mlsanityData to 7 Oct 2026

Learning Fourier shapes to probe the geometric world of deep neural networks

arXiv 2511.04970 ↗First posted 7 Nov 2025cs.CV cs.AI cs.LGcited by 1

Not on the map. Why?

Abstract (arXiv)

While both shape and texture are fundamental to visual recognition, research on deep neural networks (DNNs) has predominantly focused on the latter, leaving their geometric understanding poorly probed. Here, we show: first, that optimized shapes can act as potent semantic carriers, generating high-confidence classifications from inputs defined purely by their geometry; second, that they are high-fidelity interpretability tools that precisely isolate a model's salient regions; and third, that they constitute a new, generalizable adversarial paradigm capable of deceiving downstream visual tasks. This is achieved through an end-to-end differentiable framework that unifies a powerful Fourier series to parameterize arbitrary shapes, a winding number-based mapping to translate them into the pixel grid required by DNNs, and signal energy constraints that enhance optimization efficiency while ensuring physically plausible shapes. Our work provides a versatile framework for probing the geometric world of DNNs and opens new frontiers for challenging and understanding machine perception.

Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Builds on 34 of its 47 references that are in the map. First posted on arXiv 7 Nov 2025.

Builds on

34 of 47 references.

References · 34

  1. 2015Deep Residual Learning for Image Recognitioncited by 51,809
  2. 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
  3. 2014Microsoft COCO: Common Objects in Contextcited by 17,498
  4. 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
  5. 2021Swin Transformer: Hierarchical Vision Transformer using Shifted Windowscited by 12,082
  6. 2014Explaining and Harnessing Adversarial Examplescited by 7,287
  7. 2016Densely Connected Convolutional Networkscited by 6,691
  8. 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,690
  9. 2013Intriguing properties of neural networkscited by 5,114
  10. 2018MobileNetV2: Inverted Residuals and Linear Bottleneckscited by 4,773
  11. 2018YOLOv3: An Incremental Improvementcited by 2,652
  12. 2013Deep Inside Convolutional Networks: Visualising Image Classification Models and Saliency Mapscited by 2,348
22 more
  1. 2013Visualizing and Understanding Convolutional Networkscited by 2,278
  2. 2019FCOS: Fully Convolutional One-Stage Object Detectioncited by 1,573
  3. 2018ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustnesscited by 1,430
  4. 2019Adversarial Examples Are Not Bugs, They Are Featurescited by 950
  5. 2017Adversarial Patchcited by 514
  6. 2019Fooling automated surveillance cameras: adversarial patches to attack person detectioncited by 268
  7. 2020Physically Realizable Adversarial Examples for LiDAR Object Detectioncited by 137
  8. 2024Exploring the Adversarial Vulnerabilities of Vision-Language-Action Models in Roboticscited by 68
  9. 2022Physical Attack on Monocular Depth Estimation with Optimal Adversarial Patchescited by 57
  10. 2021Fooling thermal infrared pedestrian detectors in real world using small bulbscited by 51
  11. 2022Infrared Invisible Clothing:Hiding from Infrared Detectors at Multiple Angles in Real Worldcited by 42
  12. 2023DAP: A Dynamic Adversarial Patch for Evading Person Detectorscited by 40
  13. 2024One Perturbation is Enough: On Generating Universal Adversarial Perturbations against Vision-Language Pre-training Modelscited by 39
  14. 2023Physically Adversarial Infrared Patches with Learnable Shapes and Locationscited by 38
  15. 2023Unified Adversarial Patch for Cross-modal Attacks in the Physical Worldcited by 27
  16. 2024Hide in Thicket: Generating Imperceptible and Rational Adversarial Perturbations on 3D Point Cloudscited by 24
  17. 2024Dimensions underlying the representational alignment of deep neural networks with humanscited by 22
  18. 2022Benchmarking Adversarial Patch Against Aerial Detectioncited by 21
  19. 2023Unified Adversarial Patch for Visible-Infrared Cross-modal Attacks in the Physical Worldcited by 21
  20. 2019Adversarial Explanations for Understanding Image Classification Decisions and Improved Neural Network Robustnesscited by 14
  21. 2025Data-free Universal Adversarial Perturbation with Pseudo-semantic Priorcited by 3
  22. 2025IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimizationcited by 1

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 1.

1 paper.