CNS-Bench: Benchmarking Image Classifier Robustness Under Continuous Nuisance Shifts
On the map: Diffusion models → Robustness, privacy and adversarial aspects
Abstract (arXiv)
An important challenge when using computer vision models in the real world is to evaluate their performance in potential out-of-distribution (OOD) scenarios. While simple synthetic corruptions are commonly applied to test OOD robustness, they often fail to capture nuisance shifts that occur in the real world. Recently, diffusion models have been applied to generate realistic images for benchmarking, but they are restricted to binary nuisance shifts. In this work, we introduce CNS-Bench, a Continuous Nuisance Shift Benchmark to quantify OOD robustness of image classifiers for continuous and realistic generative nuisance shifts. CNS-Bench allows generating a wide range of individual nuisance shifts in continuous severities by applying LoRA adapters to diffusion models. To address failure cases, we propose a filtering mechanism that outperforms previous methods, thereby enabling reliable benchmarking with generative models. With the proposed benchmark, we perform a large-scale study to evaluate the robustness of more than 40 classifiers under various nuisance shifts. Through carefully designed comparisons and analyses, we find that model rankings can change for varying shifts and shift scales, which cannot be captured when applying common binary shifts. Additionally, we show that evaluating the model performance on a continuous scale allows the identification of model failure points, providing a more nuanced understanding of model robustness. Project page including code and data: https://genintel.github.io/CNS.
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 61 of its 72 references that are in the map. First posted on arXiv 23 Jul 2025.
Builds on
61 of 72 references.
Closest ancestors · 1
Same direction, newest first
Other references · 60
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
- 2020Denoising Diffusion Probabilistic Modelscited by 21,076
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
- 2014Microsoft COCO: Common Objects in Contextcited by 17,608
- 2020A Simple Framework for Contrastive Learning of Visual Representationscited by 12,049
- 2020Denoising Diffusion Implicit Modelscited by 9,781
- 2023DINOv2: Learning Robust Visual Features without Supervisioncited by 7,974
- 2019Momentum Contrast for Unsupervised Visual Representation Learningcited by 7,513
- 2021Masked Autoencoders Are Scalable Vision Learnerscited by 7,403
- 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,058
38 more
- 2021Emerging Properties in Self-Supervised Vision Transformerscited by 6,968
- 2020Training data-efficient image transformers & distillation through attentioncited by 4,586
- 2022A ConvNet for the 2020scited by 3,579
- 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,877
- 2022An Image is Worth One Word: Personalizing Text-to-Image Generation using Textual Inversioncited by 2,245
- 2021SDEdit: Guided Image Synthesis and Editing with Stochastic Differential Equationscited by 1,937
- 2020The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalizationcited by 1,850
- 2021An Empirical Study of Training Self-Supervised Vision Transformerscited by 1,616
- 2019Do ImageNet Classifiers Generalize to ImageNet?cited by 1,515
- 2018ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustnesscited by 1,432
- 2019Natural Adversarial Examplescited by 1,408
- 2018Datasheets for Datasetscited by 1,386
- 2019Learning Robust Global Representations by Penalizing Local Predictive Powercited by 1,013
- 2024VMamba: Visual State Space Modelcited by 969
- 2020Measuring Robustness to Natural Distribution Shifts in Image Classificationcited by 454
- 2023UniPC: A Unified Predictor-Corrector Framework for Fast Sampling of Diffusion Modelscited by 450
- 2020Improving robustness against common corruptions by covariate shift adaptationcited by 431
- 2022DeiT III: Revenge of the ViTcited by 419
- 2023Your Diffusion Model is Secretly a Zero-Shot Classifiercited by 306
- 2021Accuracy on the Line: On the Strong Correlation Between Out-of-Distribution and In-Distribution Generalizationcited by 249
- 2023Prediction-Powered Inferencecited by 220
- 2022Test-Time Training with Masked Autoencoderscited by 212
- 2019The VIA Annotation Software for Images, Audio and Videocited by 167
- 2023Concept Sliders: LoRA Adaptors for Precise Control in Diffusion Modelscited by 153
- 2022SHIFT: A Synthetic Driving Dataset for Continuous Multi-Task Domain Adaptationcited by 146
- 20223D Common Corruptions and Data Augmentationcited by 119
- 2020Online Deep Clustering for Unsupervised Representation Learningcited by 100
- 2021Unsupervised Object-Level Representation Learning from Scene Imagescited by 72
- 2022Masked Frequency Modeling for Self-Supervised Visual Pre-Trainingcited by 71
- 2023RDumb: A simple approach that questions our progress in continual test-time adaptationcited by 53
- 2021A Systematic Review of Robustness in Deep Learning for Computer Vision: Mind the gap?cited by 48
- 2021OOD-CV: A Benchmark for Robustness to Out-of-Distribution Shifts of Individual Nuisances in Natural Imagescited by 46
- 2023LANCE: Stress-testing Visual Models by Generating Language-guided Counterfactual Imagescited by 46
- 2022ImageNet-X: Understanding Model Mistakes with Factor of Variation Annotationscited by 44
- 2024Continuous, Subject-Specific Attribute Control in T2I Models by Identifying Semantic Directionscited by 41
- 2024A Sober Look at the Robustness of CLIPs to Spurious Featurescited by 38
- 2020Delving into Inter-Image Invariance for Unsupervised Visual Representationscited by 37
- 2023Dataset Interfaces: Diagnosing Model Failures Using Controllable Counterfactual Generationcited by 35
50 most cited of 60 All 60 (JSON)
Built on by
Citing papers per year: 2026: 2.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2025LAION-C: An Out-of-Distribution Benchmark for Web-Scale Vision Models
- 2022A Meta-Analysis of Distributionally-Robust Models
- 2024Non-Linear Outlier Synthesis for Out-of-Distribution Detection
- 2023A framework for benchmarking class-out-of-distribution detection and its application to ImageNet
- 2025A Benchmark and Evaluation for Real-World Out-of-Distribution Detection Using Vision-Language Models
- 2026LL-Bench: Rethinking Low-Level Vision Evaluation in the Era of Large-Scale Generative Models
- 2023DiffAug: A Diffuse-and-Denoise Augmentation for Training Robust Classifiers
- 2026Expanding the Role of Diffusion Models for Robust Classifier Training