mlsanityData to 14 Oct 2026

HybridAugment++: Unified Frequency Spectra Perturbations for Model Robustness

arXiv 2307.11823 ↗First posted 21 Jul 2023cs.CV cs.AIcited by 12

Not on the map. Why?

Abstract (arXiv)

Convolutional Neural Networks (CNN) are known to exhibit poor generalization performance under distribution shifts. Their generalization have been studied extensively, and one line of work approaches the problem from a frequency-centric perspective. These studies highlight the fact that humans and CNNs might focus on different frequency components of an image. First, inspired by these observations, we propose a simple yet effective data augmentation method HybridAugment that reduces the reliance of CNNs on high-frequency components, and thus improves their robustness while keeping their clean accuracy high. Second, we propose HybridAugment++, which is a hierarchical augmentation method that attempts to unify various frequency-spectrum augmentations. HybridAugment++ builds on HybridAugment, and also reduces the reliance of CNNs on the amplitude component of images, and promotes phase information instead. This unification results in competitive to or better than state-of-the-art results on clean accuracy (CIFAR-10/100 and ImageNet), corruption benchmarks (ImageNet-C, CIFAR-10-C and CIFAR-100-C), adversarial robustness on CIFAR-10 and out-of-distribution detection on various datasets. HybridAugment and HybridAugment++ are implemented in a few lines of code, does not require extra data, ensemble models or additional networks.

Key facts. Cited by 12 papers in the map (data through 14 Oct 2026). Builds on 60 of its 74 references that are in the map. First posted on arXiv 21 Jul 2023.

Builds on

60 of 74 references.

References · 60

  1. 2015Deep Residual Learning for Image Recognitioncited by 52,096
  2. 2021Swin Transformer: Hierarchical Vision Transformer using Shifted Windowscited by 12,139
  3. 2014Explaining and Harnessing Adversarial Examplescited by 7,364
  4. 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,733
  5. 2016Densely Connected Convolutional Networkscited by 6,720
  6. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
  7. 2017mixup: Beyond Empirical Risk Minimizationcited by 5,183
  8. 2013Intriguing properties of neural networkscited by 5,155
  9. 2016Wide Residual Networkscited by 3,070
  10. 2016Towards Evaluating the Robustness of Neural Networkscited by 2,998
  11. 2019CutMix: Regularization Strategy to Train Strong Classifiers with Localizable Featurescited by 2,884
  12. 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,877
38 more
  1. 2020Supervised Contrastive Learningcited by 2,829
  2. 2016Aggregated Residual Transformations for Deep Neural Networkscited by 2,546
  3. 2016A Baseline for Detecting Misclassified and Out-of-Distribution Examples in Neural Networkscited by 2,385
  4. 2020The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalizationcited by 1,850
  5. 2017Improved Regularization of Convolutional Neural Networks with Cutoutcited by 1,628
  6. 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,451
  7. 2018ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustnesscited by 1,432
  8. 2015LSUN: Construction of a Large-scale Image Dataset using Deep Learning with Humans in the Loopcited by 1,355
  9. 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,318
  10. 2014Striving for Simplicity: The All Convolutional Netcited by 990
  11. 2019AugMix: A Simple Data Processing Method to Improve Robustness and Uncertaintycited by 901
  12. 2021Generalized Out-of-Distribution Detection: A Surveycited by 802
  13. 2018AutoAugment: Learning Augmentation Policies from Datacited by 730
  14. 2020Fast is better than free: Revisiting adversarial trainingcited by 727
  15. 2017Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networkscited by 486
  16. 2020CSI: Novelty Detection via Contrastive Learning on Distributionally Shifted Instancescited by 441
  17. 2019Making Convolutional Networks Shift-Invariant Againcited by 391
  18. 2020Do Adversarially Robust ImageNet Models Transfer Better?cited by 316
  19. 2019High Frequency Component Helps Explain the Generalization of Convolutional Neural Networkscited by 310
  20. 2019A Fourier Perspective on Model Robustness in Computer Visioncited by 288
  21. 2017MagNet: a Two-Pronged Defense against Adversarial Examplescited by 269
  22. 2020Geometry-aware Instance-reweighted Adversarial Trainingcited by 198
  23. 2019MNIST-C: A Robustness Benchmark for Computer Visioncited by 138
  24. 2021PixMix: Dreamlike Pictures Comprehensively Improve Safety Measurescited by 131
  25. 2022Frequency Domain Model Augmentation for Adversarial Attackcited by 130
  26. 20223D Common Corruptions and Data Augmentationcited by 119
  27. 2021On Interaction Between Augmentations and Corruptions in Natural Corruption Robustnesscited by 97
  28. 2021AugMax: Adversarial Composition of Random Augmentations for Robust Trainingcited by 90
  29. 2017SafetyNet: Detecting and Rejecting Adversarial Examples Robustlycited by 76
  30. 2021On the effectiveness of adversarial training against common corruptionscited by 71
  31. 2021Amplitude-Phase Recombination: Rethinking Robustness of Convolutional Neural Networks in Frequency Domaincited by 71
  32. 2020An Analysis of Adversarial Attacks and Defenses on Autonomous Driving Modelscited by 68
  33. 2020Wavelet Integrated CNNs for Noise-Robust Image Classificationcited by 60
  34. 2021Adversarial Robustness Comparison of Vision Transformer and MLP-Mixer to CNNscited by 57
  35. 2020Revisiting Batch Normalization for Improving Corruption Robustnesscited by 55
  36. 2021PRIME: A few primitives can boost robustness to common corruptionscited by 40
  37. 2021Improving robustness against common corruptions with frequency biased modelscited by 34
  38. 2020Towards Frequency-Based Explanation for Robust CNNcited by 29

50 most cited of 60 All 60 (JSON)

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2023: 1; 2024: 6; 2025: 4; 2026: 1.

12 papers.