mlsanityData to 7 Oct 2026

Probing Human Visual Robustness with Neurally-Guided Deep Neural Networks

arXiv 2405.02564 ↗First posted 4 May 2024cs.CV cs.AI q-bio.NCcited by 1

Not on the map. Why?

Abstract (arXiv)

Humans effortlessly navigate the dynamic visual world, yet deep neural networks (DNNs), despite excelling at many visual tasks, are surprisingly vulnerable to minor image perturbations. Past theories suggest that human visual robustness arises from a representational space that evolves along the ventral visual stream (VVS) of the brain to increasingly tolerate object transformations. To test whether robustness is supported by such progression as opposed to being confined exclusively to specialized higher-order regions, we trained DNNs to align their representations with human neural responses from consecutive VVS regions while performing visual tasks. We demonstrate a hierarchical improvement in DNN robustness: alignment to higher-order VVS regions leads to greater improvement. To investigate the mechanism behind such robustness gains, we test a prominent hypothesis that attributes human robustness to the unique geometry of neural category manifolds in the VVS. We first reveal that more desirable manifold properties, specifically, smaller extent and better linear separability, indeed emerge across the human VVS. These properties can be inherited by neurally aligned DNNs and predict their subsequent robustness gains. Furthermore, we show that supervision from neural manifolds alone, via manifold guidance, is sufficient to qualitatively reproduce the hierarchical robustness improvements. Together, these results highlight the critical role of the evolving representational space across VVS in achieving robust visual inference, in part through the formation of more linearly separable category manifolds, which may in turn be leveraged to develop more robust AI systems.

Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Builds on 24 of its 74 references that are in the map. First posted on arXiv 4 May 2024.

Builds on

24 of 74 references.

References · 24

  1. 2015Deep Residual Learning for Image Recognitioncited by 51,809
  2. 2014Microsoft COCO: Common Objects in Contextcited by 17,498
  3. 2014Explaining and Harnessing Adversarial Examplescited by 7,287
  4. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
  5. 2013Intriguing properties of neural networkscited by 5,114
  6. 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,442
  7. 2015Show, Attend and Tell: Neural Image Caption Generation with Visual Attentioncited by 1,421
  8. 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,324
  9. 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,315
  10. 2016Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samplescited by 439
  11. 2018Generalisation in humans and deep neural networkscited by 237
  12. 2023Getting aligned on representational alignmentcited by 142
12 more
  1. 2017Classification and Geometry of General Perceptual Manifoldscited by 62
  2. 2016Noisy Activation Functionscited by 53
  3. 2019Enhancing Cross-task Black-Box Transferability of Adversarial Examples with Dispersion Reductioncited by 47
  4. 2020A case for new neural network smoothness constraintscited by 43
  5. 2019Learning From Brains How to Regularize Machinescited by 37
  6. 2021TRS: Transferability Reduced Ensemble via Encouraging Gradient Diversity and Model Smoothnesscited by 37
  7. 2023Learning Efficient Coding of Natural Images with Maximum Manifold Capacity Representationscited by 31
  8. 2021Towards robust vision by multi-task learning on monkey visual cortexcited by 28
  9. 2019Interpreting and Evaluating Neural Network Robustnesscited by 19
  10. 2023Top-Down Visual Attention from Analysis by Synthesiscited by 19
  11. 2021Neural Population Geometry Reveals the Role of Stochasticity in Robust Perceptioncited by 12
  12. 2021Adversarial Transfer Attacks With Unknown Data and Class Overlapcited by 8

Built on by

Cited by year

Citing papers per year: 2024: 1.

1 paper.