A Survey on the Robustness of Computer Vision Models against Common Corruptions
Not on the map. Why?
Abstract (arXiv)
The performance of computer vision models are susceptible to unexpected changes in input images caused by sensor errors or extreme imaging environments, known as common corruptions (e.g. noise, blur, illumination changes). These corruptions can significantly hinder the reliability of these models when deployed in real-world scenarios, yet they are often overlooked when testing model generalization and robustness. In this survey, we present a comprehensive overview of methods that improve the robustness of computer vision models against common corruptions. We categorize methods into three groups based on the model components and training methods they target: data augmentation, learning strategies, and network components. We release a unified benchmark framework (available at urlhttps://github.com/nis-research/CorruptionBenchCV) to compare robustness performance across several datasets, and we address the inconsistencies of evaluation practices in the literature. Our experimental analysis highlights the base corruption robustness of popular vision backbones, revealing that corruption robustness does not necessarily scale with model size and data size. Large models gain negligible robustness improvements, considering the increased computational requirements. To achieve generalizable and robust computer vision models, we foresee the need of developing new learning strategies that efficiently exploit limited data and mitigate unreliable learning behaviors.
Key facts. Cited by 21 papers in the map (data through 14 Oct 2026). Builds on 172 of its 245 references that are in the map. First posted on arXiv 10 May 2023.
Builds on
172 of 245 references.
References · 172
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
- 2021Swin Transformer: Hierarchical Vision Transformer using Shifted Windowscited by 12,139
- 2020A Simple Framework for Contrastive Learning of Visual Representationscited by 12,049
- 2018Representation Learning with Contrastive Predictive Codingcited by 7,777
- 2019Momentum Contrast for Unsupervised Visual Representation Learningcited by 7,513
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2015Batch Normalization: Accelerating Deep Network Training by Reducing Internal Covariate Shiftcited by 7,005
- 2016Densely Connected Convolutional Networkscited by 6,720
- 2019EfficientNet: Rethinking Model Scaling for Convolutional Neural Networkscited by 6,442
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 6,013
38 more
- 2017mixup: Beyond Empirical Risk Minimizationcited by 5,183
- 2017On Calibration of Modern Neural Networkscited by 4,960
- 2017Model-Agnostic Meta-Learning for Fast Adaptation of Deep Networkscited by 4,897
- 2022A ConvNet for the 2020scited by 3,579
- 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,877
- 2020Supervised Contrastive Learningcited by 2,829
- 2016Aggregated Residual Transformations for Deep Neural Networkscited by 2,546
- 2021BEiT: BERT Pre-Training of Image Transformerscited by 2,375
- 2014Conditional Generative Adversarial Netscited by 2,162
- 2020Shortcut Learning in Deep Neural Networkscited by 1,969
- 2019A Survey on Bias and Fairness in Machine Learningcited by 1,917
- 2020The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalizationcited by 1,850
- 2016Understanding deep learning requires rethinking generalizationcited by 1,674
- 2018Group Normalizationcited by 1,524
- 2019Do ImageNet Classifiers Generalize to ImageNet?cited by 1,515
- 2018ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustnesscited by 1,432
- 2020Sharpness-Aware Minimization for Efficiently Improving Generalizationcited by 1,417
- 2019Natural Adversarial Examplescited by 1,408
- 2020Big Self-Supervised Models are Strong Semi-Supervised Learnerscited by 1,380
- 2020WILDS: A Benchmark of in-the-Wild Distribution Shiftscited by 1,375
- 2019Self-training with Noisy Student improves ImageNet classificationcited by 1,311
- 2017Random Erasing Data Augmentationcited by 1,239
- 2016Instance Normalization: The Missing Ingredient for Fast Stylizationcited by 1,198
- 2019A Comprehensive Survey on Transfer Learningcited by 1,160
- 2018Co-teaching: Robust Training of Deep Neural Networks with Extremely Noisy Labelscited by 1,059
- 2019Learning Robust Global Representations by Penalizing Local Predictive Powercited by 1,013
- 2020Meta-Learning in Neural Networks: A Surveycited by 950
- 2017A Closer Look at Memorization in Deep Networkscited by 942
- 2019Big Transfer (BiT): General Visual Representation Learningcited by 769
- 2021Domain Generalization: A Surveycited by 764
- 2018AutoAugment: Learning Augmentation Policies from Datacited by 730
- 2020Image Segmentation Using Deep Learning: A Surveycited by 660
- 2019Self-supervised Visual Feature Learning with Deep Neural Networks: A Surveycited by 657
- 2013Domain Generalization via Invariant Feature Representationcited by 623
- 2021ImageNet-21K Pretraining for the Massescited by 613
- 2020Learning from Noisy Labels with Deep Neural Networks: A Surveycited by 582
- 2021CoAtNet: Marrying Convolution and Attention for All Data Sizescited by 569
- 2018Noise2Noise: Learning Image Restoration without Clean Datacited by 533
50 most cited of 172 All 172 (JSON)
Built on by
Citing papers per year: 2023: 4; 2024: 6; 2025: 5; 2026: 6.
21 papers.
Sort:
By area:
- 2023What do neural networks learn in image classification? A frequency shortcut perspectivecited by 28
- 2024Fourier-basis Functions to Bridge Augmentation Gap: Rethinking Frequency Augmentation in Image Classificationcited by 18
- 2023The RoboDepth Challenge: Methods and Advancements Towards Robust Depth Estimationcited by 13
- 2025Do ImageNet-trained models learn shortcuts? The impact of frequency shortcuts on generalizationcited by 5
- 2023DFM-X: Augmentation by Leveraging Prior Knowledge of Shortcut Learningcited by 4
- 2024Red-Teaming Segment Anything Modelcited by 4
- 2025Learning to See Through a Baby's Eyes: Early Visual Diets Enable Robust Visual Intelligence in Humans and Machinescited by 3
- 2024PushPull-Net: Inhibition-driven ResNet robust to image corruptionscited by 2
- 2024Leveraging Pre-trained Models for Robust Federated Learning for Kidney Stone Type Recognitioncited by 2
- 2023Eigenpatches -- Adversarial Patches from Principal Componentscited by 1
- 2024Discovering interpretable models of scientific image data with deep learningcited by 1
- 2024Traversing the Subspace of Adversarial Patchescited by 1
9 more
- 2026What Limits Vision-and-Language Navigation ?cited by 1
- 2025RT-VLM: Re-Thinking Vision Language Model with 4-Clues for Real-World Object Recognition Robustnesscited by 0
- 2025Every Camera Effect, Every Time, All at Once: 4D Gaussian Ray Tracing for Physics-based Camera Effect Data Generationcited by 0
- 2025ProvRain: Rain-Adaptive Denoising and Vehicle Detection via MobileNet-UNet and Faster R-CNNcited by 0
- 2026Spectral Phase Encoding for Quantum Kernel Methodscited by 0
- 2026FedAgain: A Trust-Based and Robust Federated Learning Strategy for an Automated Kidney Stone Identification in Ureteroscopycited by 0
- 2026Low-Frequency Shortcuts in Texture-Driven Visual Learningcited by 0
- 2026A Mechanistic Analysis of Adversarial Fine-tuning of Vision Transformerscited by 0
- 2026Burst Spiking Neural Networkscited by 0
- 2026Burst Spiking Neural Networks5 Jul 2026
- 2026Low-Frequency Shortcuts in Texture-Driven Visual Learning2 Jun 2026
- 2026A Mechanistic Analysis of Adversarial Fine-tuning of Vision Transformers28 May 2026
- 2026What Limits Vision-and-Language Navigation ?13 May 2026
- 2026FedAgain: A Trust-Based and Robust Federated Learning Strategy for an Automated Kidney Stone Identification in Ureteroscopy19 Mar 2026
- 2026Spectral Phase Encoding for Quantum Kernel Methods23 Feb 2026
- 2025ProvRain: Rain-Adaptive Denoising and Vehicle Detection via MobileNet-UNet and Faster R-CNN24 Nov 2025
- 2025Learning to See Through a Baby's Eyes: Early Visual Diets Enable Robust Visual Intelligence in Humans and Machines18 Nov 2025
- 2025Every Camera Effect, Every Time, All at Once: 4D Gaussian Ray Tracing for Physics-based Camera Effect Data Generation13 Sep 2025
- 2025RT-VLM: Re-Thinking Vision Language Model with 4-Clues for Real-World Object Recognition Robustness1 Sep 2025
- 2025Do ImageNet-trained models learn shortcuts? The impact of frequency shortcuts on generalization5 Mar 2025
- 2024Traversing the Subspace of Adversarial Patches2 Dec 2024
9 more
- 2024Leveraging Pre-trained Models for Robust Federated Learning for Kidney Stone Type Recognition30 Sep 2024
- 2024PushPull-Net: Inhibition-driven ResNet robust to image corruptions7 Aug 2024
- 2024Red-Teaming Segment Anything Model2 Apr 2024
- 2024Fourier-basis Functions to Bridge Augmentation Gap: Rethinking Frequency Augmentation in Image Classification4 Mar 2024
- 2024Discovering interpretable models of scientific image data with deep learning5 Feb 2024
- 2023DFM-X: Augmentation by Leveraging Prior Knowledge of Shortcut Learning12 Aug 2023
- 2023The RoboDepth Challenge: Methods and Advancements Towards Robust Depth Estimation27 Jul 2023
- 2023What do neural networks learn in image classification? A frequency shortcut perspective19 Jul 2023
- 2023Eigenpatches -- Adversarial Patches from Principal Components19 Jun 2023
- 2024Red-Teaming Segment Anything Modelcited by 4
- 2024Red-Teaming Segment Anything Model2 Apr 2024
- 2023What do neural networks learn in image classification? A frequency shortcut perspectivecited by 28
- 2024Fourier-basis Functions to Bridge Augmentation Gap: Rethinking Frequency Augmentation in Image Classificationcited by 18
- 2023The RoboDepth Challenge: Methods and Advancements Towards Robust Depth Estimationcited by 13
- 2025Do ImageNet-trained models learn shortcuts? The impact of frequency shortcuts on generalizationcited by 5
- 2023DFM-X: Augmentation by Leveraging Prior Knowledge of Shortcut Learningcited by 4
- 2025Learning to See Through a Baby's Eyes: Early Visual Diets Enable Robust Visual Intelligence in Humans and Machinescited by 3
- 2024PushPull-Net: Inhibition-driven ResNet robust to image corruptionscited by 2
- 2024Leveraging Pre-trained Models for Robust Federated Learning for Kidney Stone Type Recognitioncited by 2
- 2023Eigenpatches -- Adversarial Patches from Principal Componentscited by 1
- 2024Discovering interpretable models of scientific image data with deep learningcited by 1
- 2024Traversing the Subspace of Adversarial Patchescited by 1
- 2026What Limits Vision-and-Language Navigation ?cited by 1
12 most cited of 19 All 19 (JSON)
- 2026Burst Spiking Neural Networks5 Jul 2026
- 2026Low-Frequency Shortcuts in Texture-Driven Visual Learning2 Jun 2026
- 2026A Mechanistic Analysis of Adversarial Fine-tuning of Vision Transformers28 May 2026
- 2026What Limits Vision-and-Language Navigation ?13 May 2026
- 2026FedAgain: A Trust-Based and Robust Federated Learning Strategy for an Automated Kidney Stone Identification in Ureteroscopy19 Mar 2026
- 2026Spectral Phase Encoding for Quantum Kernel Methods23 Feb 2026
- 2025ProvRain: Rain-Adaptive Denoising and Vehicle Detection via MobileNet-UNet and Faster R-CNN24 Nov 2025
- 2025Learning to See Through a Baby's Eyes: Early Visual Diets Enable Robust Visual Intelligence in Humans and Machines18 Nov 2025
- 2025Every Camera Effect, Every Time, All at Once: 4D Gaussian Ray Tracing for Physics-based Camera Effect Data Generation13 Sep 2025
- 2025Do ImageNet-trained models learn shortcuts? The impact of frequency shortcuts on generalization5 Mar 2025
- 2024Traversing the Subspace of Adversarial Patches2 Dec 2024
- 2024Leveraging Pre-trained Models for Robust Federated Learning for Kidney Stone Type Recognition30 Sep 2024
12 newest of 19 All 19 (JSON)