Interpolation for Robust Learning: Data Augmentation on Wasserstein Geodesics
Not on the map. Why?
Abstract (arXiv)
We propose to study and promote the robustness of a model as per its performance through the interpolation of training data distributions. Specifically, (1) we augment the data by finding the worst-case Wasserstein barycenter on the geodesic connecting subpopulation distributions of different categories. (2) We regularize the model for smoother performance on the continuous geodesic path connecting subpopulation distributions. (3) Additionally, we provide a theoretical guarantee of robustness improvement and investigate how the geodesic location and the sample size contribute, respectively. Experimental validations of the proposed strategy on textitfour datasets, including CIFAR-100 and ImageNet, establish the efficacy of our method, e.g., our method improves the baselines' certifiable robustness on CIFAR10 up to 7.7%, with 16.8% on empirical robustness on CIFAR-100. Our work provides a new perspective of model robustness through the lens of Wasserstein geodesic-based interpolation with a practical off-the-shelf strategy that can be combined with existing robust training methods.
Key facts. Cited by 3 papers in the map (data through 7 Oct 2026). Builds on 89 of its 118 references that are in the map. First posted on arXiv 4 Feb 2023.
Builds on
89 of 118 references.
References · 89
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,539
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2022Generative Adversarial Networkscited by 5,603
- 2017mixup: Beyond Empirical Risk Minimizationcited by 5,155
- 2013Intriguing properties of neural networkscited by 5,114
- 2014Neural Machine Translation by Jointly Learning to Align and Translatecited by 4,530
- 2019Generative Modeling by Estimating Gradients of the Data Distributioncited by 4,067
- 2013Auto-Encoding Variational Bayescited by 3,980
- 2022Flow Straight and Fast: Learning to Generate and Transfer Data with Rectified Flowcited by 3,550
38 more
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
- 2019CutMix: Regularization Strategy to Train Strong Classifiers with Localizable Featurescited by 2,875
- 2013Sinkhorn Distances: Lightspeed Computation of Optimal Transportation Distancescited by 2,277
- 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,324
- 2022Building Normalizing Flows with Stochastic Interpolantscited by 964
- 2016Adversarial Machine Learning at Scalecited by 934
- 2019AugMix: A Simple Data Processing Method to Improve Robustness and Uncertaintycited by 897
- 2018Generalizing to Unseen Domains via Adversarial Data Augmentationcited by 451
- 2019Unlabeled Data Improves Adversarial Robustnesscited by 415
- 2017A Downsampled Variant of ImageNet as an Alternative to the CIFAR datasetscited by 374
- 2018Learning Models with Uniform Performance via Distributionally Robust Optimizationcited by 334
- 2019Provably Robust Deep Learning via Adversarially Trained Smoothed Classifierscited by 328
- 2018Adversarially Robust Generalization Requires More Datacited by 318
- 2017Joint Distribution Optimal Transportation for Domain Adaptationcited by 280
- 2020Puzzle Mix: Exploiting Saliency and Local Statistics for Optimal Mixupcited by 260
- 2019Optimal transport mapping via input convex neural networkscited by 202
- 2022Improving Out-of-Distribution Robustness via Selective Augmentationcited by 202
- 2020How Does Mixup Help With Robustness and Generalization?cited by 193
- 2021Data Augmentation Can Improve Robustnesscited by 193
- 2020Theoretical Analysis of Self-Training with Deep Networks on Unlabeled Datacited by 179
- 2018Certified Adversarial Robustness with Additive Noisecited by 178
- 2018Robustness via curvature regularization, and vice versacited by 174
- 2020Geometric Dataset Distances via Optimal Transportcited by 157
- 2020SaliencyMix: A Saliency Guided Data Augmentation Strategy for Better Regularizationcited by 149
- 2019Robust Learning with Jacobian Regularizationcited by 127
- 2021Co-Mixup: Saliency Guided Joint Mixup with Supermodular Diversitycited by 127
- 2021Unbalanced minibatch Optimal Transport; applications to Domain Adaptationcited by 123
- 2022Neural Optimal Transportcited by 123
- 2017Large-Scale Optimal Transport and Mapping Estimationcited by 120
- 2020MACER: Attack-free and Scalable Robust Training via Maximizing Certified Radiuscited by 114
- 2021Robust Learning Meets Generative Models: Can Proxy Distributions Improve Adversarial Robustness?cited by 113
- 2019Defense Against Adversarial Attacks Using Feature Scattering-based Adversarial Trainingcited by 95
- 2020SSMBA: Self-Supervised Manifold Based Data Augmentation for Improving Out-of-Domain Robustnesscited by 94
- 2020Convex Potential Flows: Universal Probability Distributions with Optimal Transport and Convex Optimizationcited by 89
- 2021Entropic estimation of optimal transport mapscited by 87
- 2019Learning with minibatch Wasserstein : asymptotic and gradient propertiescited by 83
- 2014Convolutional Neural Networks at Constrained Time Costcited by 81
- 2020Adversarial Distributional Training for Robust Deep Learningcited by 79
50 most cited of 89 All 89 (JSON)
Built on by
Citing papers per year: 2024: 1; 2025: 2.
3 papers.
- 2024BSDA: Bayesian Random Semantic Data Augmentation for Medical Image Classificationcited by 5
- 2025Wasserstein Gradient Flows for Scalable and Regularized Barycenter Computationcited by 1
- 2025A Supervised Machine Learning Framework for Multipactor Breakdown Prediction in High-Power Radio Frequency Devices and Accelerator Components: A Case Study in Planar Geometrycited by 0
- 2025Wasserstein Gradient Flows for Scalable and Regularized Barycenter Computation6 Oct 2025
- 2025A Supervised Machine Learning Framework for Multipactor Breakdown Prediction in High-Power Radio Frequency Devices and Accelerator Components: A Case Study in Planar Geometry23 Jul 2025
- 2024BSDA: Bayesian Random Semantic Data Augmentation for Medical Image Classification10 Mar 2024