Towards Robust Vision Transformer

Recent advances on Vision Transformer (ViT) and its improved variants have shown that self-attention-based networks surpass traditional Convolutional Neural Networks (CNNs) in most vision tasks. However, existing ViTs focus on the standard accuracy and computation cost, lacking the investigation of the intrinsic influence on model robustness and generalization. In this work, we conduct systematic evaluation on components of ViTs in terms of their impact on robustness to adversarial examples, common corruptions and distribution shifts. We find some components can be harmful to robustness. By using and combining robust components as building blocks of ViTs, we propose Robust Vision Transformer (RVT), which is a new vision transformer and has superior performance with strong robustness. We further propose two new plug-and-play techniques called position-aware attention scaling and patch-wise augmentation to augment our RVT, which we abbreviate as RVT*. The experimental results on ImageNet and six robustness benchmarks show the advanced robustness and generalization ability of RVT compared with previous ViTs and state-of-the-art CNNs. Furthermore, RVT-S* also achieves Top-1 rank on multiple robustness leaderboards including ImageNet-C and ImageNet-Sketch. The code will be available at \url{https://github.com/alibaba/easyrobust}.

PDF Abstract CVPR 2022 PDF CVPR 2022 Abstract

Results from the Paper


Task Dataset Model Metric Name Metric Value Global Rank Result Benchmark
Image Classification ImageNet RVT-B* Top 1 Accuracy 82.7% # 471
Number of params 91.8M # 855
GFLOPs 17.7 # 360
Image Classification ImageNet RVT-S* Top 1 Accuracy 81.9% # 549
Number of params 23.3M # 575
GFLOPs 4.7 # 220
Image Classification ImageNet RVT-Ti* Top 1 Accuracy 79.2% # 716
Number of params 10.9M # 482
GFLOPs 1.3 # 118
Domain Generalization ImageNet-A RVT-S* Top-1 accuracy % 25.7 # 29
Domain Generalization ImageNet-A RVT-B* Top-1 accuracy % 28.5 # 28
Domain Generalization ImageNet-A RVT-Ti* Top-1 accuracy % 14.4 # 30
Domain Generalization ImageNet-C RVT-B* mean Corruption Error (mCE) 46.8 # 24
Domain Generalization ImageNet-C RVT-S* mean Corruption Error (mCE) 49.4 # 26
Domain Generalization ImageNet-C RVT-Ti* mean Corruption Error (mCE) 57.0 # 32
Domain Generalization ImageNet-R RVT-B* Top-1 Error Rate 51.3 # 26
Domain Generalization ImageNet-R RVT-Ti* Top-1 Error Rate 56.1 # 31
Domain Generalization ImageNet-R RVT-S* Top-1 Error Rate 52.3 # 28

Methods