Effective Robustness against Natural Distribution Shifts for Models with Different Training Data
Not on the map. Why?
Abstract (arXiv)
"Effective robustness" measures the extra out-of-distribution (OOD) robustness beyond what can be predicted from the in-distribution (ID) performance. Existing effective robustness evaluations typically use a single test set such as ImageNet to evaluate the ID accuracy. This becomes problematic when evaluating models trained on different data distributions, e.g., comparing models trained on ImageNet vs. zero-shot language-image pre-trained models trained on LAION. In this paper, we propose a new evaluation metric to evaluate and compare the effective robustness of models trained on different data. To do this, we control for the accuracy on multiple ID test sets that cover the training distributions for all the evaluated models. Our new evaluation metric provides a better estimate of effective robustness when there are models with different training data. It may also explain the surprising effective robustness gains of zero-shot CLIP-like models exhibited in prior works that used ImageNet as the only ID test set, while the gains diminish under our new evaluation. Additional artifacts including interactive visualizations are provided at https://shizhouxing.github.io/effective-robustness.
Key facts. Cited by 13 papers in the map (data through 7 Oct 2026). Builds on 40 of its 49 references that are in the map. First posted on arXiv 2 Feb 2023.
Builds on
40 of 49 references.
References · 40
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
- 2020A Simple Framework for Contrastive Learning of Visual Representationscited by 11,979
- 2021Scaling Up Visual and Vision-Language Representation Learning With Noisy Text Supervisioncited by 3,848
- 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,857
- 2020The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalizationcited by 1,842
- 2021LAION-400M: Open Dataset of CLIP-Filtered 400 Million Image-Text Pairscited by 1,544
- 2019Do ImageNet Classifiers Generalize to ImageNet?cited by 1,507
- 2019Natural Adversarial Examplescited by 1,401
- 2020Big Self-Supervised Models are Strong Semi-Supervised Learnerscited by 1,375
- 2022Model soups: averaging weights of multiple fine-tuned models improves accuracy without increasing inference timecited by 1,366
28 more
- 2019Learning Robust Global Representations by Penalizing Local Predictive Powercited by 1,010
- 2021Robust fine-tuning of zero-shot modelscited by 785
- 2022Fine-Tuning can Distort Pretrained Features and Underperform Out-of-Distributioncited by 722
- 2020Contrastive Learning of Medical Visual Representations from Paired Images and Textcited by 636
- 2020Measuring Robustness to Natural Distribution Shifts in Image Classificationcited by 452
- 2021SLIP: Self-supervision meets Language-Image Pre-trainingcited by 434
- 2020VirTex: Learning Visual Representations from Textual Annotationscited by 338
- 2021Accuracy on the Line: On the Strong Correlation Between Out-of-Distribution and In-Distribution Generalizationcited by 248
- 2018Do CIFAR-10 Classifiers Generalize to CIFAR-10?cited by 197
- 2022Data Determines Distributional Robustness in Contrastive Language Image Pre-training (CLIP)cited by 137
- 2020Learning Visual Representations with Caption Annotationscited by 123
- 2022Revisiting Weakly Supervised Pre-Training of Visual Perception Modelscited by 116
- 2021Salient ImageNet: How to discover spurious features in Deep Learning?cited by 114
- 2020The Effect of Natural Distribution Shift on Question Answering Modelscited by 104
- 2022Quality Not Quantity: On the Interaction between Dataset Design and Robustness of CLIPcited by 97
- 2022Agreement-on-the-Line: Predicting the Performance of Neural Networks under Distribution Shiftcited by 94
- 2022A Whac-A-Mole Dilemma: Shortcuts Come in Multiples Where Mitigating One Amplifies Otherscited by 85
- 2022Vision Models Are More Robust And Fair When Pretrained On Uncurated Images Without Supervisioncited by 80
- 2021The Evolution of Out-of-Distribution Robustness Throughout Fine-Tuningcited by 74
- 2019Cold Case: The Lost MNIST Digitscited by 61
- 2022When does dough become a bagel? Analyzing the remaining mistakes on ImageNetcited by 60
- 2022ID and OOD Performance Are Sometimes Inversely Correlated on Real-world Datasetscited by 44
- 2022ImageNet-X: Understanding Model Mistakes with Factor of Variation Annotationscited by 44
- 2022Is a Caption Worth a Thousand Images? A Controlled Study for Representation Learningcited by 39
- 2021If your data distribution shifts, use self-learningcited by 36
- 2022Exploring The Landscape of Distributional Robustness for Question Answering Modelscited by 23
- 2021Does language help generalization in vision models?cited by 19
- 2022Core Risk Minimization using Salient ImageNetcited by 15
Built on by
Citing papers per year: 2023: 4; 2024: 5; 2025: 2; 2026: 2.
13 papers.
Sort:
By area:
- 2024A Sober Look at the Robustness of CLIPs to Spurious Featurescited by 38
- 2024On Catastrophic Inheritance of Large Foundation Modelscited by 15
- 2023Does Progress On Object Recognition Benchmarks Improve Real-World Generalization?cited by 13
- 2024Toward a Holistic Evaluation of Robustness in CLIP Modelscited by 13
- 2023A Systematic Survey of Prompt Engineering on Vision-Language Foundation Modelscited by 12
- 2024LCA-on-the-Line: Benchmarking Out-of-Distribution Generalization with Class Taxonomiescited by 12
- 2023Visual Data-Type Understanding does not emerge from Scaling Vision-Language Modelscited by 9
- 2025Position: Stop Evaluating AI with Human Tests, Develop Principled, AI-specific Tests insteadcited by 7
- 2023Interpreting CLIP: Insights on the Robustness to ImageNet Distribution Shiftscited by 6
- 2025Bridging Distribution Shift and AI Safety: Conceptual and Methodological Synergiescited by 2
- 2024Investigating the Semantic Robustness of CLIP-based Zero-Shot Anomaly Segmentationcited by 0
- 2026Sparse Autoencoders enable Robust and Interpretable Fine-tuning of CLIP modelscited by 0
1 more
- 2026Robust Multi-Model Fitting through Learning Neighbor Regions14 Sep 2026
- 2026Sparse Autoencoders enable Robust and Interpretable Fine-tuning of CLIP models15 May 2026
- 2025Position: Stop Evaluating AI with Human Tests, Develop Principled, AI-specific Tests instead30 Jul 2025
- 2025Bridging Distribution Shift and AI Safety: Conceptual and Methodological Synergies28 May 2025
- 2024Toward a Holistic Evaluation of Robustness in CLIP Models2 Oct 2024
- 2024LCA-on-the-Line: Benchmarking Out-of-Distribution Generalization with Class Taxonomies22 Jul 2024
- 2024Investigating the Semantic Robustness of CLIP-based Zero-Shot Anomaly Segmentation13 May 2024
- 2024A Sober Look at the Robustness of CLIPs to Spurious Features18 Mar 2024
- 2024On Catastrophic Inheritance of Large Foundation Models2 Feb 2024
- 2023Interpreting CLIP: Insights on the Robustness to ImageNet Distribution Shifts19 Oct 2023
- 2023Visual Data-Type Understanding does not emerge from Scaling Vision-Language Models12 Oct 2023
- 2023Does Progress On Object Recognition Benchmarks Improve Real-World Generalization?24 Jul 2023
1 more
- 2024A Sober Look at the Robustness of CLIPs to Spurious Featurescited by 38
- 2024Toward a Holistic Evaluation of Robustness in CLIP Modelscited by 13
- 2023A Systematic Survey of Prompt Engineering on Vision-Language Foundation Modelscited by 12
- 2023Visual Data-Type Understanding does not emerge from Scaling Vision-Language Modelscited by 9
- 2026Sparse Autoencoders enable Robust and Interpretable Fine-tuning of CLIP modelscited by 0
- 2026Sparse Autoencoders enable Robust and Interpretable Fine-tuning of CLIP models15 May 2026
- 2024Toward a Holistic Evaluation of Robustness in CLIP Models2 Oct 2024
- 2024A Sober Look at the Robustness of CLIPs to Spurious Features18 Mar 2024
- 2023Visual Data-Type Understanding does not emerge from Scaling Vision-Language Models12 Oct 2023
- 2023A Systematic Survey of Prompt Engineering on Vision-Language Foundation Models24 Jul 2023
- 2024On Catastrophic Inheritance of Large Foundation Modelscited by 15
- 2023Does Progress On Object Recognition Benchmarks Improve Real-World Generalization?cited by 13
- 2024LCA-on-the-Line: Benchmarking Out-of-Distribution Generalization with Class Taxonomiescited by 12
- 2025Position: Stop Evaluating AI with Human Tests, Develop Principled, AI-specific Tests insteadcited by 7
- 2023Interpreting CLIP: Insights on the Robustness to ImageNet Distribution Shiftscited by 6
- 2025Bridging Distribution Shift and AI Safety: Conceptual and Methodological Synergiescited by 2
- 2024Investigating the Semantic Robustness of CLIP-based Zero-Shot Anomaly Segmentationcited by 0
- 2026Robust Multi-Model Fitting through Learning Neighbor Regionscited by 0
- 2026Robust Multi-Model Fitting through Learning Neighbor Regions14 Sep 2026
- 2025Position: Stop Evaluating AI with Human Tests, Develop Principled, AI-specific Tests instead30 Jul 2025
- 2025Bridging Distribution Shift and AI Safety: Conceptual and Methodological Synergies28 May 2025
- 2024LCA-on-the-Line: Benchmarking Out-of-Distribution Generalization with Class Taxonomies22 Jul 2024
- 2024Investigating the Semantic Robustness of CLIP-based Zero-Shot Anomaly Segmentation13 May 2024
- 2024On Catastrophic Inheritance of Large Foundation Models2 Feb 2024
- 2023Interpreting CLIP: Insights on the Robustness to ImageNet Distribution Shifts19 Oct 2023
- 2023Does Progress On Object Recognition Benchmarks Improve Real-World Generalization?24 Jul 2023