mlsanityData to 7 Oct 2026

Counterbalancing Teacher: Regularizing Batch Normalized Models for Robustness

arXiv 2207.01548 ↗First posted 4 Jul 2022cs.LG cs.CVcited by 0

Not on the map. Why?

Abstract (arXiv)

Batch normalization (BN) is a ubiquitous technique for training deep neural networks that accelerates their convergence to reach higher accuracy. However, we demonstrate that BN comes with a fundamental drawback: it incentivizes the model to rely on low-variance features that are highly specific to the training (in-domain) data, hurting generalization performance on out-of-domain examples. In this work, we investigate this phenomenon by first showing that removing BN layers across a wide range of architectures leads to lower out-of-domain and corruption errors at the cost of higher in-domain errors. We then propose Counterbalancing Teacher (CT), a method which leverages a frozen copy of the same model without BN as a teacher to enforce the student network's learning of robust representations by substantially adapting its weights through a consistency loss function. This regularization signal helps CT perform well in unforeseen data shifts, even without information from the target domain as in prior works. We theoretically show in an overparameterized linear regression setting why normalization leads to a model's reliance on such in-domain features, and empirically demonstrate the efficacy of CT by outperforming several baselines on robustness benchmarks such as CIFAR-10-C, CIFAR-100-C, and VLCS.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 47 of its 64 references that are in the map. First posted on arXiv 4 Jul 2022.

Builds on

47 of 64 references.

References · 47

  1. 2014Adam: A Method for Stochastic Optimizationcited by 36,960
  2. 2020A Simple Framework for Contrastive Learning of Visual Representationscited by 11,979
  3. 2015Distilling the Knowledge in a Neural Networkcited by 10,076
  4. 2015Batch Normalization: Accelerating Deep Network Training by Reducing Internal Covariate Shiftcited by 6,979
  5. 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,690
  6. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
  7. 2016Layer Normalizationcited by 5,579
  8. 2017mixup: Beyond Empirical Risk Minimizationcited by 5,155
  9. 2017On Calibration of Modern Neural Networkscited by 4,860
  10. 2020Bootstrap your own latent: A new approach to self-supervised Learningcited by 4,712
  11. 2019CutMix: Regularization Strategy to Train Strong Classifiers with Localizable Featurescited by 2,875
  12. 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,857
35 more
  1. 2020Supervised Contrastive Learningcited by 2,803
  2. 2017Arbitrary Style Transfer in Real-time with Adaptive Instance Normalizationcited by 1,998
  3. 2020Shortcut Learning in Deep Neural Networkscited by 1,928
  4. 2021Barlow Twins: Self-Supervised Learning via Redundancy Reductioncited by 1,818
  5. 2017Improved Regularization of Convolutional Neural Networks with Cutoutcited by 1,623
  6. 2014FitNets: Hints for Thin Deep Netscited by 1,619
  7. 2020WILDS: A Benchmark of in-the-Wild Distribution Shiftscited by 1,366
  8. 2016Instance Normalization: The Missing Ingredient for Fast Stylizationcited by 1,187
  9. 2017Deeper, Broader and Artier Domain Generalizationcited by 983
  10. 2019AugMix: A Simple Data Processing Method to Improve Robustness and Uncertaintycited by 897
  11. 2018AutoAugment: Learning Augmentation Policies from Datacited by 728
  12. 2015Distillation as a Defense to Adversarial Perturbations against Deep Neural Networkscited by 675
  13. 2017The Implicit Bias of Gradient Descent on Separable Datacited by 649
  14. 2019Surprises in High-Dimensional Ridgeless Least Squares Interpolationcited by 508
  15. 2020Underspecification Presents Challenges for Credibility in Modern Machine Learningcited by 488
  16. 2019Domain Generalization by Solving Jigsaw Puzzlescited by 449
  17. 2018How Does Batch Normalization Help Optimization?cited by 355
  18. 2017Unified Deep Supervised Domain Adaptation and Generalizationcited by 322
  19. 2017Implicit Regularization in Matrix Factorizationcited by 318
  20. 2018Generalisation in humans and deep neural networkscited by 237
  21. 2018Just Interpolate: Kernel "Ridgeless" Regression Can Generalizecited by 190
  22. 2018Understanding Batch Normalizationcited by 157
  23. 2020Understanding and Mitigating the Tradeoff Between Robustness and Accuracycited by 148
  24. 2019Adversarially Robust Distillationcited by 124
  25. 2020Beyond Pinball Loss: Quantile Methods for Calibrated Uncertainty Quantificationcited by 77
  26. 2018Domain Generalization with Domain-Specific Aggregation Modulescited by 61
  27. 2016Examining the Impact of Blur on Recognition by Convolutional Networkscited by 58
  28. 2020Revisiting Batch Normalization for Improving Corruption Robustnesscited by 55
  29. 2020Removing Spurious Features can Hurt Accuracy and Affect Groups Disproportionatelycited by 52
  30. 2019More Data Can Hurt for Linear Regression: Sample-wise Double Descentcited by 37
  31. 2019Batch Normalization is a Cause of Adversarial Vulnerabilitycited by 28
  32. 2017Comparison of Batch Normalization and Weight Normalization Algorithms for the Large-scale Image Classificationcited by 18
  33. 2017Quality Resilient Deep Neural Networkscited by 12
  34. 2019Towards Shape Biased Unsupervised Representation Learning for Domain Generalizationcited by 10
  35. 2020RobustPointSet: A Dataset for Benchmarking Robustness of Point Cloud Classifierscited by 10

Built on by

Not cited yet.