mlsanityData to 14 Oct 2026

CNS-Bench: Benchmarking Image Classifier Robustness Under Continuous Nuisance Shifts

arXiv 2507.17651 ↗First posted 23 Jul 2025cs.CVcited by 2

On the map: Diffusion models → Robustness, privacy and adversarial aspects

Abstract (arXiv)

An important challenge when using computer vision models in the real world is to evaluate their performance in potential out-of-distribution (OOD) scenarios. While simple synthetic corruptions are commonly applied to test OOD robustness, they often fail to capture nuisance shifts that occur in the real world. Recently, diffusion models have been applied to generate realistic images for benchmarking, but they are restricted to binary nuisance shifts. In this work, we introduce CNS-Bench, a Continuous Nuisance Shift Benchmark to quantify OOD robustness of image classifiers for continuous and realistic generative nuisance shifts. CNS-Bench allows generating a wide range of individual nuisance shifts in continuous severities by applying LoRA adapters to diffusion models. To address failure cases, we propose a filtering mechanism that outperforms previous methods, thereby enabling reliable benchmarking with generative models. With the proposed benchmark, we perform a large-scale study to evaluate the robustness of more than 40 classifiers under various nuisance shifts. Through carefully designed comparisons and analyses, we find that model rankings can change for varying shifts and shift scales, which cannot be captured when applying common binary shifts. Additionally, we show that evaluating the model performance on a continuous scale allows the identification of model failure points, providing a more nuanced understanding of model robustness. Project page including code and data: https://genintel.github.io/CNS.

Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 61 of its 72 references that are in the map. First posted on arXiv 23 Jul 2025.

Builds on

61 of 72 references.

Closest ancestors · 1

Same direction, newest first

  1. 2023Benchmarking Robustness to Text-Guided Corruptions6 Apr

Other references · 60

  1. 2015Deep Residual Learning for Image Recognitioncited by 52,096
  2. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
  3. 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
  4. 2020Denoising Diffusion Probabilistic Modelscited by 21,076
  5. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
  6. 2014Microsoft COCO: Common Objects in Contextcited by 17,608
  7. 2020A Simple Framework for Contrastive Learning of Visual Representationscited by 12,049
  8. 2020Denoising Diffusion Implicit Modelscited by 9,781
  9. 2023DINOv2: Learning Robust Visual Features without Supervisioncited by 7,974
  10. 2019Momentum Contrast for Unsupervised Visual Representation Learningcited by 7,513
  11. 2021Masked Autoencoders Are Scalable Vision Learnerscited by 7,403
  12. 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,058
38 more
  1. 2021Emerging Properties in Self-Supervised Vision Transformerscited by 6,968
  2. 2020Training data-efficient image transformers & distillation through attentioncited by 4,586
  3. 2022A ConvNet for the 2020scited by 3,579
  4. 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,877
  5. 2022An Image is Worth One Word: Personalizing Text-to-Image Generation using Textual Inversioncited by 2,245
  6. 2021SDEdit: Guided Image Synthesis and Editing with Stochastic Differential Equationscited by 1,937
  7. 2020The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalizationcited by 1,850
  8. 2021An Empirical Study of Training Self-Supervised Vision Transformerscited by 1,616
  9. 2019Do ImageNet Classifiers Generalize to ImageNet?cited by 1,515
  10. 2018ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustnesscited by 1,432
  11. 2019Natural Adversarial Examplescited by 1,408
  12. 2018Datasheets for Datasetscited by 1,386
  13. 2019Learning Robust Global Representations by Penalizing Local Predictive Powercited by 1,013
  14. 2024VMamba: Visual State Space Modelcited by 969
  15. 2020Measuring Robustness to Natural Distribution Shifts in Image Classificationcited by 454
  16. 2023UniPC: A Unified Predictor-Corrector Framework for Fast Sampling of Diffusion Modelscited by 450
  17. 2020Improving robustness against common corruptions by covariate shift adaptationcited by 431
  18. 2022DeiT III: Revenge of the ViTcited by 419
  19. 2023Your Diffusion Model is Secretly a Zero-Shot Classifiercited by 306
  20. 2021Accuracy on the Line: On the Strong Correlation Between Out-of-Distribution and In-Distribution Generalizationcited by 249
  21. 2023Prediction-Powered Inferencecited by 220
  22. 2022Test-Time Training with Masked Autoencoderscited by 212
  23. 2019The VIA Annotation Software for Images, Audio and Videocited by 167
  24. 2023Concept Sliders: LoRA Adaptors for Precise Control in Diffusion Modelscited by 153
  25. 2022SHIFT: A Synthetic Driving Dataset for Continuous Multi-Task Domain Adaptationcited by 146
  26. 20223D Common Corruptions and Data Augmentationcited by 119
  27. 2020Online Deep Clustering for Unsupervised Representation Learningcited by 100
  28. 2021Unsupervised Object-Level Representation Learning from Scene Imagescited by 72
  29. 2022Masked Frequency Modeling for Self-Supervised Visual Pre-Trainingcited by 71
  30. 2023RDumb: A simple approach that questions our progress in continual test-time adaptationcited by 53
  31. 2021A Systematic Review of Robustness in Deep Learning for Computer Vision: Mind the gap?cited by 48
  32. 2021OOD-CV: A Benchmark for Robustness to Out-of-Distribution Shifts of Individual Nuisances in Natural Imagescited by 46
  33. 2023LANCE: Stress-testing Visual Models by Generating Language-guided Counterfactual Imagescited by 46
  34. 2022ImageNet-X: Understanding Model Mistakes with Factor of Variation Annotationscited by 44
  35. 2024Continuous, Subject-Specific Attribute Control in T2I Models by Identifying Semantic Directionscited by 41
  36. 2024A Sober Look at the Robustness of CLIPs to Spurious Featurescited by 38
  37. 2020Delving into Inter-Image Invariance for Unsupervised Visual Representationscited by 37
  38. 2023Dataset Interfaces: Diagnosing Model Failures Using Controllable Counterfactual Generationcited by 35

50 most cited of 60 All 60 (JSON)

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 2.

2 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025LAION-C: An Out-of-Distribution Benchmark for Web-Scale Vision Models
  2. 2022A Meta-Analysis of Distributionally-Robust Models
  3. 2024Non-Linear Outlier Synthesis for Out-of-Distribution Detection
  4. 2023A framework for benchmarking class-out-of-distribution detection and its application to ImageNet
  5. 2025A Benchmark and Evaluation for Real-World Out-of-Distribution Detection Using Vision-Language Models
  6. 2026LL-Bench: Rethinking Low-Level Vision Evaluation in the Era of Large-Scale Generative Models
  7. 2023DiffAug: A Diffuse-and-Denoise Augmentation for Training Robust Classifiers
  8. 2026Expanding the Role of Diffusion Models for Robust Classifier Training