mlsanityData to 7 Oct 2026

Can Biases in ImageNet Models Explain Generalization?

arXiv 2404.01509 ↗First posted 1 Apr 2024cs.CV cs.AI cs.LGcited by 20

Not on the map. Why?

Abstract (arXiv)

The robust generalization of models to rare, in-distribution (ID) samples drawn from the long tail of the training distribution and to out-of-training-distribution (OOD) samples is one of the major challenges of current deep learning methods. For image classification, this manifests in the existence of adversarial attacks, the performance drops on distorted images, and a lack of generalization to concepts such as sketches. The current understanding of generalization in neural networks is very limited, but some biases that differentiate models from human vision have been identified and might be causing these limitations. Consequently, several attempts with varying success have been made to reduce these biases during training to improve generalization. We take a step back and sanity-check these attempts. Fixing the architecture to the well-established ResNet-50, we perform a large-scale study on 48 ImageNet models obtained via different training methods to understand how and if these biases - including shape bias, spectral biases, and critical bands - interact with generalization. Our extensive study results reveal that contrary to previous findings, these biases are insufficient to accurately predict the generalization of a model holistically. We provide access to all checkpoints and evaluation code at https://github.com/paulgavrikov/biases_vs_generalization

Key facts. Cited by 20 papers in the map (data through 7 Oct 2026). Builds on 52 of its 69 references that are in the map. First posted on arXiv 1 Apr 2024.

Builds on

52 of 69 references.

References · 52

  1. 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
  2. 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,160
  3. 2014ImageNet Large Scale Visual Recognition Challengecited by 8,441
  4. 2021Masked Autoencoders Are Scalable Vision Learnerscited by 7,339
  5. 2021Emerging Properties in Self-Supervised Vision Transformerscited by 6,893
  6. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
  7. 2013Intriguing properties of neural networkscited by 5,114
  8. 2020Training data-efficient image transformers & distillation through attentioncited by 4,560
  9. 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,857
  10. 2020Unsupervised Learning of Visual Features by Contrasting Cluster Assignmentscited by 2,845
  11. 2020The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalizationcited by 1,842
  12. 2021An Empirical Study of Training Self-Supervised Vision Transformerscited by 1,610
38 more
  1. 2018ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustnesscited by 1,430
  2. 2019Natural Adversarial Examplescited by 1,401
  3. 2020Big Self-Supervised Models are Strong Semi-Supervised Learnerscited by 1,375
  4. 2019Learning Robust Global Representations by Penalizing Local Predictive Powercited by 1,010
  5. 2019Adversarial Examples Are Not Bugs, They Are Featurescited by 950
  6. 2019AugMix: A Simple Data Processing Method to Improve Robustness and Uncertaintycited by 897
  7. 2018Robustness May Be at Odds with Accuracycited by 873
  8. 2023Scaling Vision Transformers to 22 Billion Parameterscited by 690
  9. 2017Evasion Attacks against Machine Learning at Test Timecited by 686
  10. 2021How to train your ViT? Data, Augmentation, and Regularization in Vision Transformerscited by 562
  11. 2020Measuring Robustness to Natural Distribution Shifts in Image Classificationcited by 452
  12. 2021Intriguing Properties of Vision Transformerscited by 446
  13. 2021ResNet strikes back: An improved training procedure in timmcited by 365
  14. 2020Do Adversarially Robust ImageNet Models Transfer Better?cited by 315
  15. 2019High Frequency Component Helps Explain the Generalization of Convolutional Neural Networkscited by 310
  16. 2019A Fourier Perspective on Model Robustness in Computer Visioncited by 288
  17. 2021When Vision Transformers Outperform ResNets without Pre-training or Strong Data Augmentationscited by 259
  18. 2019Billion-scale semi-supervised learning for image classificationcited by 232
  19. 2021Partial success in closing the gap between human and machine visioncited by 185
  20. 2018Disentangling Adversarial Robustness and Generalizationcited by 171
  21. 2019Adversarial Sensor Attack on LiDAR-based Perception in Autonomous Drivingcited by 151
  22. 2019Adversarial Training Can Hurt Generalizationcited by 131
  23. 2021PixMix: Dreamlike Pictures Comprehensively Improve Safety Measurescited by 131
  24. 2019Improving Robustness Without Sacrificing Accuracy with Patch Gaussian Augmentationcited by 105
  25. 2021On Interaction Between Augmentations and Corruptions in Natural Corruption Robustnesscited by 98
  26. 2023A Comprehensive Study on Robustness of Image Classification Models: Benchmarking and Rethinkingcited by 85
  27. 2020Shape-Texture Debiased Neural Network Trainingcited by 76
  28. 2020Informative Dropout for Robust Representation Learning: A Shape-bias Perspectivecited by 57
  29. 2021Shape or Texture: Understanding Discriminative Features in CNNscited by 52
  30. 2023Intriguing properties of generative classifierscited by 52
  31. 2021PRIME: A few primitives can boost robustness to common corruptionscited by 40
  32. 2021Improving robustness against common corruptions with frequency biased modelscited by 34
  33. 2021Does enhanced shape bias improve neural network robustness to common corruptions?cited by 32
  34. 2023What do neural networks learn in image classification? A frequency shortcut perspectivecited by 28
  35. 2023Spatial-frequency channels, shape bias, and adversarial robustnesscited by 28
  36. 2022NoisyMix: Boosting Model Robustness to Common Corruptionscited by 17
  37. 2023Classification robustness to common optical aberrationscited by 13
  38. 2023An Extended Study of Human-like Behavior under Adversarial Trainingcited by 9

50 most cited of 52 All 52 (JSON)

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2024: 4; 2025: 9; 2026: 7.

20 papers.

Sort:

By area:

  1. 2024Wavelet Convolutions for Large Receptive Fieldscited by 74
  2. 2024TinyViM: Frequency Decoupling for Tiny Hybrid Vision Mambacited by 15
  3. 2025FreqDebias: Towards Generalizable Deepfake Detection via Consistency-Driven Frequency Debiasingcited by 14
  4. 2025ImageNet-trained CNNs are not biased towards texture: Revisiting feature reliance through controlled suppressioncited by 13
  5. 2026When Pretty Isn't Useful: Investigating Why Modern Text-to-Image Models Fail as Reliable Training Data Generatorscited by 6
  6. 2025Do ImageNet-trained models learn shortcuts? The impact of frequency shortcuts on generalizationcited by 5
  7. 20253D Wavelet Convolutions with Extended Receptive Fields for Hyperspectral Image Classificationcited by 5
  8. 2025SciPostGen: Bridging the Gap between Scientific Papers and Poster Layoutscited by 4
  9. 2024How Do Training Methods Influence the Utilization of Vision Models?cited by 3
  10. 2025Attention IoU: Examining Biases in CelebA using Attention Mapscited by 3
  11. 2025Automated Detection of Visual Attribute Reliance with a Self-Reflective Agentcited by 2
  12. 2024Low-Biased General Annotated Dataset Generationcited by 1
8 more
  1. 2026One Model, Many Behaviors: Training-Induced Effects on Out-of-Distribution Detectioncited by 1
  2. 2026On the Reliability of Cue Conflict and Beyondcited by 1
  3. 2025Vision Transformer Neural Architecture Search for Out-of-Distribution Generalization: Benchmark and Insightscited by 0
  4. 2025M3Depth: Wavelet-Enhanced Depth Estimation on Mars via Mutual Boosting of Dual-Modal Datacited by 0
  5. 2026ShapeY: A Principled Framework for Measuring Shape Recognition Capacity via Nearest-Neighbor Matchingcited by 0
  6. 2026Low-Frequency Shortcuts in Texture-Driven Visual Learningcited by 0
  7. 2026Robustness Emerges Early in Training Dynamics, but Is Not Preservedcited by 0
  8. 2026Suppress and Diversify: Refining Robust Pathways for Corruption Robustnesscited by 0