Counterbalancing Teacher: Regularizing Batch Normalized Models for Robustness
Not on the map. Why?
Abstract (arXiv)
Batch normalization (BN) is a ubiquitous technique for training deep neural networks that accelerates their convergence to reach higher accuracy. However, we demonstrate that BN comes with a fundamental drawback: it incentivizes the model to rely on low-variance features that are highly specific to the training (in-domain) data, hurting generalization performance on out-of-domain examples. In this work, we investigate this phenomenon by first showing that removing BN layers across a wide range of architectures leads to lower out-of-domain and corruption errors at the cost of higher in-domain errors. We then propose Counterbalancing Teacher (CT), a method which leverages a frozen copy of the same model without BN as a teacher to enforce the student network's learning of robust representations by substantially adapting its weights through a consistency loss function. This regularization signal helps CT perform well in unforeseen data shifts, even without information from the target domain as in prior works. We theoretically show in an overparameterized linear regression setting why normalization leads to a model's reliance on such in-domain features, and empirically demonstrate the efficacy of CT by outperforming several baselines on robustness benchmarks such as CIFAR-10-C, CIFAR-100-C, and VLCS.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 47 of its 64 references that are in the map. First posted on arXiv 4 Jul 2022.
Builds on
47 of 64 references.
References · 47
- 2014Adam: A Method for Stochastic Optimizationcited by 36,960
- 2020A Simple Framework for Contrastive Learning of Visual Representationscited by 11,979
- 2015Distilling the Knowledge in a Neural Networkcited by 10,076
- 2015Batch Normalization: Accelerating Deep Network Training by Reducing Internal Covariate Shiftcited by 6,979
- 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,690
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2016Layer Normalizationcited by 5,579
- 2017mixup: Beyond Empirical Risk Minimizationcited by 5,155
- 2017On Calibration of Modern Neural Networkscited by 4,860
- 2020Bootstrap your own latent: A new approach to self-supervised Learningcited by 4,712
- 2019CutMix: Regularization Strategy to Train Strong Classifiers with Localizable Featurescited by 2,875
- 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,857
35 more
- 2020Supervised Contrastive Learningcited by 2,803
- 2017Arbitrary Style Transfer in Real-time with Adaptive Instance Normalizationcited by 1,998
- 2020Shortcut Learning in Deep Neural Networkscited by 1,928
- 2021Barlow Twins: Self-Supervised Learning via Redundancy Reductioncited by 1,818
- 2017Improved Regularization of Convolutional Neural Networks with Cutoutcited by 1,623
- 2014FitNets: Hints for Thin Deep Netscited by 1,619
- 2020WILDS: A Benchmark of in-the-Wild Distribution Shiftscited by 1,366
- 2016Instance Normalization: The Missing Ingredient for Fast Stylizationcited by 1,187
- 2017Deeper, Broader and Artier Domain Generalizationcited by 983
- 2019AugMix: A Simple Data Processing Method to Improve Robustness and Uncertaintycited by 897
- 2018AutoAugment: Learning Augmentation Policies from Datacited by 728
- 2015Distillation as a Defense to Adversarial Perturbations against Deep Neural Networkscited by 675
- 2017The Implicit Bias of Gradient Descent on Separable Datacited by 649
- 2019Surprises in High-Dimensional Ridgeless Least Squares Interpolationcited by 508
- 2020Underspecification Presents Challenges for Credibility in Modern Machine Learningcited by 488
- 2019Domain Generalization by Solving Jigsaw Puzzlescited by 449
- 2018How Does Batch Normalization Help Optimization?cited by 355
- 2017Unified Deep Supervised Domain Adaptation and Generalizationcited by 322
- 2017Implicit Regularization in Matrix Factorizationcited by 318
- 2018Generalisation in humans and deep neural networkscited by 237
- 2018Just Interpolate: Kernel "Ridgeless" Regression Can Generalizecited by 190
- 2018Understanding Batch Normalizationcited by 157
- 2020Understanding and Mitigating the Tradeoff Between Robustness and Accuracycited by 148
- 2019Adversarially Robust Distillationcited by 124
- 2020Beyond Pinball Loss: Quantile Methods for Calibrated Uncertainty Quantificationcited by 77
- 2018Domain Generalization with Domain-Specific Aggregation Modulescited by 61
- 2016Examining the Impact of Blur on Recognition by Convolutional Networkscited by 58
- 2020Revisiting Batch Normalization for Improving Corruption Robustnesscited by 55
- 2020Removing Spurious Features can Hurt Accuracy and Affect Groups Disproportionatelycited by 52
- 2019More Data Can Hurt for Linear Regression: Sample-wise Double Descentcited by 37
- 2019Batch Normalization is a Cause of Adversarial Vulnerabilitycited by 28
- 2017Comparison of Batch Normalization and Weight Normalization Algorithms for the Large-scale Image Classificationcited by 18
- 2017Quality Resilient Deep Neural Networkscited by 12
- 2019Towards Shape Biased Unsupervised Representation Learning for Domain Generalizationcited by 10
- 2020RobustPointSet: A Dataset for Benchmarking Robustness of Point Cloud Classifierscited by 10
Built on by
Not cited yet.