for Multi-Label Thorax Disease Classificationcited by 65
- 2023How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defensescited by 65
38 more
- 2023TransNeXt: Robust Foveal Visual Perception for Vision Transformerscited by 61
- 2022MogaNet: Multi-order Gated Aggregation Networkcited by 59
- 2022Towards Robust Referring Image Segmentationcited by 49
- 2023Scale-Aware Modulation Meet Transformercited by 49
- 2023Dataset Quantizationcited by 47
- 2022Behind Every Domain There is a Shift: Adapting Distortion-aware Vision Transformers for Panoramic Semantic Segmentationcited by 46
- 2022Teaching Matters: Investigating the Role of Supervision in Vision Transformerscited by 45
- 2023Gradient-based Parameter Selection for Efficient Fine-Tuningcited by 40
- 2024DRCT: Saving Image Super-resolution away from Information Bottleneckcited by 40
- 2023Channel Vision Transformers: An Image Is Worth 1 x 16 x 16 Wordscited by 33
- 2022Imaging through the Atmosphere using Turbulence Mitigation Transformercited by 31
- 2023HGFormer: Hierarchical Grouping Transformer for Domain Generalized Semantic Segmentationcited by 31
- 2024AutoGluon-Multimodal (AutoMM): Supercharging Multimodal AutoML with Foundation Modelscited by 29
- 2023Lightweight Vision Transformer with Bidirectional Interactioncited by 25
- 2023Large Separable Kernel Attention: Rethinking the Large Kernel Attention Design in CNNcited by 25
- 2022Exploring the Relationship between Architecture and Adversarially Robust Generalizationcited by 23
- 2024Understanding Video Transformers via Universal Concept Discoverycited by 22
- 2023A Survey on the Robustness of Computer Vision Models against Common Corruptionscited by 20
- 2023Boost Vision Transformer with GPU-Friendly Sparsity and Quantizationcited by 20
- 2022WaveMix: A Resource-efficient Neural Network for Image Analysiscited by 19
- 2023Robustifying Token Attention for Vision Transformerscited by 19
- 2023Top-Down Visual Attention from Analysis by Synthesiscited by 19
- 2022Discrete Key-Value Bottleneckcited by 18
- 2023Adaptive Sharpness-Aware Pruning for Robust Sparse Networkscited by 17
- 2023Reliability in Semantic Segmentation: Are We on the Right Track?cited by 16
- 2023Self-attention in Vision Transformers Performs Perceptual Grouping, Not Attentioncited by 15
- 2024Navigating the Maze of Explainable AI: A Systematic Approach to Evaluating Methods and Metricscited by 15
- 2023Vision Transformers Are Good Mask Auto-Labelerscited by 14
- 2024Investigating Out-of-Distribution Generalization of GNNs: An Architecture Perspectivecited by 13
- 2022Comparing the Decision-Making Mechanisms by Transformers and CNNs via Explanation Methodscited by 12
- 2023Low-Resolution Self-Attention for Semantic Segmentationcited by 12
- 2023Improving Interpretation Faithfulness for Vision Transformerscited by 12
- 2024RoDLA: Benchmarking the Robustness of Document Layout Analysis Modelscited by 12
- 2024Benchmarking the Robustness of Temporal Action Detection Models Against Temporal Corruptionscited by 12
- 2026VLM-RobustBench: A Comprehensive Benchmark for Robustness of Vision-Language Modelscited by 12
- 2022Designing Robust Transformers using Robust Kernel Density Estimationcited by 11
- 2023Improving Adversarial Transferability via Model Alignmentcited by 10
- 2024PIDformer: Transformer Meets Control Theorycited by 10
50 most cited of 144 All 144 (JSON)
- 2026Domain generalization and synthetic data in object detection: the enabler, the probe, and the gap2 Sep 2026
- 2026The Impact of CutMix on Reliability and Robustness in Semantic Segmentation19 Aug 2026
- 2026What Does Attention Transfer Transfer? Attention Structure and Robustness in Vision Transformers19 Aug 2026
- 2026WarpI2I: Image Warping for Image-to-Image Translation30 Jun 2026
- 2026Robust Onion: Peeling Open Vocab Object Detectors Under Noise25 Jun 2026
- 2026Semi-Supervised Vision-Language-Action Model19 Jun 2026
- 2026Frozen Foundation-Model Embeddings Discard Small-Lesion Signal in Chest Radiography: Implications for Pre-Deployment Evaluation10 Jun 2026
- 2026Differences in Detection: Explainability Where it Matters5 Jun 2026
- 2026Distributionally Robust Set Representation Learning Under Inference-Time Element Corruption28 May 2026
- 2026Activation-Free Backbones for Image Recognition: Polynomial Alternatives within MetaFormer-Style Vision Models20 May 2026
- 2026StableVLA: Towards Robust Vision-Language-Action Models without Extra Data18 May 2026
- 2026QUEST: A robust attention formulation using query-modulated spherical attention31 Mar 2026
38 more
- 2026Finding Distributed Object-Centric Properties in Self-Supervised Transformers27 Mar 2026
- 2026VLM-RobustBench: A Comprehensive Benchmark for Robustness of Vision-Language Models6 Mar 2026
- 2026In Transformer We Trust? A Perspective on Transformer Architecture Failure Modes15 Feb 2026
- 2026Trapped by simplicity: When Transformers fail to learn from noisy features9 Feb 2026
- 2026Trust in One Round: Confidence Estimation for Large Language Models via Structural Signals1 Feb 2026
- 2025UAGLNet: Uncertainty-Aggregated Global-Local Fusion Network with Cooperative CNN-Transformer for Building Extraction15 Dec 2025
- 2025Transformers as Intrinsic Optimizers: Forward Inference through the Energy Principle2 Nov 2025
- 2025Modeling Expert Interactions in Sparse Mixture of Experts via Graph Structures18 Oct 2025
- 2025POEM: Explore Unexplored Reliable Samples to Enhance Test-Time Adaptation26 Sep 2025
- 2025An Investigation of Visual Foundation Models Robustness22 Aug 2025
- 2025Fine-grained Multi-class Nuclei Segmentation with Molecular-empowered All-in-SAM Model21 Aug 2025
- 2025Calibration Attention: Learning Reliability-Aware Representations for Vision Transformers12 Aug 2025
- 2025Pay Attention to Attention Distribution: A New Local Lipschitz Bound for Transformers10 Jul 2025
- 2025FastDINOv2: Frequency Based Curriculum Learning Improves Robustness and Training Speed4 Jul 2025
- 2025Enhancing Self-Supervised Visual Representation Learning via Low-Rank Adapted LLMs1 Jul 2025
- 2025When Small Guides Large: Cross-Model Co-Learning for Test-Time Adaptation30 Jun 2025
- 2025Revisiting Transformers with Insights from Image Filtering and Boosting12 Jun 2025
- 2025Canonical Latent Representations in Conditional Diffusion Models11 Jun 2025
- 2025Rethinking Semi-supervised Segmentation Beyond Accuracy: Reliability and Robustness6 Jun 2025
- 2025One Rank at a Time: Cascading Error Dynamics in Sequential Learning28 May 2025
- 2025Learning Informative Attention Weights for Person Re-Identification13 May 2025
- 2025ChA-MAEViT: Unifying Channel-Aware Masked Autoencoders and Multi-Channel Vision Transformers for Improved Cross-Channel Learning25 Mar 2025
- 2025COARSE: Collaborative Pseudo-Labeling with Coarse Real Labels for Off-Road Semantic Segmentation5 Mar 2025
- 2025NodeNAS: Node-Specific Graph Neural Architecture Search for Out-of-Distribution Generalization4 Mar 2025
- 2025Transformer Meets Twicing: Harnessing Unattended Residual Information2 Mar 2025
- 2025VPNeXt -- Rethinking Dense Decoding for Plain Vision Transformer23 Feb 2025
- 2025Tight Clusters Make Specialized Experts21 Feb 2025
- 2025Boosting Adversarial Transferability with Spatial Adversarial Alignment2 Jan 2025
- 2024PVP: Polar Representation Boost for 3D Semantic Occupancy Prediction10 Dec 2024
- 2024MCBLT: Multi-Camera Multi-Object 3D Tracking in Long Videos1 Dec 2024
- 2024Spatially Visual Perception for End-to-End Robotic Learning26 Nov 2024
- 2024ULTra: Unveiling Latent Token Interpretability in Transformer-Based Understanding and Segmentation15 Nov 2024
- 2024Rethinking Decoders for Transformer-based Semantic Segmentation: A Compression Perspective5 Nov 2024
- 2024Implicit to Explicit Entropy Regularization: Benchmarking ViT Fine-tuning under Noisy Labels5 Oct 2024
- 2024SATA: Spatial Autocorrelation Token Analysis for Enhancing the Robustness of Vision Transformers30 Sep 2024
- 2024Navigating the Maze of Explainable AI: A Systematic Approach to Evaluating Methods and Metrics25 Sep 2024
- 2024UDA-Bench: Revisiting Common Assumptions in Unsupervised Domain Adaptation Using a Standardized Framework23 Sep 2024
- 2024ViTGuard: Attention-aware Detection against Adversarial Examples for Vision Transformer20 Sep 2024
50 newest of 144 All 144 (JSON)
- 2023PixArt-α: Fast Training of Diffusion Transformer for Photorealistic Text-to-Image Synthesiscited by 854
- 2022MagicVideo: Efficient Video Generation With Latent Diffusion Modelscited by 463
- 2022Diffusion Probabilistic Model Made Slimcited by 121
- 2025Canonical Latent Representations in Conditional Diffusion Modelscited by 0
- 2026WarpI2I: Image Warping for Image-to-Image Translationcited by 0
- 2026WarpI2I: Image Warping for Image-to-Image Translation30 Jun 2026
- 2025Canonical Latent Representations in Conditional Diffusion Models11 Jun 2025
- 2023PixArt-α: Fast Training of Diffusion Transformer for Photorealistic Text-to-Image Synthesis30 Sep 2023
- 2022Diffusion Probabilistic Model Made Slim27 Nov 2022
- 2022MagicVideo: Efficient Video Generation With Latent Diffusion Models20 Nov 2022
- 2025Modeling Expert Interactions in Sparse Mixture of Experts via Graph Structures18 Oct 2025
- 2025Tight Clusters Make Specialized Experts21 Feb 2025
- 2026Semi-Supervised Vision-Language-Action Model19 Jun 2026
- 2026StableVLA: Towards Robust Vision-Language-Action Models without Extra Data18 May 2026
- 2023Improving Adversarial Transferability via Model Alignmentcited by 10
- 2023Improving Adversarial Transferability via Model Alignment30 Nov 2023
- 2024Efficient Visual Transformer by Learnable Token Mergingcited by 7
- 2024Efficient Visual Transformer by Learnable Token Merging21 Jul 2024
- 2024Spatially Visual Perception for End-to-End Robotic Learning26 Nov 2024
- 2022Scaling & Shifting Your Features: A New Baseline for Efficient Model Tuningcited by 292
- 2022MetaFormer Baselines for Visioncited by 131
- 2023Dual Aggregation Transformer for Image Super-Resolutioncited by 124
- 2023Delivering Arbitrary-Modal Semantic Segmentationcited by 115
- 2022Sharpness-Aware Training for Freecited by 95
- 2023RMT: Retentive Networks Meet Vision Transformerscited by 68
- 2022Next-ViT: Next Generation Vision Transformer for Efficient Deployment in Realistic Industrial Scenarioscited by 65
- 2022Delving into Masked Autoencoders for Multi-Label Thorax Disease Classificationcited by 65
- 2023How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defensescited by 65
- 2023TransNeXt: Robust Foveal Visual Perception for Vision Transformerscited by 61
- 2022MogaNet: Multi-order Gated Aggregation Networkcited by 59
- 2022Towards Robust Referring Image Segmentationcited by 49
12 most cited of 128 All 128 (JSON)
- 2026Domain generalization and synthetic data in object detection: the enabler, the probe, and the gap2 Sep 2026
- 2026The Impact of CutMix on Reliability and Robustness in Semantic Segmentation19 Aug 2026
- 2026What Does Attention Transfer Transfer? Attention Structure and Robustness in Vision Transformers19 Aug 2026
- 2026Robust Onion: Peeling Open Vocab Object Detectors Under Noise25 Jun 2026
- 2026Frozen Foundation-Model Embeddings Discard Small-Lesion Signal in Chest Radiography: Implications for Pre-Deployment Evaluation10 Jun 2026
- 2026Differences in Detection: Explainability Where it Matters5 Jun 2026
- 2026Distributionally Robust Set Representation Learning Under Inference-Time Element Corruption28 May 2026
- 2026Activation-Free Backbones for Image Recognition: Polynomial Alternatives within MetaFormer-Style Vision Models20 May 2026
- 2026QUEST: A robust attention formulation using query-modulated spherical attention31 Mar 2026
- 2026Finding Distributed Object-Centric Properties in Self-Supervised Transformers27 Mar 2026
- 2026In Transformer We Trust? A Perspective on Transformer Architecture Failure Modes15 Feb 2026
- 2026Trapped by simplicity: When Transformers fail to learn from noisy features9 Feb 2026
12 newest of 128 All 128 (JSON)