Assessing Visually-Continuous Corruption Robustness of Neural Networks Relative to Human Performance
Not on the map. Why?
Abstract (arXiv)
While Neural Networks (NNs) have surpassed human accuracy in image classification on ImageNet, they often lack robustness against image corruption, i.e., corruption robustness. Yet such robustness is seemingly effortless for human perception. In this paper, we propose visually-continuous corruption robustness (VCR) -- an extension of corruption robustness to allow assessing it over the wide and continuous range of changes that correspond to the human perceptive quality (i.e., from the original image to the full distortion of all perceived visual information), along with two novel human-aware metrics for NN evaluation. To compare VCR of NNs with human perception, we conducted extensive experiments on 14 commonly used image corruptions with 7,718 human participants and state-of-the-art robust NN models with different training objectives (e.g., standard, adversarial, corruption robustness), different architectures (e.g., convolution NNs, vision transformers), and different amounts of training data augmentation. Our study showed that: 1) assessing robustness against continuous corruption can reveal insufficient robustness undetected by existing benchmarks; as a result, 2) the gap between NN and human robustness is larger than previously known; and finally, 3) some image corruptions have a similar impact on human perception, offering opportunities for more cost-effective robustness assessments. Our validation set with 14 image corruptions, human robustness data, and the evaluation code is provided as a toolbox and a benchmark.
Key facts. Cited by 2 papers in the map (data through 7 Oct 2026). Builds on 42 of its 56 references that are in the map. First posted on arXiv 29 Feb 2024.
Builds on
42 of 56 references.
References · 42
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,029
- 2014ImageNet Large Scale Visual Recognition Challengecited by 8,441
- 2023DINOv2: Learning Robust Visual Features without Supervisioncited by 7,764
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2017mixup: Beyond Empirical Risk Minimizationcited by 5,155
- 2019CutMix: Regularization Strategy to Train Strong Classifiers with Localizable Featurescited by 2,875
- 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,857
- 2016A Baseline for Detecting Misclassified and Out-of-Distribution Examples in Neural Networkscited by 2,362
- 2020Shortcut Learning in Deep Neural Networkscited by 1,928
- 2020The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalizationcited by 1,842
30 more
- 2018ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustnesscited by 1,430
- 2019Natural Adversarial Examplescited by 1,401
- 2019AugMix: A Simple Data Processing Method to Improve Robustness and Uncertaintycited by 897
- 2020Image Quality Assessment: Unifying Structure and Texture Similaritycited by 792
- 2020RobustBench: a standardized adversarial robustness benchmarkcited by 659
- 2018Albumentations: fast and flexible image augmentationscited by 558
- 2019Benchmarking Robustness in Object Detection: Autonomous Driving when Winter is Comingcited by 332
- 2020Do Adversarially Robust ImageNet Models Transfer Better?cited by 315
- 2019A Fourier Perspective on Model Robustness in Computer Visioncited by 288
- 2018Generalisation in humans and deep neural networkscited by 237
- 2019Billion-scale semi-supervised learning for image classificationcited by 232
- 2021Partial success in closing the gap between human and machine visioncited by 185
- 20223D Common Corruptions and Data Augmentationcited by 120
- 2019Benchmarking the Robustness of Semantic Segmentation Modelscited by 111
- 2019Improving Robustness Without Sacrificing Accuracy with Patch Gaussian Augmentationcited by 105
- 2021On Interaction Between Augmentations and Corruptions in Natural Corruption Robustnesscited by 98
- 2019Brain-Like Object Recognition with High-Performing Shallow Recurrent ANNscited by 90
- 2023A Comprehensive Study on Robustness of Image Classification Models: Benchmarking and Rethinkingcited by 85
- 2023Revisiting Adversarial Training for ImageNet: Architectures, Training and Generalization across Threat Modelscited by 79
- 2022Benchmarking Robustness of 3D Point Cloud Recognition Against Common Corruptionscited by 78
- 2021RobustNav: Towards Benchmarking Robustness in Embodied Navigationcited by 52
- 2023RDumb: A simple approach that questions our progress in continual test-time adaptationcited by 50
- 2021Benchmarking the Robustness of Spatial-Temporal Models Against Corruptionscited by 35
- 2020A simple way to make neural networks robust against diverse image corruptionscited by 30
- 2022NoisyMix: Boosting Model Robustness to Common Corruptionscited by 17
- 2015Deep Networks Can Resemble Human Feed-forward Vision in Invariant Object Recognitioncited by 14
- 2018CIFAR10 to Compare Visual Recognition Performance between Deep Neural Networks and Humanscited by 14
- 2022If a Human Can See It, So Should Your System: Reliability Requirements for Machine Vision Componentscited by 11
- 2017Training object class detectors with click supervisioncited by 10
- 2022Deeper Insights into the Robustness of ViTs towards Common Corruptionscited by 5
Built on by
Citing papers per year: 2025: 1; 2026: 1.
2 papers.