Exploring Inconsistent Knowledge Distillation for Object Detection with Data Augmentation
Not on the map. Why?
Abstract (arXiv)
Knowledge Distillation (KD) for object detection aims to train a compact detector by transferring knowledge from a teacher model. Since the teacher model perceives data in a way different from humans, existing KD methods only distill knowledge that is consistent with labels annotated by human expert while neglecting knowledge that is not consistent with human perception, which results in insufficient distillation and sub-optimal performance. In this paper, we propose inconsistent knowledge distillation (IKD), which aims to distill knowledge inherent in the teacher model's counter-intuitive perceptions. We start by considering the teacher model's counter-intuitive perceptions of frequency and non-robust features. Unlike previous works that exploit fine-grained features or introduce additional regularizations, we extract inconsistent knowledge by providing diverse input using data augmentation. Specifically, we propose a sample-specific data augmentation to transfer the teacher model's ability in capturing distinct frequency components and suggest an adversarial feature augmentation to extract the teacher model's perceptions of non-robust features in the data. Extensive experiments demonstrate the effectiveness of our method which outperforms state-of-the-art KD baselines on one-stage, two-stage and anchor-free object detectors (at most +1.0 mAP). Our codes will be made available at urlhttps://github.com/JWLiang007/IKD.git.
Key facts. Cited by 19 papers in the map (data through 7 Oct 2026). Builds on 44 of its 65 references that are in the map. First posted on arXiv 20 Sep 2022.
Builds on
44 of 65 references.
References · 44
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2014Microsoft COCO: Common Objects in Contextcited by 17,498
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
- 2015Distilling the Knowledge in a Neural Networkcited by 10,076
- 2017Mask R-CNNcited by 7,259
- 2016Aggregated Residual Transformations for Deep Neural Networkscited by 2,540
- 2020Shortcut Learning in Deep Neural Networkscited by 1,928
- 2017Improved Regularization of Convolutional Neural Networks with Cutoutcited by 1,623
- 2019MMDetection: Open MMLab Detection Toolbox and Benchmarkcited by 1,379
- 2017Random Erasing Data Augmentationcited by 1,235
- 2017BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chaincited by 1,052
- 2019Adversarial Examples Are Not Bugs, They Are Featurescited by 950
32 more
- 2020Simple Copy-Paste is a Strong Data Augmentation Method for Instance Segmentationcited by 595
- 2018Improving Transferability of Adversarial Examples with Input Diversitycited by 591
- 2021Supervision Exists Everywhere: A Data Efficient Contrastive Language-Image Pre-training Paradigmcited by 405
- 2019On the Efficacy of Knowledge Distillationcited by 377
- 2021Neural Attention Distillation: Erasing Backdoor Triggers from Deep Neural Networkscited by 313
- 2019High Frequency Component Helps Explain the Generalization of Convolutional Neural Networkscited by 310
- 2019A Fourier Perspective on Model Robustness in Computer Visioncited by 288
- 2019RepPoints: Point Set Representation for Object Detectioncited by 264
- 2019High Accuracy and High Fidelity Extraction of Neural Networkscited by 208
- 2019Distilling Object Detectors with Fine-grained Feature Imitationcited by 188
- 2020Channel-wise Knowledge Distillation for Dense Predictioncited by 161
- 2021Focal and Global Knowledge Distillation for Detectorscited by 138
- 2021Dual Attention Suppression Attack: Generate Adversarial Camouflage in Physical Worldcited by 127
- 2022BackdoorBench: A Comprehensive Benchmark of Backdoor Learningcited by 124
- 2020GridMask Data Augmentationcited by 123
- 2018Transferable Adversarial Attacks for Image and Video Object Detectioncited by 109
- 2022Masked Generative Distillationcited by 107
- 2022LAS-AT: Adversarial Training with Learnable Attack Strategycited by 94
- 2022Parallel Rectangle Flip Attack: A Query-based Black-box Attack against Object Detectioncited by 79
- 2021RobustART: Benchmarking Robustness on Architecture Design and Training Techniquescited by 78
- 2022Improving Vision Transformers by Revisiting High-frequency Componentscited by 75
- 2020Efficient Adversarial Attacks for Visual Object Trackingcited by 66
- 2019Training Robust Deep Neural Networks via Adversarial Noise Propagationcited by 60
- 2019Data Augmentation Using GANscited by 58
- 2022A Large-scale Multiple-objective Method for Black-box Attack against Object Detectioncited by 55
- 2021A Comprehensive Evaluation Framework for Deep Model Robustnesscited by 41
- 2021Harnessing Perceptual Adversarial Patches for Crowd Countingcited by 39
- 2016Face Detection with the Faster R-CNNcited by 34
- 2022Prior-Guided Adversarial Initialization for Fast Adversarial Trainingcited by 34
- 2022A Tale of HodgeRank and Spectral Method: Target Attack Against Rank Aggregation Is the Fixed Point of Adversarial Gamecited by 16
- 2021Poisoning Attack against Estimating from Pairwise Comparisonscited by 14
- 2018Adversarial Training for Probabilistic Spiking Neural Networkscited by 11
Built on by
Citing papers per year: 2024: 13; 2025: 3; 2026: 3.
19 papers.
Sort:
By area:
- 2024Jailbreak Vision Language Models via Bi-Modal Adversarial Promptcited by 103
- 2024VL-Trojan: Multimodal Instruction Backdoor Attacks against Autoregressive Visual Language Modelscited by 83
- 2024Semantic Mirror Jailbreak: Genetic Algorithm Based Jailbreak Prompts Against Open-source LLMscited by 48
- 2024Poisoned Forgery Face: Towards Backdoor Attacks on Face Forgery Detectioncited by 34
- 2024Unlearning Backdoor Threats: Enhancing Backdoor Defense in Multimodal Contrastive Learning via Local Token Unlearningcited by 31
- 2024Effectiveness Assessment of Recent Large Vision-Language Modelscited by 29
- 2024Compromising Embodied Agents with Contextual Backdoor Attackscited by 29
- 2024LanEvil: Benchmarking the Robustness of Lane Detection to Environmental Illusionscited by 18
- 2025E2AT: Multimodal Jailbreak Defense via Dynamic Joint Optimization for Multimodal Large Language Modelscited by 12
- 2024Efficient Backdoor Defense in Multimodal Contrastive Learning: A Token-Level Unlearning Method for Mitigating Threatscited by 6
- 2024Towards Robust Object Detection: Identifying and Removing Backdoors via Module Inconsistency Analysiscited by 4
- 2025Physical Adversarial Camouflage through Gradient Calibration and Regularizationcited by 3
7 more
- 2025Towards a 3D Transfer-based Black-box Attack via Critical Feature Guidancecited by 2
- 2024Student-Oriented Teacher Knowledge Refinement for Knowledge Distillationcited by 1
- 2026Multimodal Backdoor Attack on VLMs for Autonomous Driving via Graffiti and Cross-Lingual Triggerscited by 1
- 2026Benchmarking the Robustness of Autonomous Driving to Environmental Illusions: A Lane Perception Perspectivecited by 1
- 2024DFMSD: Dual Feature Masking Stage-wise Knowledge Distillation for Object Detectioncited by 0
- 2024Patch is Enough: Naturalistic Adversarial Patch against Vision-Language Pre-training Modelscited by 0
- 2026SafeCA: Safe Cross-Attention Localization and Regulation for Text-to-Video Jailbreak Defensecited by 0
- 2026SafeCA: Safe Cross-Attention Localization and Regulation for Text-to-Video Jailbreak Defense11 Aug 2026
- 2026Benchmarking the Robustness of Autonomous Driving to Environmental Illusions: A Lane Perception Perspective7 Jul 2026
- 2026Multimodal Backdoor Attack on VLMs for Autonomous Driving via Graffiti and Cross-Lingual Triggers6 Apr 2026
- 2025Towards a 3D Transfer-based Black-box Attack via Critical Feature Guidance21 Aug 2025
- 2025Physical Adversarial Camouflage through Gradient Calibration and Regularization7 Aug 2025
- 2025E2AT: Multimodal Jailbreak Defense via Dynamic Joint Optimization for Multimodal Large Language Models5 Mar 2025
- 2024Patch is Enough: Naturalistic Adversarial Patch against Vision-Language Pre-training Models7 Oct 2024
- 2024Efficient Backdoor Defense in Multimodal Contrastive Learning: A Token-Level Unlearning Method for Mitigating Threats29 Sep 2024
- 2024Student-Oriented Teacher Knowledge Refinement for Knowledge Distillation27 Sep 2024
- 2024Towards Robust Object Detection: Identifying and Removing Backdoors via Module Inconsistency Analysis24 Sep 2024
- 2024Compromising Embodied Agents with Contextual Backdoor Attacks6 Aug 2024
- 2024DFMSD: Dual Feature Masking Stage-wise Knowledge Distillation for Object Detection18 Jul 2024
7 more
- 2024Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt6 Jun 2024
- 2024LanEvil: Benchmarking the Robustness of Lane Detection to Environmental Illusions3 Jun 2024
- 2024Unlearning Backdoor Threats: Enhancing Backdoor Defense in Multimodal Contrastive Learning via Local Token Unlearning24 Mar 2024
- 2024Effectiveness Assessment of Recent Large Vision-Language Models7 Mar 2024
- 2024Semantic Mirror Jailbreak: Genetic Algorithm Based Jailbreak Prompts Against Open-source LLMs21 Feb 2024
- 2024VL-Trojan: Multimodal Instruction Backdoor Attacks against Autoregressive Visual Language Models21 Feb 2024
- 2024Poisoned Forgery Face: Towards Backdoor Attacks on Face Forgery Detection18 Feb 2024
- 2024Jailbreak Vision Language Models via Bi-Modal Adversarial Promptcited by 103
- 2024VL-Trojan: Multimodal Instruction Backdoor Attacks against Autoregressive Visual Language Modelscited by 83
- 2024Effectiveness Assessment of Recent Large Vision-Language Modelscited by 29
- 2025E2AT: Multimodal Jailbreak Defense via Dynamic Joint Optimization for Multimodal Large Language Modelscited by 12
- 2026Multimodal Backdoor Attack on VLMs for Autonomous Driving via Graffiti and Cross-Lingual Triggerscited by 1
- 2024Patch is Enough: Naturalistic Adversarial Patch against Vision-Language Pre-training Modelscited by 0
- 2026Multimodal Backdoor Attack on VLMs for Autonomous Driving via Graffiti and Cross-Lingual Triggers6 Apr 2026
- 2025E2AT: Multimodal Jailbreak Defense via Dynamic Joint Optimization for Multimodal Large Language Models5 Mar 2025
- 2024Patch is Enough: Naturalistic Adversarial Patch against Vision-Language Pre-training Models7 Oct 2024
- 2024Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt6 Jun 2024
- 2024Effectiveness Assessment of Recent Large Vision-Language Models7 Mar 2024
- 2024VL-Trojan: Multimodal Instruction Backdoor Attacks against Autoregressive Visual Language Models21 Feb 2024
- 2024Semantic Mirror Jailbreak: Genetic Algorithm Based Jailbreak Prompts Against Open-source LLMscited by 48
- 2024Unlearning Backdoor Threats: Enhancing Backdoor Defense in Multimodal Contrastive Learning via Local Token Unlearningcited by 31
- 2024Efficient Backdoor Defense in Multimodal Contrastive Learning: A Token-Level Unlearning Method for Mitigating Threatscited by 6
- 2026SafeCA: Safe Cross-Attention Localization and Regulation for Text-to-Video Jailbreak Defensecited by 0
- 2026SafeCA: Safe Cross-Attention Localization and Regulation for Text-to-Video Jailbreak Defense11 Aug 2026
- 2024Efficient Backdoor Defense in Multimodal Contrastive Learning: A Token-Level Unlearning Method for Mitigating Threats29 Sep 2024
- 2024Unlearning Backdoor Threats: Enhancing Backdoor Defense in Multimodal Contrastive Learning via Local Token Unlearning24 Mar 2024
- 2024Semantic Mirror Jailbreak: Genetic Algorithm Based Jailbreak Prompts Against Open-source LLMs21 Feb 2024
- 2024Poisoned Forgery Face: Towards Backdoor Attacks on Face Forgery Detectioncited by 34
- 2024LanEvil: Benchmarking the Robustness of Lane Detection to Environmental Illusionscited by 18
- 2024Towards Robust Object Detection: Identifying and Removing Backdoors via Module Inconsistency Analysiscited by 4
- 2025Physical Adversarial Camouflage through Gradient Calibration and Regularizationcited by 3
- 2025Towards a 3D Transfer-based Black-box Attack via Critical Feature Guidancecited by 2
- 2024Student-Oriented Teacher Knowledge Refinement for Knowledge Distillationcited by 1
- 2024DFMSD: Dual Feature Masking Stage-wise Knowledge Distillation for Object Detectioncited by 0
- 2025Towards a 3D Transfer-based Black-box Attack via Critical Feature Guidance21 Aug 2025
- 2025Physical Adversarial Camouflage through Gradient Calibration and Regularization7 Aug 2025
- 2024Student-Oriented Teacher Knowledge Refinement for Knowledge Distillation27 Sep 2024
- 2024Towards Robust Object Detection: Identifying and Removing Backdoors via Module Inconsistency Analysis24 Sep 2024
- 2024DFMSD: Dual Feature Masking Stage-wise Knowledge Distillation for Object Detection18 Jul 2024
- 2024LanEvil: Benchmarking the Robustness of Lane Detection to Environmental Illusions3 Jun 2024
- 2024Poisoned Forgery Face: Towards Backdoor Attacks on Face Forgery Detection18 Feb 2024