Spurious Features Everywhere -- Large-Scale Detection of Harmful Spurious Features in ImageNet
Not on the map. Why?
Abstract (arXiv)
Benchmark performance of deep learning classifiers alone is not a reliable predictor for the performance of a deployed model. In particular, if the image classifier has picked up spurious features in the training data, its predictions can fail in unexpected ways. In this paper, we develop a framework that allows us to systematically identify spurious features in large datasets like ImageNet. It is based on our neural PCA components and their visualization. Previous work on spurious features often operates in toy settings or requires costly pixel-wise annotations. In contrast, we work with ImageNet and validate our results by showing that presence of the harmful spurious feature of a class alone is sufficient to trigger the prediction of that class. We introduce the novel dataset "Spurious ImageNet" which allows to measure the reliance of any ImageNet classifier on harmful spurious features. Moreover, we introduce SpuFix as a simple mitigation method to reduce the dependence of any ImageNet classifier on previously identified harmful spurious features without requiring additional labels or retraining of the model. We provide code and data at https://github.com/YanNeu/spurious_imagenet .
Key facts. Cited by 41 papers in the map (data through 7 Oct 2026). Builds on 74 of its 93 references that are in the map. First posted on arXiv 9 Dec 2022.
Builds on
74 of 93 references.
References · 74
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
- 2020Denoising Diffusion Probabilistic Modelscited by 20,851
- 2021Swin Transformer: Hierarchical Vision Transformer using Shifted Windowscited by 12,082
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,029
- 2020Score-Based Generative Modeling through Stochastic Differential Equationscited by 8,964
- 2014ImageNet Large Scale Visual Recognition Challengecited by 8,441
- 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,185
- 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,690
- 2017A Unified Approach to Interpreting Model Predictionscited by 6,488
38 more
- 2019EfficientNet: Rethinking Model Scaling for Convolutional Neural Networkscited by 6,415
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2022Classifier-Free Diffusion Guidancecited by 5,717
- 2013Intriguing properties of neural networkscited by 5,114
- 2016"Why Should I Trust You?": Explaining the Predictions of Any Classifiercited by 5,040
- 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,131
- 2022A ConvNet for the 2020scited by 3,545
- 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,857
- 2016Aggregated Residual Transformations for Deep Neural Networkscited by 2,540
- 2016A Baseline for Detecting Misclassified and Out-of-Distribution Examples in Neural Networkscited by 2,362
- 2021BEiT: BERT Pre-Training of Image Transformerscited by 2,360
- 2019RandAugment: Practical automated data augmentation with a reduced search spacecited by 2,261
- 2020Shortcut Learning in Deep Neural Networkscited by 1,928
- 2016Adversarial examples in the physical worldcited by 1,762
- 2016Concrete Problems in AI Safetycited by 1,582
- 2021LAION-400M: Open Dataset of CLIP-Filtered 400 Million Image-Text Pairscited by 1,544
- 2019Do ImageNet Classifiers Generalize to ImageNet?cited by 1,507
- 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,442
- 2018ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustnesscited by 1,430
- 2019Self-training with Noisy Student improves ImageNet classificationcited by 1,304
- 2021Swin Transformer V2: Scaling Up Capacity and Resolutioncited by 1,215
- 2021EfficientNetV2: Smaller Models and Faster Trainingcited by 1,127
- 2017Counterfactual Explanations without Opening the Black Box: Automated Decisions and the GDPRcited by 1,086
- 2018Robustness May Be at Odds with Accuracycited by 873
- 2014Deep Neural Networks are Easily Fooled: High Confidence Predictions for Unrecognizable Imagescited by 774
- 2019Big Transfer (BiT): General Visual Representation Learningcited by 766
- 2017Evasion Attacks against Machine Learning at Test Timecited by 686
- 2022EVA: Exploring the Limits of Masked Visual Representation Learning at Scalecited by 685
- 2021Maximum Likelihood Training of Score-Based Diffusion Modelscited by 670
- 2018Recognition in Terra Incognitacited by 655
- 2021How to train your ViT? Data, Augmentation, and Regularization in Vision Transformerscited by 562
- 2017Interpretation of Neural Networks is Fragilecited by 443
- 2019Fooling LIME and SHAP: Adversarial Attacks on Post hoc Explanation Methodscited by 440
- 2022DeiT III: Revenge of the ViTcited by 417
- 2018Confounding variables can degrade generalization performance of radiological deep learning modelscited by 374
- 2020The Pitfalls of Simplicity Bias in Neural Networkscited by 349
- 2020Noise or Signal: The Role of Image Backgrounds in Object Recognitioncited by 342
- 2020Are we done with ImageNet?cited by 329
50 most cited of 74 All 74 (JSON)
Built on by
Citing papers per year: 2023: 9; 2024: 10; 2025: 17; 2026: 5.
41 papers.
Sort:
By area:
- 2023Spawrious: A Benchmark for Fine Control of Spurious Correlation Biasescited by 41
- 2023Fast Diffusion-Based Counterfactuals for Shortcut Removal and Generationcited by 41
- 2025Mechanistic understanding and validation of large AI models with SemanticLenscited by 29
- 2025Next-Embedding Prediction Makes Strong Vision Learnerscited by 21
- 2023Make Me a BNN: A Simple Strategy for Estimating Bayesian Uncertainty from Pre-trained Modelscited by 15
- 2023TTIDA: Controllable Generative Data Augmentation via Text-to-Text and Text-to-Image Modelscited by 14
- 2025DASH: Detection and Assessment of Systematic Hallucinations of VLMscited by 14
- 2024Backdoor Secrets Unveiled: Identifying Backdoor Data with Optimized Scaled Prediction Consistencycited by 13
- 2023DiG-IN: Diffusion Guidance for Investigating Networks -- Uncovering Classifier Differences Neuron Visualisations and Visual Counterfactual Explanationscited by 11
- 2024Learning Robust Classifiers with Self-Guided Spurious Correlation Mitigationcited by 10
- 2025Quantifying and Improving the Robustness of Retrieval-Augmented Language Models Against Spurious Features in Grounding Datacited by 10
- 2023Masking Strategies for Background Bias Removal in Computer Vision Modelscited by 9
29 more
- 2024Clarify: Improving Model Robustness With Natural Language Correctionscited by 8
- 2023Automated Classification of Model Errors on ImageNetcited by 6
- 2024Benchmarking Spurious Bias in Few-Shot Image Classifierscited by 6
- 2025Practical do-Shapley Explanations with Estimand-Agnostic Causal Inferencecited by 6
- 2024Reactive Model Correction: Mitigating Harm to Task-Relevant Features via Conditional Bias Suppressioncited by 5
- 2025ConceptScope: Characterizing Dataset Bias via Disentangled Visual Conceptscited by 5
- 2023Identifying Systematic Errors in Object Detectors with the SCROD Pipelinecited by 4
- 2024Fine-Tuning Text-To-Image Diffusion Models for Class-Wise Spurious Feature Generationcited by 4
- 2024Anonymity Unveiled: A Practical Framework for Auditing Data Use in Deep Learning Modelscited by 4
- 2025From What to How: Attributing CLIP's Latent Components Reveals Unexpected Semantic Reliancecited by 4
- 2024Antibody DomainBed: Out-of-Distribution Generalization in Therapeutic Protein Designcited by 3
- 2025Ensuring Medical AI Safety: Interpretability-Driven Detection and Mitigation of Spurious Model Behavior and Associated Datacited by 2
- 2025Web Artifact Attacks Disrupt Vision Language Modelscited by 2
- 2025Improving Knowledge Distillation Under Unknown Covariate Shift Through Confidence-Guided Data Augmentationcited by 2
- 2025Spurious-Aware Prototype Refinement for Reliable Out-of-Distribution Detectioncited by 2
- 2026Rendering-Aware Bayesian 3D Gaussian Splatting with Native Uncertainty and Adaptive Complexity Controlcited by 2
- 2026Unraveling Machine Behavior by Multi-Level Bias Analysis and Detection: Methodology and Application to Computer Visioncited by 2
- 2025Post-Hoc Concept Disentanglement: From Correlated to Isolated Concept Representationscited by 1
- 2025An interpretable approach to automating the assessment of biofouling in video footagecited by 1
- 2025Corner Cases: How Size and Position of Objects Challenge ImageNet-Trained Modelscited by 1
- 2023Spuriosity Rankings for Free: A Simple Framework for Last Layer Retraining Based on Object Detectioncited by 0
- 2024Identification of Fine-grained Systematic Errors via Controlled Scene Generationcited by 0
- 2024Explainability of Sub-Field Level Crop Yield Prediction using Remote Sensingcited by 0
- 2025What is Adversarial Training for Diffusion Models?cited by 0
- 2025Caption-Driven Explainability: Probing CNNs for Bias via CLIPcited by 0
- 2025Weight Space Correlation Analysis: Quantifying Feature Utilization in Deep Learning Modelscited by 0
- 2026Invisible Shortcuts: Why Vision Encoders Know Your Cameracited by 0
- 2026"World Knowledge" in the Weights: Reading Concept Circuits of Vision Transformerscited by 0
- 2026Towards Fast and Disentangled Counterfactuals for Visual Foundation Modelscited by 0
- 2026Towards Fast and Disentangled Counterfactuals for Visual Foundation Models1 Oct 2026
- 2026"World Knowledge" in the Weights: Reading Concept Circuits of Vision Transformers8 Sep 2026
- 2026Invisible Shortcuts: Why Vision Encoders Know Your Camera5 Aug 2026
- 2026Unraveling Machine Behavior by Multi-Level Bias Analysis and Detection: Methodology and Application to Computer Vision8 Jul 2026
- 2026Rendering-Aware Bayesian 3D Gaussian Splatting with Native Uncertainty and Adaptive Complexity Control6 Jul 2026
- 2025Next-Embedding Prediction Makes Strong Vision Learners18 Dec 2025
- 2025Weight Space Correlation Analysis: Quantifying Feature Utilization in Deep Learning Models15 Dec 2025
- 2025ConceptScope: Characterizing Dataset Bias via Disentangled Visual Concepts30 Oct 2025
- 2025Caption-Driven Explainability: Probing CNNs for Bias via CLIP24 Oct 2025
- 2025Practical do-Shapley Explanations with Estimand-Agnostic Causal Inference24 Sep 2025
- 2025Spurious-Aware Prototype Refinement for Reliable Out-of-Distribution Detection30 Jun 2025
- 2025Improving Knowledge Distillation Under Unknown Covariate Shift Through Confidence-Guided Data Augmentation2 Jun 2025
29 more
- 2025What is Adversarial Training for Diffusion Models?27 May 2025
- 2025From What to How: Attributing CLIP's Latent Components Reveals Unexpected Semantic Reliance26 May 2025
- 2025Corner Cases: How Size and Position of Objects Challenge ImageNet-Trained Models6 May 2025
- 2025DASH: Detection and Assessment of Systematic Hallucinations of VLMs30 Mar 2025
- 2025Web Artifact Attacks Disrupt Vision Language Models17 Mar 2025
- 2025An interpretable approach to automating the assessment of biofouling in video footage17 Mar 2025
- 2025Quantifying and Improving the Robustness of Retrieval-Augmented Language Models Against Spurious Features in Grounding Data7 Mar 2025
- 2025Post-Hoc Concept Disentanglement: From Correlated to Isolated Concept Representations7 Mar 2025
- 2025Ensuring Medical AI Safety: Interpretability-Driven Detection and Mitigation of Spurious Model Behavior and Associated Data23 Jan 2025
- 2025Mechanistic understanding and validation of large AI models with SemanticLens9 Jan 2025
- 2024Anonymity Unveiled: A Practical Framework for Auditing Data Use in Deep Learning Models10 Sep 2024
- 2024Benchmarking Spurious Bias in Few-Shot Image Classifiers4 Sep 2024
- 2024Antibody DomainBed: Out-of-Distribution Generalization in Therapeutic Protein Design15 Jul 2024
- 2024Explainability of Sub-Field Level Crop Yield Prediction using Remote Sensing11 Jul 2024
- 2024Learning Robust Classifiers with Self-Guided Spurious Correlation Mitigation6 May 2024
- 2024Reactive Model Correction: Mitigating Harm to Task-Relevant Features via Conditional Bias Suppression15 Apr 2024
- 2024Identification of Fine-grained Systematic Errors via Controlled Scene Generation10 Apr 2024
- 2024Backdoor Secrets Unveiled: Identifying Backdoor Data with Optimized Scaled Prediction Consistency15 Mar 2024
- 2024Fine-Tuning Text-To-Image Diffusion Models for Class-Wise Spurious Feature Generation13 Feb 2024
- 2024Clarify: Improving Model Robustness With Natural Language Corrections6 Feb 2024
- 2023Make Me a BNN: A Simple Strategy for Estimating Bayesian Uncertainty from Pre-trained Models23 Dec 2023
- 2023Fast Diffusion-Based Counterfactuals for Shortcut Removal and Generation21 Dec 2023
- 2023DiG-IN: Diffusion Guidance for Investigating Networks -- Uncovering Classifier Differences Neuron Visualisations and Visual Counterfactual Explanations29 Nov 2023
- 2023Automated Classification of Model Errors on ImageNet13 Nov 2023
- 2023Spuriosity Rankings for Free: A Simple Framework for Last Layer Retraining Based on Object Detection31 Oct 2023
- 2023Identifying Systematic Errors in Object Detectors with the SCROD Pipeline23 Sep 2023
- 2023Masking Strategies for Background Bias Removal in Computer Vision Models23 Aug 2023
- 2023TTIDA: Controllable Generative Data Augmentation via Text-to-Text and Text-to-Image Models18 Apr 2023
- 2023Spawrious: A Benchmark for Fine Control of Spurious Correlation Biases9 Mar 2023
- 2025DASH: Detection and Assessment of Systematic Hallucinations of VLMs30 Mar 2025
- 2025Web Artifact Attacks Disrupt Vision Language Models17 Mar 2025
- 2023Spawrious: A Benchmark for Fine Control of Spurious Correlation Biasescited by 41
- 2023Fast Diffusion-Based Counterfactuals for Shortcut Removal and Generationcited by 41
- 2025Mechanistic understanding and validation of large AI models with SemanticLenscited by 29
- 2025Next-Embedding Prediction Makes Strong Vision Learnerscited by 21
- 2023Make Me a BNN: A Simple Strategy for Estimating Bayesian Uncertainty from Pre-trained Modelscited by 15
- 2023TTIDA: Controllable Generative Data Augmentation via Text-to-Text and Text-to-Image Modelscited by 14
- 2024Backdoor Secrets Unveiled: Identifying Backdoor Data with Optimized Scaled Prediction Consistencycited by 13
- 2023DiG-IN: Diffusion Guidance for Investigating Networks -- Uncovering Classifier Differences Neuron Visualisations and Visual Counterfactual Explanationscited by 11
- 2024Learning Robust Classifiers with Self-Guided Spurious Correlation Mitigationcited by 10
- 2023Masking Strategies for Background Bias Removal in Computer Vision Modelscited by 9
- 2024Clarify: Improving Model Robustness With Natural Language Correctionscited by 8
- 2023Automated Classification of Model Errors on ImageNetcited by 6
12 most cited of 36 All 36 (JSON)
- 2026Towards Fast and Disentangled Counterfactuals for Visual Foundation Models1 Oct 2026
- 2026"World Knowledge" in the Weights: Reading Concept Circuits of Vision Transformers8 Sep 2026
- 2026Invisible Shortcuts: Why Vision Encoders Know Your Camera5 Aug 2026
- 2026Unraveling Machine Behavior by Multi-Level Bias Analysis and Detection: Methodology and Application to Computer Vision8 Jul 2026
- 2026Rendering-Aware Bayesian 3D Gaussian Splatting with Native Uncertainty and Adaptive Complexity Control6 Jul 2026
- 2025Next-Embedding Prediction Makes Strong Vision Learners18 Dec 2025
- 2025Weight Space Correlation Analysis: Quantifying Feature Utilization in Deep Learning Models15 Dec 2025
- 2025ConceptScope: Characterizing Dataset Bias via Disentangled Visual Concepts30 Oct 2025
- 2025Caption-Driven Explainability: Probing CNNs for Bias via CLIP24 Oct 2025
- 2025Practical do-Shapley Explanations with Estimand-Agnostic Causal Inference24 Sep 2025
- 2025Spurious-Aware Prototype Refinement for Reliable Out-of-Distribution Detection30 Jun 2025
- 2025Improving Knowledge Distillation Under Unknown Covariate Shift Through Confidence-Guided Data Augmentation2 Jun 2025
12 newest of 36 All 36 (JSON)