HybridAugment++: Unified Frequency Spectra Perturbations for Model Robustness
Not on the map. Why?
Abstract (arXiv)
Convolutional Neural Networks (CNN) are known to exhibit poor generalization performance under distribution shifts. Their generalization have been studied extensively, and one line of work approaches the problem from a frequency-centric perspective. These studies highlight the fact that humans and CNNs might focus on different frequency components of an image. First, inspired by these observations, we propose a simple yet effective data augmentation method HybridAugment that reduces the reliance of CNNs on high-frequency components, and thus improves their robustness while keeping their clean accuracy high. Second, we propose HybridAugment++, which is a hierarchical augmentation method that attempts to unify various frequency-spectrum augmentations. HybridAugment++ builds on HybridAugment, and also reduces the reliance of CNNs on the amplitude component of images, and promotes phase information instead. This unification results in competitive to or better than state-of-the-art results on clean accuracy (CIFAR-10/100 and ImageNet), corruption benchmarks (ImageNet-C, CIFAR-10-C and CIFAR-100-C), adversarial robustness on CIFAR-10 and out-of-distribution detection on various datasets. HybridAugment and HybridAugment++ are implemented in a few lines of code, does not require extra data, ensemble models or additional networks.
Key facts. Cited by 12 papers in the map (data through 14 Oct 2026). Builds on 60 of its 74 references that are in the map. First posted on arXiv 21 Jul 2023.
Builds on
60 of 74 references.
References · 60
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2021Swin Transformer: Hierarchical Vision Transformer using Shifted Windowscited by 12,139
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,733
- 2016Densely Connected Convolutional Networkscited by 6,720
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2017mixup: Beyond Empirical Risk Minimizationcited by 5,183
- 2013Intriguing properties of neural networkscited by 5,155
- 2016Wide Residual Networkscited by 3,070
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,998
- 2019CutMix: Regularization Strategy to Train Strong Classifiers with Localizable Featurescited by 2,884
- 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,877
38 more
- 2020Supervised Contrastive Learningcited by 2,829
- 2016Aggregated Residual Transformations for Deep Neural Networkscited by 2,546
- 2016A Baseline for Detecting Misclassified and Out-of-Distribution Examples in Neural Networkscited by 2,385
- 2020The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalizationcited by 1,850
- 2017Improved Regularization of Convolutional Neural Networks with Cutoutcited by 1,628
- 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,451
- 2018ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustnesscited by 1,432
- 2015LSUN: Construction of a Large-scale Image Dataset using Deep Learning with Humans in the Loopcited by 1,355
- 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,318
- 2014Striving for Simplicity: The All Convolutional Netcited by 990
- 2019AugMix: A Simple Data Processing Method to Improve Robustness and Uncertaintycited by 901
- 2021Generalized Out-of-Distribution Detection: A Surveycited by 802
- 2018AutoAugment: Learning Augmentation Policies from Datacited by 730
- 2020Fast is better than free: Revisiting adversarial trainingcited by 727
- 2017Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networkscited by 486
- 2020CSI: Novelty Detection via Contrastive Learning on Distributionally Shifted Instancescited by 441
- 2019Making Convolutional Networks Shift-Invariant Againcited by 391
- 2020Do Adversarially Robust ImageNet Models Transfer Better?cited by 316
- 2019High Frequency Component Helps Explain the Generalization of Convolutional Neural Networkscited by 310
- 2019A Fourier Perspective on Model Robustness in Computer Visioncited by 288
- 2017MagNet: a Two-Pronged Defense against Adversarial Examplescited by 269
- 2020Geometry-aware Instance-reweighted Adversarial Trainingcited by 198
- 2019MNIST-C: A Robustness Benchmark for Computer Visioncited by 138
- 2021PixMix: Dreamlike Pictures Comprehensively Improve Safety Measurescited by 131
- 2022Frequency Domain Model Augmentation for Adversarial Attackcited by 130
- 20223D Common Corruptions and Data Augmentationcited by 119
- 2021On Interaction Between Augmentations and Corruptions in Natural Corruption Robustnesscited by 97
- 2021AugMax: Adversarial Composition of Random Augmentations for Robust Trainingcited by 90
- 2017SafetyNet: Detecting and Rejecting Adversarial Examples Robustlycited by 76
- 2021On the effectiveness of adversarial training against common corruptionscited by 71
- 2021Amplitude-Phase Recombination: Rethinking Robustness of Convolutional Neural Networks in Frequency Domaincited by 71
- 2020An Analysis of Adversarial Attacks and Defenses on Autonomous Driving Modelscited by 68
- 2020Wavelet Integrated CNNs for Noise-Robust Image Classificationcited by 60
- 2021Adversarial Robustness Comparison of Vision Transformer and MLP-Mixer to CNNscited by 57
- 2020Revisiting Batch Normalization for Improving Corruption Robustnesscited by 55
- 2021PRIME: A few primitives can boost robustness to common corruptionscited by 40
- 2021Improving robustness against common corruptions with frequency biased modelscited by 34
- 2020Towards Frequency-Based Explanation for Robust CNNcited by 29
50 most cited of 60 All 60 (JSON)
Built on by
Citing papers per year: 2023: 1; 2024: 6; 2025: 4; 2026: 1.
12 papers.
- 2024Fourier-basis Functions to Bridge Augmentation Gap: Rethinking Frequency Augmentation in Image Classificationcited by 18
- 2025FreqDebias: Towards Generalizable Deepfake Detection via Consistency-Driven Frequency Debiasingcited by 14
- 2025Fast Adversarial Training with Weak-to-Strong Spatial-Temporal Consistency in the Frequency Domain on Videoscited by 9
- 2023Domain Generalization with Vital Phase Augmentationcited by 5
- 2024Mitigating Low-Frequency Bias: Feature Recalibration and Frequency Attention Regularization for Adversarial Robustnesscited by 3
- 2024FFT-based Selection and Optimization of Statistics for Robust Recognition of Severely Corrupted Imagescited by 1
- 2024Enhanced Model Robustness to Input Corruptions by Per-corruption Adaptation of Normalization Statisticscited by 1
- 2024Exploring connections of spectral analysis and transfer learning in medical imagingcited by 1
- 2024Robust Network Learning via Inverse Scale Variational Sparsificationcited by 0
- 2025A Modern Look at Simplicity Bias in Image Classification Taskscited by 0
- 2025D-GAP: Improving Out-of-Domain Robustness via Dataset-Agnostic and Gradient-Guided Augmentation in Frequency and Pixel Spacescited by 0
- 2026Suppress and Diversify: Refining Robust Pathways for Corruption Robustnesscited by 0
- 2026Suppress and Diversify: Refining Robust Pathways for Corruption Robustness7 Aug 2026
- 2025D-GAP: Improving Out-of-Domain Robustness via Dataset-Agnostic and Gradient-Guided Augmentation in Frequency and Pixel Spaces14 Nov 2025
- 2025FreqDebias: Towards Generalizable Deepfake Detection via Consistency-Driven Frequency Debiasing26 Sep 2025
- 2025A Modern Look at Simplicity Bias in Image Classification Tasks13 Sep 2025
- 2025Fast Adversarial Training with Weak-to-Strong Spatial-Temporal Consistency in the Frequency Domain on Videos21 Apr 2025
- 2024Robust Network Learning via Inverse Scale Variational Sparsification27 Sep 2024
- 2024Exploring connections of spectral analysis and transfer learning in medical imaging16 Jul 2024
- 2024Enhanced Model Robustness to Input Corruptions by Per-corruption Adaptation of Normalization Statistics8 Jul 2024
- 2024Mitigating Low-Frequency Bias: Feature Recalibration and Frequency Attention Regularization for Adversarial Robustness4 Jul 2024
- 2024FFT-based Selection and Optimization of Statistics for Robust Recognition of Severely Corrupted Images21 Mar 2024
- 2024Fourier-basis Functions to Bridge Augmentation Gap: Rethinking Frequency Augmentation in Image Classification4 Mar 2024
- 2023Domain Generalization with Vital Phase Augmentation27 Dec 2023