mlsanityData to 7 Oct 2026

Assessing Visually-Continuous Corruption Robustness of Neural Networks Relative to Human Performance

arXiv 2402.19401 ↗First posted 29 Feb 2024cs.CVcited by 2

Not on the map. Why?

Abstract (arXiv)

While Neural Networks (NNs) have surpassed human accuracy in image classification on ImageNet, they often lack robustness against image corruption, i.e., corruption robustness. Yet such robustness is seemingly effortless for human perception. In this paper, we propose visually-continuous corruption robustness (VCR) -- an extension of corruption robustness to allow assessing it over the wide and continuous range of changes that correspond to the human perceptive quality (i.e., from the original image to the full distortion of all perceived visual information), along with two novel human-aware metrics for NN evaluation. To compare VCR of NNs with human perception, we conducted extensive experiments on 14 commonly used image corruptions with 7,718 human participants and state-of-the-art robust NN models with different training objectives (e.g., standard, adversarial, corruption robustness), different architectures (e.g., convolution NNs, vision transformers), and different amounts of training data augmentation. Our study showed that: 1) assessing robustness against continuous corruption can reveal insufficient robustness undetected by existing benchmarks; as a result, 2) the gap between NN and human robustness is larger than previously known; and finally, 3) some image corruptions have a similar impact on human perception, offering opportunities for more cost-effective robustness assessments. Our validation set with 14 image corruptions, human robustness data, and the evaluation code is provided as a toolbox and a benchmark.

Key facts. Cited by 2 papers in the map (data through 7 Oct 2026). Builds on 42 of its 56 references that are in the map. First posted on arXiv 29 Feb 2024.

Builds on

42 of 56 references.

References · 42

  1. 2015Deep Residual Learning for Image Recognitioncited by 51,809
  2. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
  3. 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,029
  4. 2014ImageNet Large Scale Visual Recognition Challengecited by 8,441
  5. 2023DINOv2: Learning Robust Visual Features without Supervisioncited by 7,764
  6. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
  7. 2017mixup: Beyond Empirical Risk Minimizationcited by 5,155
  8. 2019CutMix: Regularization Strategy to Train Strong Classifiers with Localizable Featurescited by 2,875
  9. 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,857
  10. 2016A Baseline for Detecting Misclassified and Out-of-Distribution Examples in Neural Networkscited by 2,362
  11. 2020Shortcut Learning in Deep Neural Networkscited by 1,928
  12. 2020The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalizationcited by 1,842
30 more
  1. 2018ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustnesscited by 1,430
  2. 2019Natural Adversarial Examplescited by 1,401
  3. 2019AugMix: A Simple Data Processing Method to Improve Robustness and Uncertaintycited by 897
  4. 2020Image Quality Assessment: Unifying Structure and Texture Similaritycited by 792
  5. 2020RobustBench: a standardized adversarial robustness benchmarkcited by 659
  6. 2018Albumentations: fast and flexible image augmentationscited by 558
  7. 2019Benchmarking Robustness in Object Detection: Autonomous Driving when Winter is Comingcited by 332
  8. 2020Do Adversarially Robust ImageNet Models Transfer Better?cited by 315
  9. 2019A Fourier Perspective on Model Robustness in Computer Visioncited by 288
  10. 2018Generalisation in humans and deep neural networkscited by 237
  11. 2019Billion-scale semi-supervised learning for image classificationcited by 232
  12. 2021Partial success in closing the gap between human and machine visioncited by 185
  13. 20223D Common Corruptions and Data Augmentationcited by 120
  14. 2019Benchmarking the Robustness of Semantic Segmentation Modelscited by 111
  15. 2019Improving Robustness Without Sacrificing Accuracy with Patch Gaussian Augmentationcited by 105
  16. 2021On Interaction Between Augmentations and Corruptions in Natural Corruption Robustnesscited by 98
  17. 2019Brain-Like Object Recognition with High-Performing Shallow Recurrent ANNscited by 90
  18. 2023A Comprehensive Study on Robustness of Image Classification Models: Benchmarking and Rethinkingcited by 85
  19. 2023Revisiting Adversarial Training for ImageNet: Architectures, Training and Generalization across Threat Modelscited by 79
  20. 2022Benchmarking Robustness of 3D Point Cloud Recognition Against Common Corruptionscited by 78
  21. 2021RobustNav: Towards Benchmarking Robustness in Embodied Navigationcited by 52
  22. 2023RDumb: A simple approach that questions our progress in continual test-time adaptationcited by 50
  23. 2021Benchmarking the Robustness of Spatial-Temporal Models Against Corruptionscited by 35
  24. 2020A simple way to make neural networks robust against diverse image corruptionscited by 30
  25. 2022NoisyMix: Boosting Model Robustness to Common Corruptionscited by 17
  26. 2015Deep Networks Can Resemble Human Feed-forward Vision in Invariant Object Recognitioncited by 14
  27. 2018CIFAR10 to Compare Visual Recognition Performance between Deep Neural Networks and Humanscited by 14
  28. 2022If a Human Can See It, So Should Your System: Reliability Requirements for Machine Vision Componentscited by 11
  29. 2017Training object class detectors with click supervisioncited by 10
  30. 2022Deeper Insights into the Robustness of ViTs towards Common Corruptionscited by 5

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2025: 1; 2026: 1.

2 papers.