An Impartial Take to the CNN vs Transformer Robustness Contest
Not on the map. Why?
Abstract (arXiv)
Following the surge of popularity of Transformers in Computer Vision, several studies have attempted to determine whether they could be more robust to distribution shifts and provide better uncertainty estimates than Convolutional Neural Networks (CNNs). The almost unanimous conclusion is that they are, and it is often conjectured more or less explicitly that the reason of this supposed superiority is to be attributed to the self-attention mechanism. In this paper we perform extensive empirical analyses showing that recent state-of-the-art CNNs (particularly, ConvNeXt) can be as robust and reliable or even sometimes more than the current state-of-the-art Transformers. However, there is no clear winner. Therefore, although it is tempting to state the definitive superiority of one family of architectures over another, they seem to enjoy similar extraordinary performances on a variety of tasks while also suffering from similar vulnerabilities such as texture, background, and simplicity biases.
Key facts. Cited by 34 papers in the map (data through 7 Oct 2026). Builds on 31 of its 45 references that are in the map. First posted on arXiv 22 Jul 2022.
Builds on
31 of 45 references.
References · 31
- 2017Attention Is All You Needcited by 59,932
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
- 2021Swin Transformer: Hierarchical Vision Transformer using Shifted Windowscited by 12,082
- 2016Layer Normalizationcited by 5,579
- 2017On Calibration of Modern Neural Networkscited by 4,860
- 2020Training data-efficient image transformers & distillation through attentioncited by 4,560
- 2022A ConvNet for the 2020scited by 3,545
- 2020The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalizationcited by 1,842
- 2019Invariant Risk Minimizationcited by 1,832
- 2019Do ImageNet Classifiers Generalize to ImageNet?cited by 1,507
- 2019Natural Adversarial Examplescited by 1,401
- 2021Tokens-to-Token ViT: Training Vision Transformers from Scratch on ImageNetcited by 1,096
19 more
- 2019Learning Robust Global Representations by Penalizing Local Predictive Powercited by 1,010
- 2019Big Transfer (BiT): General Visual Representation Learningcited by 766
- 2021ImageNet-21K Pretraining for the Massescited by 607
- 2017Exploring Generalization in Deep Learningcited by 595
- 2019Fantastic Generalization Measures and Where to Find Themcited by 507
- 2021Revisiting the Calibration of Modern Neural Networkscited by 387
- 2020Calibrating Deep Neural Networks using Focal Losscited by 353
- 2020The Pitfalls of Simplicity Bias in Neural Networkscited by 349
- 2020Noise or Signal: The Role of Image Backgrounds in Object Recognitioncited by 342
- 2017A PAC-Bayesian Approach to Spectrally-Normalized Margin Bounds for Neural Networkscited by 309
- 2021Exploring the Limits of Out-of-Distribution Detectioncited by 283
- 2021Vision Transformers are Robust Learnerscited by 208
- 2021Are Transformers More Robust Than CNNs?cited by 187
- 2019Ensemble Distribution Distillationcited by 158
- 2021Delving Deep into the Generalization of Vision Transformers under Distribution Shiftscited by 85
- 2021RobustART: Benchmarking Robustness on Architecture Design and Training Techniquescited by 78
- 2019Stable Rank Normalization for Improved Generalization in Neural Networks and GANscited by 41
- 2015Performance measures for classification systems with rejectioncited by 16
- 2021Exploring Corruption Robustness: Inductive Biases in Vision Transformers and MLP-Mixerscited by 13
Built on by
Citing papers per year: 2022: 4; 2023: 16; 2024: 7; 2025: 5; 2026: 2.
34 papers.
Sort:
By area:
- 2022A Light Recipe to Train Robust Vision Transformerscited by 64
- 2022MogaNet: Multi-order Gated Aggregation Networkcited by 59
- 2022ID and OOD Performance Are Sometimes Inversely Correlated on Real-world Datasetscited by 44
- 2023Benchmarking Robustness of Adaptation Methods on Pre-trained Vision-Language Modelscited by 30
- 2023What do neural networks learn in image classification? A frequency shortcut perspectivecited by 28
- 2023Anatomy-aware and acquisition-agnostic joint registration with SynthMorphcited by 19
- 2023ConvNet vs Transformer, Supervised vs CLIP: Beyond ImageNet Accuracycited by 19
- 2022Not Just Pretty Pictures: Toward Interventional Data Augmentation Using Text-to-Image Generatorscited by 17
- 2023MoCaE: Mixture of Calibrated Experts Significantly Improves Object Detectioncited by 17
- 2023Reliability in Semantic Segmentation: Are We on the Right Track?cited by 16
- 2023Reliable Evaluation of Adversarial Transferabilitycited by 12
- 2023On the unreasonable vulnerability of transformers for image restoration -- and an easy fixcited by 11
22 more
- 2024Are We Ready for Out-of-Distribution Detection in Digital Pathology?cited by 8
- 2023E-NER: Evidential Deep Learning for Trustworthy Named Entity Recognitioncited by 7
- 2023An Analysis of Initial Training Strategies for Exemplar-Free Class-Incremental Learningcited by 7
- 2024A Rate-Distortion View of Uncertainty Quantificationcited by 3
- 2023SkyGPT: Probabilistic Short-term Solar Forecasting Using Synthetic Sky Videos from Physics-constrained VideoGPTcited by 2
- 2024Synergy and Diversity in CLIP: Enhancing Performance Through Adaptive Backbone Ensemblingcited by 2
- 2024Situation Monitor: Diversity-Driven Zero-Shot Out-of-Distribution Detection using Budding Ensemble Architecture for Object Detectioncited by 2
- 2024On Evaluating Adversarial Robustness of Volumetric Medical Segmentation Modelscited by 2
- 2025Beyond Accuracy: Are Time Series Foundation Models Well-Calibrated?cited by 2
- 2023Underwater target detection based on improved YOLOv7cited by 1
- 2023Hardwiring ViT Patch Selectivity into CNNs using Patch Mixingcited by 1
- 2023Exploring Non-additive Randomness on ViT against Query-Based Black-Box Attackscited by 1
- 2024GeoPos: A Minimal Positional Encoding for Enhanced Fine-Grained Details in Image Synthesis Using Convolutional Neural Networkscited by 1
- 2025Adversarial Robustness of Discriminative Self-Supervised Learning in Visioncited by 1
- 2023Fine-Grained ImageNet Classification in the Wildcited by 0
- 2023Improving Stain Invariance of CNNs for Segmentation by Fusing Channel Attention and Domain-Adversarial Trainingcited by 0
- 2024A Survey on Cell Nuclei Instance Segmentation and Classification: Leveraging Context and Attentioncited by 0
- 2025Divide and Conquer Self-Supervised Learning for High-Content Imagingcited by 0
- 2025SpaRTAN: Spatial Reinforcement Token-based Aggregation Network for Visual Recognitioncited by 0
- 2025DetailSemNet: Elevating Signature Verification through Detail-Semantic Integrationcited by 0
- 2026Anatomy of a failure: When, how, and why deep vision fails in scientific domainscited by 0
- 2026Vertical Fusion: Condensing Internal Representations for Robust ViT Classificationcited by 0
- 2026Vertical Fusion: Condensing Internal Representations for Robust ViT Classification11 Jul 2026
- 2026Anatomy of a failure: When, how, and why deep vision fails in scientific domains5 May 2026
- 2025DetailSemNet: Elevating Signature Verification through Detail-Semantic Integration20 Nov 2025
- 2025Beyond Accuracy: Are Time Series Foundation Models Well-Calibrated?17 Oct 2025
- 2025SpaRTAN: Spatial Reinforcement Token-based Aggregation Network for Visual Recognition15 Jul 2025
- 2025Divide and Conquer Self-Supervised Learning for High-Content Imaging10 Mar 2025
- 2025Adversarial Robustness of Discriminative Self-Supervised Learning in Vision8 Mar 2025
- 2024A Survey on Cell Nuclei Instance Segmentation and Classification: Leveraging Context and Attention26 Jul 2024
- 2024Are We Ready for Out-of-Distribution Detection in Digital Pathology?18 Jul 2024
- 2024A Rate-Distortion View of Uncertainty Quantification16 Jun 2024
- 2024On Evaluating Adversarial Robustness of Volumetric Medical Segmentation Models12 Jun 2024
- 2024Situation Monitor: Diversity-Driven Zero-Shot Out-of-Distribution Detection using Budding Ensemble Architecture for Object Detection5 Jun 2024
22 more
- 2024Synergy and Diversity in CLIP: Enhancing Performance Through Adaptive Backbone Ensembling27 May 2024
- 2024GeoPos: A Minimal Positional Encoding for Enhanced Fine-Grained Details in Image Synthesis Using Convolutional Neural Networks3 Jan 2024
- 2023ConvNet vs Transformer, Supervised vs CLIP: Beyond ImageNet Accuracy15 Nov 2023
- 2023MoCaE: Mixture of Calibrated Experts Significantly Improves Object Detection26 Sep 2023
- 2023Exploring Non-additive Randomness on ViT against Query-Based Black-Box Attacks12 Sep 2023
- 2023An Analysis of Initial Training Strategies for Exemplar-Free Class-Incremental Learning22 Aug 2023
- 2023On the unreasonable vulnerability of transformers for image restoration -- and an easy fix25 Jul 2023
- 2023What do neural networks learn in image classification? A frequency shortcut perspective19 Jul 2023
- 2023Hardwiring ViT Patch Selectivity into CNNs using Patch Mixing30 Jun 2023
- 2023SkyGPT: Probabilistic Short-term Solar Forecasting Using Synthetic Sky Videos from Physics-constrained VideoGPT20 Jun 2023
- 2023Reliable Evaluation of Adversarial Transferability14 Jun 2023
- 2023Benchmarking Robustness of Adaptation Methods on Pre-trained Vision-Language Models3 Jun 2023
- 2023E-NER: Evidential Deep Learning for Trustworthy Named Entity Recognition29 May 2023
- 2023Improving Stain Invariance of CNNs for Segmentation by Fusing Channel Attention and Domain-Adversarial Training22 Apr 2023
- 2023Reliability in Semantic Segmentation: Are We on the Right Track?20 Mar 2023
- 2023Fine-Grained ImageNet Classification in the Wild4 Mar 2023
- 2023Underwater target detection based on improved YOLOv714 Feb 2023
- 2023Anatomy-aware and acquisition-agnostic joint registration with SynthMorph26 Jan 2023
- 2022Not Just Pretty Pictures: Toward Interventional Data Augmentation Using Text-to-Image Generators21 Dec 2022
- 2022MogaNet: Multi-order Gated Aggregation Network7 Nov 2022
- 2022A Light Recipe to Train Robust Vision Transformers15 Sep 2022
- 2022ID and OOD Performance Are Sometimes Inversely Correlated on Real-world Datasets1 Sep 2022
- 2022A Light Recipe to Train Robust Vision Transformerscited by 64
- 2022MogaNet: Multi-order Gated Aggregation Networkcited by 59
- 2022ID and OOD Performance Are Sometimes Inversely Correlated on Real-world Datasetscited by 44
- 2023What do neural networks learn in image classification? A frequency shortcut perspectivecited by 28
- 2023Anatomy-aware and acquisition-agnostic joint registration with SynthMorphcited by 19
- 2023ConvNet vs Transformer, Supervised vs CLIP: Beyond ImageNet Accuracycited by 19
- 2022Not Just Pretty Pictures: Toward Interventional Data Augmentation Using Text-to-Image Generatorscited by 17
- 2023Reliability in Semantic Segmentation: Are We on the Right Track?cited by 16
- 2023Reliable Evaluation of Adversarial Transferabilitycited by 12
- 2023On the unreasonable vulnerability of transformers for image restoration -- and an easy fixcited by 11
- 2024Are We Ready for Out-of-Distribution Detection in Digital Pathology?cited by 8
- 2023E-NER: Evidential Deep Learning for Trustworthy Named Entity Recognitioncited by 7
12 most cited of 30 All 30 (JSON)
- 2026Vertical Fusion: Condensing Internal Representations for Robust ViT Classification11 Jul 2026
- 2026Anatomy of a failure: When, how, and why deep vision fails in scientific domains5 May 2026
- 2025DetailSemNet: Elevating Signature Verification through Detail-Semantic Integration20 Nov 2025
- 2025Beyond Accuracy: Are Time Series Foundation Models Well-Calibrated?17 Oct 2025
- 2025SpaRTAN: Spatial Reinforcement Token-based Aggregation Network for Visual Recognition15 Jul 2025
- 2025Divide and Conquer Self-Supervised Learning for High-Content Imaging10 Mar 2025
- 2025Adversarial Robustness of Discriminative Self-Supervised Learning in Vision8 Mar 2025
- 2024A Survey on Cell Nuclei Instance Segmentation and Classification: Leveraging Context and Attention26 Jul 2024
- 2024Are We Ready for Out-of-Distribution Detection in Digital Pathology?18 Jul 2024
- 2024A Rate-Distortion View of Uncertainty Quantification16 Jun 2024
- 2024Situation Monitor: Diversity-Driven Zero-Shot Out-of-Distribution Detection using Budding Ensemble Architecture for Object Detection5 Jun 2024
- 2024Synergy and Diversity in CLIP: Enhancing Performance Through Adaptive Backbone Ensembling27 May 2024
12 newest of 30 All 30 (JSON)