mlsanityData to 7 Oct 2026

Spurious Features Everywhere -- Large-Scale Detection of Harmful Spurious Features in ImageNet

arXiv 2212.04871 ↗First posted 9 Dec 2022cs.CV cs.LGcited by 41

Not on the map. Why?

Abstract (arXiv)

Benchmark performance of deep learning classifiers alone is not a reliable predictor for the performance of a deployed model. In particular, if the image classifier has picked up spurious features in the training data, its predictions can fail in unexpected ways. In this paper, we develop a framework that allows us to systematically identify spurious features in large datasets like ImageNet. It is based on our neural PCA components and their visualization. Previous work on spurious features often operates in toy settings or requires costly pixel-wise annotations. In contrast, we work with ImageNet and validate our results by showing that presence of the harmful spurious feature of a class alone is sufficient to trigger the prediction of that class. We introduce the novel dataset "Spurious ImageNet" which allows to measure the reliance of any ImageNet classifier on harmful spurious features. Moreover, we introduce SpuFix as a simple mitigation method to reduce the dependence of any ImageNet classifier on previously identified harmful spurious features without requiring additional labels or retraining of the model. We provide code and data at https://github.com/YanNeu/spurious_imagenet .

Key facts. Cited by 41 papers in the map (data through 7 Oct 2026). Builds on 74 of its 93 references that are in the map. First posted on arXiv 9 Dec 2022.

Builds on

74 of 93 references.

References · 74

  1. 2015Deep Residual Learning for Image Recognitioncited by 51,809
  2. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
  3. 2020Language Models are Few-Shot Learnerscited by 32,199
  4. 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
  5. 2020Denoising Diffusion Probabilistic Modelscited by 20,851
  6. 2021Swin Transformer: Hierarchical Vision Transformer using Shifted Windowscited by 12,082
  7. 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,029
  8. 2020Score-Based Generative Modeling through Stochastic Differential Equationscited by 8,964
  9. 2014ImageNet Large Scale Visual Recognition Challengecited by 8,441
  10. 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,185
  11. 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,690
  12. 2017A Unified Approach to Interpreting Model Predictionscited by 6,488
38 more
  1. 2019EfficientNet: Rethinking Model Scaling for Convolutional Neural Networkscited by 6,415
  2. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
  3. 2022Classifier-Free Diffusion Guidancecited by 5,717
  4. 2013Intriguing properties of neural networkscited by 5,114
  5. 2016"Why Should I Trust You?": Explaining the Predictions of Any Classifiercited by 5,040
  6. 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,131
  7. 2022A ConvNet for the 2020scited by 3,545
  8. 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,857
  9. 2016Aggregated Residual Transformations for Deep Neural Networkscited by 2,540
  10. 2016A Baseline for Detecting Misclassified and Out-of-Distribution Examples in Neural Networkscited by 2,362
  11. 2021BEiT: BERT Pre-Training of Image Transformerscited by 2,360
  12. 2019RandAugment: Practical automated data augmentation with a reduced search spacecited by 2,261
  13. 2020Shortcut Learning in Deep Neural Networkscited by 1,928
  14. 2016Adversarial examples in the physical worldcited by 1,762
  15. 2016Concrete Problems in AI Safetycited by 1,582
  16. 2021LAION-400M: Open Dataset of CLIP-Filtered 400 Million Image-Text Pairscited by 1,544
  17. 2019Do ImageNet Classifiers Generalize to ImageNet?cited by 1,507
  18. 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,442
  19. 2018ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustnesscited by 1,430
  20. 2019Self-training with Noisy Student improves ImageNet classificationcited by 1,304
  21. 2021Swin Transformer V2: Scaling Up Capacity and Resolutioncited by 1,215
  22. 2021EfficientNetV2: Smaller Models and Faster Trainingcited by 1,127
  23. 2017Counterfactual Explanations without Opening the Black Box: Automated Decisions and the GDPRcited by 1,086
  24. 2018Robustness May Be at Odds with Accuracycited by 873
  25. 2014Deep Neural Networks are Easily Fooled: High Confidence Predictions for Unrecognizable Imagescited by 774
  26. 2019Big Transfer (BiT): General Visual Representation Learningcited by 766
  27. 2017Evasion Attacks against Machine Learning at Test Timecited by 686
  28. 2022EVA: Exploring the Limits of Masked Visual Representation Learning at Scalecited by 685
  29. 2021Maximum Likelihood Training of Score-Based Diffusion Modelscited by 670
  30. 2018Recognition in Terra Incognitacited by 655
  31. 2021How to train your ViT? Data, Augmentation, and Regularization in Vision Transformerscited by 562
  32. 2017Interpretation of Neural Networks is Fragilecited by 443
  33. 2019Fooling LIME and SHAP: Adversarial Attacks on Post hoc Explanation Methodscited by 440
  34. 2022DeiT III: Revenge of the ViTcited by 417
  35. 2018Confounding variables can degrade generalization performance of radiological deep learning modelscited by 374
  36. 2020The Pitfalls of Simplicity Bias in Neural Networkscited by 349
  37. 2020Noise or Signal: The Role of Image Backgrounds in Object Recognitioncited by 342
  38. 2020Are we done with ImageNet?cited by 329

50 most cited of 74 All 74 (JSON)

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2023: 9; 2024: 10; 2025: 17; 2026: 5.

41 papers.

Sort:

By area:

  1. 2023Spawrious: A Benchmark for Fine Control of Spurious Correlation Biasescited by 41
  2. 2023Fast Diffusion-Based Counterfactuals for Shortcut Removal and Generationcited by 41
  3. 2025Mechanistic understanding and validation of large AI models with SemanticLenscited by 29
  4. 2025Next-Embedding Prediction Makes Strong Vision Learnerscited by 21
  5. 2023Make Me a BNN: A Simple Strategy for Estimating Bayesian Uncertainty from Pre-trained Modelscited by 15
  6. 2023TTIDA: Controllable Generative Data Augmentation via Text-to-Text and Text-to-Image Modelscited by 14
  7. 2025DASH: Detection and Assessment of Systematic Hallucinations of VLMscited by 14
  8. 2024Backdoor Secrets Unveiled: Identifying Backdoor Data with Optimized Scaled Prediction Consistencycited by 13
  9. 2023DiG-IN: Diffusion Guidance for Investigating Networks -- Uncovering Classifier Differences Neuron Visualisations and Visual Counterfactual Explanationscited by 11
  10. 2024Learning Robust Classifiers with Self-Guided Spurious Correlation Mitigationcited by 10
  11. 2025Quantifying and Improving the Robustness of Retrieval-Augmented Language Models Against Spurious Features in Grounding Datacited by 10
  12. 2023Masking Strategies for Background Bias Removal in Computer Vision Modelscited by 9
29 more
  1. 2024Clarify: Improving Model Robustness With Natural Language Correctionscited by 8
  2. 2023Automated Classification of Model Errors on ImageNetcited by 6
  3. 2024Benchmarking Spurious Bias in Few-Shot Image Classifierscited by 6
  4. 2025Practical do-Shapley Explanations with Estimand-Agnostic Causal Inferencecited by 6
  5. 2024Reactive Model Correction: Mitigating Harm to Task-Relevant Features via Conditional Bias Suppressioncited by 5
  6. 2025ConceptScope: Characterizing Dataset Bias via Disentangled Visual Conceptscited by 5
  7. 2023Identifying Systematic Errors in Object Detectors with the SCROD Pipelinecited by 4
  8. 2024Fine-Tuning Text-To-Image Diffusion Models for Class-Wise Spurious Feature Generationcited by 4
  9. 2024Anonymity Unveiled: A Practical Framework for Auditing Data Use in Deep Learning Modelscited by 4
  10. 2025From What to How: Attributing CLIP's Latent Components Reveals Unexpected Semantic Reliancecited by 4
  11. 2024Antibody DomainBed: Out-of-Distribution Generalization in Therapeutic Protein Designcited by 3
  12. 2025Ensuring Medical AI Safety: Interpretability-Driven Detection and Mitigation of Spurious Model Behavior and Associated Datacited by 2
  13. 2025Web Artifact Attacks Disrupt Vision Language Modelscited by 2
  14. 2025Improving Knowledge Distillation Under Unknown Covariate Shift Through Confidence-Guided Data Augmentationcited by 2
  15. 2025Spurious-Aware Prototype Refinement for Reliable Out-of-Distribution Detectioncited by 2
  16. 2026Rendering-Aware Bayesian 3D Gaussian Splatting with Native Uncertainty and Adaptive Complexity Controlcited by 2
  17. 2026Unraveling Machine Behavior by Multi-Level Bias Analysis and Detection: Methodology and Application to Computer Visioncited by 2
  18. 2025Post-Hoc Concept Disentanglement: From Correlated to Isolated Concept Representationscited by 1
  19. 2025An interpretable approach to automating the assessment of biofouling in video footagecited by 1
  20. 2025Corner Cases: How Size and Position of Objects Challenge ImageNet-Trained Modelscited by 1
  21. 2023Spuriosity Rankings for Free: A Simple Framework for Last Layer Retraining Based on Object Detectioncited by 0
  22. 2024Identification of Fine-grained Systematic Errors via Controlled Scene Generationcited by 0
  23. 2024Explainability of Sub-Field Level Crop Yield Prediction using Remote Sensingcited by 0
  24. 2025What is Adversarial Training for Diffusion Models?cited by 0
  25. 2025Caption-Driven Explainability: Probing CNNs for Bias via CLIPcited by 0
  26. 2025Weight Space Correlation Analysis: Quantifying Feature Utilization in Deep Learning Modelscited by 0
  27. 2026Invisible Shortcuts: Why Vision Encoders Know Your Cameracited by 0
  28. 2026"World Knowledge" in the Weights: Reading Concept Circuits of Vision Transformerscited by 0
  29. 2026Towards Fast and Disentangled Counterfactuals for Visual Foundation Modelscited by 0