Robustness Emerges Early in Training Dynamics, but Is Not Preserved
Not on the map. Why?
Abstract (arXiv)
Robustness to natural corruptions remains a fundamental challenge for deep neural networks. In this paper, we identify a robustness fading phenomenon where shallow layers spontaneously develop robust representations and flat loss landscapes in early training, yet these properties are not preserved during standard convergence. To address this, we propose a framework that performs strategic interventions on training dynamics to stabilize the empirically identified early-emergent robust priors. Our approach includes two parameter-free strategies: Early-Phase Stabilization~(EPS) and Asymmetric Weight Reversion~(AWR), which stabilize or recover robust shallow configurations without modifying the model architecture or introducing learnable parameters. Extensive experiments demonstrate the efficacy of our framework across various benchmarks and architectures, yielding significant gains in downstream transfer, dynamic adaptation, and diverse computer vision applications.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 60 of its 72 references that are in the map. First posted on arXiv 5 Aug 2026.
Builds on
60 of 72 references.
References · 60
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2015Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networkscited by 9,617
- 2018Representation Learning with Contrastive Predictive Codingcited by 7,662
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2017mixup: Beyond Empirical Risk Minimizationcited by 5,155
- 2018MobileNetV2: Inverted Residuals and Linear Bottleneckscited by 4,773
- 2018Encoder-Decoder with Atrous Separable Convolution for Semantic Image Segmentationcited by 3,210
- 2016Wide Residual Networkscited by 3,057
- 2019CutMix: Regularization Strategy to Train Strong Classifiers with Localizable Featurescited by 2,875
- 2019Benchmarking Neural Network Robustness to Common Corruptions and Perturbationscited by 2,857
- 2018The Lottery Ticket Hypothesis: Finding Sparse, Trainable Neural Networkscited by 2,250
- 2019Similarity of Neural Network Representations Revisitedcited by 1,695
38 more
- 2019Do ImageNet Classifiers Generalize to ImageNet?cited by 1,507
- 2018ImageNet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustnesscited by 1,430
- 2020Sharpness-Aware Minimization for Efficiently Improving Generalizationcited by 1,404
- 2019MMDetection: Open MMLab Detection Toolbox and Benchmarkcited by 1,379
- 2018On the Spectral Bias of Neural Networkscited by 1,321
- 2016Understanding intermediate layers using linear classifier probescited by 1,279
- 2018Averaging Weights Leads to Wider Optima and Better Generalizationcited by 1,194
- 2017Visualizing the Loss Landscape of Neural Netscited by 1,126
- 2019When Does Label Smoothing Help?cited by 985
- 2019Adversarial Examples Are Not Bugs, They Are Featurescited by 950
- 2019AugMix: A Simple Data Processing Method to Improve Robustness and Uncertaintycited by 897
- 2018AutoAugment: Learning Augmentation Policies from Datacited by 728
- 2021MobileViT: Light-weight, General-purpose, and Mobile-friendly Vision Transformercited by 636
- 2020Overfitting in adversarially robust deep learningcited by 504
- 2023Towards Stable Test-Time Adaptation in Dynamic Wild Worldcited by 409
- 2021ResNet strikes back: An improved training procedure in timmcited by 365
- 2018Measuring the Intrinsic Dimension of Objective Landscapescited by 364
- 2018How Does Batch Normalization Help Optimization?cited by 355
- 2017Adversarial Examples: Attacks and Defenses for Deep Learningcited by 350
- 2019Benchmarking Robustness in Object Detection: Autonomous Driving when Winter is Comingcited by 332
- 2019GCNet: Non-local Networks Meet Squeeze-Excitation Networks and Beyondcited by 331
- 2019A Fourier Perspective on Model Robustness in Computer Visioncited by 288
- 2022Contrastive Test-Time Adaptationcited by 258
- 2022EfficientFormer: Vision Transformers at MobileNet Speedcited by 240
- 2023Robust Test-Time Adaptation in Dynamic Scenarioscited by 185
- 2024MambaOut: Do We Really Need Mamba for Vision?cited by 142
- 20223D Common Corruptions and Data Augmentationcited by 120
- 2020The Early Phase of Neural Network Trainingcited by 114
- 2019Benchmarking the Robustness of Semantic Segmentation Modelscited by 111
- 2022Robust Mean Teacher for Continual and Gradual Test-Time Adaptationcited by 102
- 2021On Interaction Between Augmentations and Corruptions in Natural Corruption Robustnesscited by 98
- 2023A Comprehensive Study on Robustness of Image Classification Models: Benchmarking and Rethinkingcited by 85
- 2021A Winning Hand: Compressing Deep Networks Can Improve Out-Of-Distribution Robustnesscited by 62
- 2022Understanding Robust Overfitting of Adversarial Training and Beyondcited by 50
- 2021OOD-CV: A Benchmark for Robustness to Out-of-Distribution Shifts of Individual Nuisances in Natural Imagescited by 46
- 2021Understanding and Improving Robustness of Vision Transformers through Patch-based Negative Augmentationcited by 40
- 2021PRIME: A few primitives can boost robustness to common corruptionscited by 40
- 2023Does CLIP's Generalization Performance Mainly Stem from High Train-Test Similarity?cited by 35
50 most cited of 60 All 60 (JSON)
Built on by
Not cited yet.