Title: EFFICIENT AUGMENTATION VIA DATA SUBSAMPLING

Abstract: Data augmentation is commonly used to encode invariances in learning methods. However, this process is often performed in an inefficient manner, as artificial examples are created by applying a number of transformations to all points in the training set. The resulting explosion of the dataset size can be an issue in terms of storage and training costs, as well as in selecting and tuning the optimal set of transformations to apply. In this work, we demonstrate that it is possible to significantly reduce the number of data points included in data augmentation while realizing the same accuracy and invariance benefits of augmenting the entire dataset. We propose a novel set of subsampling policies, based on model influence and loss, that can achieve a 90% reduction in augmentation set size while maintaining the accuracy gains of standard data augmentation.

1. INTRODUCTION:

Data augmentation is a process in which the training set is expanded by applying class-preserving transformations, such as rotations or crops for images, to the original data points. This process has become an instrumental tool in achieving state-of-the-art accuracy in modern machine learning pipelines. Indeed, for problems in image recognition, data augmentation is a key component in achieving nearly all state-of-the-art results (Cires ¸an et al., 2010; Dosovitskiy et al., 2016; Graham, 2014; Sajjadi et al., 2016) . Data augmentation is also a popular technique because of its simplicity, particularly in deep learning applications, where applying a set of known invariances to the data is often more straightforward than trying to encode this knowledge directly in the model architecture.

However, data augmentation can be an expensive process, as applying a number of transformations to the entire dataset may increase the overall size of the dataset by orders of magnitude. For example, if applying just 3 sets of augmentations (e.g., translate, rotate, crop), each with 4 possible configurations, the dataset can easily grow by a factor of 12 (if applied independently), all the way to 64x (if applied in sequence). While this may have some benefits in terms of overfitting, augmenting the entire training set can also significantly increase data storage costs and training time, which can scale linearly or superlinearly with respect to the training set size. Further, selecting the optimal set of transformations to apply to a given data point is often a non-trivial task. Applying transformations not only takes processing time, but also frequently requires some amount of domain expertise. Augmentations are often applied heuristically in practice, and small perturbations are expected (but not proven) to preserve classes. If more complex augmentations are applied to a dataset, they may have to be verified on a per-sample basis.

In this work, we aim to make data augmentation more efficient and user-friendly by identifying subsamples of the full dataset that are good candidates for augmentation. In developing policies for subsampling the data, we draw inspiration from the virtual support vector (VSV) method, which has been used for this purpose in the context of SVMs (Burges & Schölkopf, 1997; Decoste & Schölkopf, 2002) . The VSV method attempts to create a more robust decision surface by augmenting only the samples that are close to the margin-i.e., the support vectors. The motivation is intuitive: if a point does not affect the margin, then any small perturbation of that point in data space will likely yield a point that is again too far from the margin to affect it. The method proceeds by applying classpreserving data augmentations (e.g., small perturbations) to all support vectors in the training set. The SVM is then retrained on the support vector dataset concatenated with the augmented dataset, and the end result is a decision surface that has been encoded with transformation invariance while augmenting many fewer samples than found in the full training set.

Although proven to be an effective approach for SVMs, methods utilizing support vectors may not generalize well to other classifiers. Therefore, in this work, we aim to develop policies that can effectively reduce the augmentation set size while applying to a much broader class of models. A key step in developing these policies is to determine some metric by which to rank the importance of data points for augmentation. We build policies based on two key metrics. First, we make a natural generalization of the VSV method by measuring the loss induced by a training point. Second, we explore using the influence of a point as an indicator of augmentation potential. Influence functions, originating from robust statistics, utilize more information than loss (i.e., residuals) alone, as they take into account both leverage and residual information.

The contributions of this paper are as follows. First, we demonstrate that it is typically unnecessary to augment the entire dataset to achieve high accuracy-for example, we can maintain 99.86% or more of the full augmentation accuracy while only augmenting 10% of the dataset in the case of translation augmentations, and we observe similar behavior for other augmentations. Second, we propose several policies to select the subset of points to augment. Our results indicate that policies based off of training loss or model influence are an effective strategy over simple baselines, such as random sampling. Finally, we propose several modifications to these approaches, such as sample reweighting and online learning, that can further improve performance. Our proposed policies are simple and straightforward to implement, requiring only a few lines of code. We perform experiments throughout on common benchmark datasets, such as MNIST (LeCun et al., 1998) , CIFAR10 (Krizhevsky, 2009), and NORB (LeCun et al., 2004) .

2. RELATED WORK:

In the domain of image classification, most state-of-the-art pipelines use some form of data augmentation (Cires ¸an et al., 2010; Dosovitskiy et al., 2016; Graham, 2014; Sajjadi et al., 2016) . This typically consists of applying crops, flips, or small affine transformations to all the data points in the training set, with parameters drawn randomly from hand-tuned ranges. Beyond image classification, various studies have applied data augmentation techniques to modalities such as audio (Uhlich et al., 2017) and text (Lu et al., 2006) . The selection of these augmentation strategies can have large performance impacts, and thus can require extensive selection and tuning (Ratner et al., 2017) .

Motivated by the ubiquity of data augmentation and the difficulty in selecting augmentations, there has been a significant amount of work in selecting and tuning the best transformations to use when performing augmentation. For example, Fawzi et al. (2016) use adaptive data augmentation to choose transformations that maximize loss for the classifier; Ratner et al. (2017) propose learning a sequence model of composed transformations; and Cubuk et al. (2018) suggest a reinforcement learning approach. In contrast to these works, our aim is instead to select which data points to augment while holding transformations fixed. Our subsampling policies are therefore complementary to many of the described approaches, and in fact, could be quite beneficial for approaches such as reinforcement learning that can quickly become infeasible for large datasets and transformation spaces. Finally, we note that several recent works have proposed augmentation strategies based on adversarial training approaches, such as robust optimization frameworks or generative adversarial networks (GANs) (Goodfellow et al., 2014; Antoniou et al., 2017; Volpi et al., 2018) . These approaches generate artificial points from some target distribution, rather than by directly transforming the original training points. We view these works as orthogonal and complementary approaches to the proposed work, which is designed in concert with more traditional data augmentation strategies.

The area of work most closely related to our own is that of the Virtual Support Vector (VSV) method (Burges & Schölkopf, 1997; Decoste & Schölkopf, 2002) . This method was proposed the support vector machine literature as a way to reduce the set of points for augmentation by limiting transformations to only support vectors. In the context of SVMs, the motivation is straightforward, as points that are far from the margin are unlikely to affect future models if they are transformed via small perturbations. However, to the best of our knowledge, there has been no work extending these ideas to methods beyond SVMs, where the notion of support vectors is not directly applicable.

Inspired by the VSV work, we similarly seek ways to downsample the set of candidate points for augmentation, though through metrics beyond support vectors. We begin by generalizing the notion of a support vector by simply measuring the loss at each training point1 . We also explore model influence, which has been rigorously studied in the field of robust statistics as a way to determine which data points are most impactful on the model. Model influence has been studied extensively in the regression literature (Hoaglin & Welsch, 1978; Pregibon, 1981; Cook, 1986; Walker & Birch, 1988) , and more recently, in non-differentiable (SVMs) and non-convex (deep networks) settings (Koh & Liang, 2017) . We provide additional details on these metrics in Section 4.

Finally, we note that this work is closely related to work in subsampling for general dataset reduction (i.e., not in the context of data augmentation). For example, works using gradients (Zhu, 2016) , leverage (Drineas et al., 2011; 2012; Ma et al., 2015) , and influence functions (McWilliams et al., 2014; Ting & Brochu, 2018; Wang et al., 2018) have shown better results than uniform sampling of data samples in the original dataset. Our scenario differs from the subsampling scenarios in these works as we ultimately anticipate increasing the size of the dataset through augmentation, rather than decreasing it as is the case with subsampling. Subsampling methods are motivated by being unable to train models on entire datasets due to the datasets being too large. Our motivation is instead that the full augmented dataset may be too large, but the original training set is sufficiently small to be handled without special consideration. We therefore assume it is possible to obtain information (e.g., influence, loss, etc.) by fitting a model to the original data. Further, the interpretation of our scenario differs, as the subsampling is performed with the ultimate aim being to retain the accuracy of some yet-to-be-determined fully augmented dataset, as opposed to the original dataset.

3. MOTIVATION: ON THE EFFECTIVENESS OF SUBSAMPLING:

In this work, we seek to make data augmentation more efficient by providing effective policies for subsampling the original training dataset. To motivate the effect of subsampling prior to augmentation, we begin with a simple example. In Table 1 , we report the effect that performing translation augmentations has on the final test accuracy for several datasets (MNIST, CIFAR10, NORB). In the second column, we provide the final test accuracy assuming none of the training data points are augmented, and in the last column, the final test accuracy after augmenting all of the training data points (i.e., our desired test accuracy). Note that the test dataset in these examples has also been augmented with translation to better highlight the effect of augmentation; we provide full experimental details in Section 5. In columns 3-8, we report test accuracies from augmenting 5, 10, and 25 percent of the data, where these subsamples are either derived using simple random sampling or via our proposed policies (to be discussed in Section 4).

An immediate take-away from these results is that, even in the case of simple random sampling, it is often unnecessary to augment the entire dataset to achieve decent accuracy gains. For example, augmenting just 25% of the dataset selected at random can yield more than half of the total accuracy gain from full augmentation. However, it is also evident that subsampling can be done more effectively with the appropriate policy. Indeed, as compared to random sampling, when augmenting just 10% of the data, these optimal policies can achieve almost identical results to full augmentation (within .1% for CIFAR10 and higher accuracy than full augmentation for MNIST and NORB). These results aim to serve as a starting point for the remaining paper. We describe our proposed policies in detail in Section 4, and we provide full experiments and experimental details in Section 5.

Dataset:

No 

4. AUGMENTATION SET SELECTION POLICIES:

In this section, we provide details on our augmentation policies, including their general structure (described below), the metrics they utilize (Section 4.1), and improvements such as reweighting or online learning (Section 4.2).

Setup. The aim in this work is to find some subset S := {(x i , y i ), . . . 

(

i ) = 1 n X X Random Prop. P (z i ) = si j sj X X Deterministic Prop. Rank(z i ) = SELECT -1 S (s i ) X X Random Prop. Update P (z i ) = si j sj X Rand. Prop. Downweight P (z i ) = si j sj

X:

Table 2 : Overview of the augmentation policies and their parameters, where s i is the augmentation score given to point z i = (x i , y i ). The SELECT -1 S function corresponds to the inverse of an order statistic function. As a baseline, we compare to sampling data points at random, ignoring the augmentation scores. Note that the notation here is simplified to allow sampling with replacement, though in practice we perform sampling without replacement.

4.1. METRICS: LOSS AND INFLUENCE:

We propose two metrics to determine our augmentation scores: training loss and model influence.

Training loss. One method to obtain augmentation scores is the loss at a point in the training set. This can be viewed as a more direct generalization of the virtual support vector (VSV) method, as support vectors are points with non-zero loss. However, studying loss directly will allow us: (i) to extend to methods beyond SVMs, and (ii) to expand the augmented set to data points beyond just the fixed set of support vectors.

Influence. We also explore policies based on Leave-One-Out (LOO) influence, which measures the influence that a training data point has against its own loss when it is removed from the training set. We follow the notation used in Koh & Liang (2017) . Let θ be the minimizer of the loss, which is assumed to be twice differentiable and strictly convex in θ. Let H θ be the Hessian of the loss with respect to θ evaluated at the minimizer. We define the influence of upweighting a point, z, on the loss at a test point, z test , as

I up,loss (z, z test ) := -∇ θ L(z test , θ) H -1 θ ∇ θ L(z, θ).

It follows that if the test point is z, then the LOO influence can be calculated as:

EQUATION

For our augmentation scores, we care only about the magnitude of the LOO influence, so it can be assumed that the sign is dropped.

To understand the potential of using training loss and model influence for scoring, we provide a histogram of model influence across the CIFAR10 and NORB datasets in Figure 1 . Full results for all datasets and for training loss are provided in Appendix A. In Figure 1 , we see that while most of the mass is centered around 0 (which we utilize to avoid points), there is sufficient variability to allow for ranking points by preference. Further, as seen in Figure 2 , these values are correlated before and after augmentation, indicating that these metrics are a reliable measure of the future impact of a data point after augmentation. We observe Spearman's rank correlations (Spearman, 1904) between 0.5 and 0.97 with p-values less than 0.001 (and usually orders of magnitude less). 

4.2. REFINEMENTS: SAMPLE REWEIGHTING AND SCORE UPDATING:

Reweighting. To motivate reweighting individual samples, consider an augmentation which is the identity map: f T : z i → {z i }. Since we add augmentations back to the training set, our augmentation policy will duplicate selected samples, resulting in a net effect which reweights samples with twice the original weight. Using transformations that result in larger augmentation sets will result in larger weights. One approach is post-processing; Fithian & Hastie (2014) , for example, show that the case of class imbalanced sampling can be corrected with a shift of the logistic regressor's bias.

To normalize for the effect of this implicit reweighting, we divide the weights of the original samples and its augmented samples by the size of that set, |f T (z i )|. Under this scheme, we guarantee that we conserve the weight originally assigned to a point (and conserve the ratios of labels). More sophisticated policies, such as reweighting samples by a measure of how trustworthy they are (e.g., perhaps some bounds can be derived on the label-preserving properties of an augmentation), remain to be investigated as future work.

We find that in many cases, the performance of reweighting is similar in expectation to the base case. However, in some cases, reweighting can have a negative impact, as we discuss in Section 5.2. We expect this policy to be more useful in the case of class imbalance, where the duplication of minority class samples may significantly alter the distribution over classes.

Updating scores. Once we decide to augment a data point, we can either continue to use the same influence information which we derived for the un-augmented dataset, or we can choose to update it. The reason for doing this is to account for the drifting model behavior as points are added to the training set and the model is retrained. However, if having a single estimate of influence for the whole lifetime of the model is sufficient, then avoiding repeated influence calculations will reduce the amount of computation required while also enabling an increased level of parallelism (e.g., minibatching, distributed computations). We find that this modification results in similar behavior to that of reweightings, where expected performance of a policy remains similar. Overall, we have not observed a significant enough effect to suggest that this technique is justified given the extra cost it requires. The benefit of this is that it implies that many applications may need to only compute selection metadata one time throughout the augmentation process.

5. EXPERIMENTS:

In this section, we provide detailed results on the performance of our proposed policies for data subsampling. For all experiments, we use a Convolutional Neural Network (CNN) to create bottleneck features, which we then use as input into a linear logistic regression model. This is equivalent to freezing the weights of the CNN, or using a set of basis functions, φ i (•), to transform the inputs (Bishop, 2006) , and allows us to quickly calculate training loss and model influence. We explore the results of our augmentation policies on three datasets: binary classification variants of MNIST, CIFAR10, and NORB. For MNIST features, we use a LeNet architecture (LeCun et al., 1998) with ReLu activations, and for CIFAR10 and NORB, we use ResNet50v2 (He et al., 2016) .

While for CIFAR10 and NORB we generate the bottleneck features once due to cost, for MNIST, we additionally study the effect of re-generating these features as new points are selected and augmented (i.e., training both the features and model from scratch throughout the experiments).

In terms of augmentations, we consider three examples: translation, rotation, and crop. To control for sources of variance in model performance, all augmentations under consideration are applied exhaustively in a deterministic fashion to any selected samples, and the resulting augmented points are then added back to the training set. Formally, given a data point, z = (x, y) ∈ X × Y, our augmentation is a map from a data point to a finite set of data points: f T : z → {z 1 , . . . , z n : z i ∈ X × Y}. We controlled for augmentation-induced regularization by performing a simple cross validation sweep for the regularization parameter λ each time the model was re-trained, and we found regularization to have negligible impact in the trends we observed. For all datasets and augmentations, we make the effect of augmentation more apparent by adding augmented test points to the test set. For example, in the case of translation, we test the performance of applying translation augmentations to the original training set, and then determine the accuracy using an augmented variant of the test data that has been appended with translated test examples. All augmentations are performed using Imgaug (Jung, 2018) , and our code is written in Python using Keras CNN implementations. Full implementation details are provided in Appendix B, and our code is publicly available online2 .

5.1. GENERAL POLICIES: INFLUENCE AND LOSS:

In Figure 3 , we explore a first set of policies in which we randomly sample points for augmentation proportional either to their loss (green) or influence value (blue). To calculate the loss and influence, we incur a one-time cost of training the model on the original dataset. As a baseline (red), we compare these methods to a simple strategy in which data points for augmentation are drawn entirely at random (irrespective of loss or influence). The red-dotted horizontal line indicates the test accuracy with no augmentation, and the green-dotted line indicates the test accuracy after augmenting the entire training set. Note that all policies have the same accuracy when the number of points is 0 or k,

where k is the number of points in the original training set, which correspond to the un-augmented training set and the fully augmented training set, respectively3 . We observe similar behavior in terms of the deterministic policy, which is provided in Appendix C.

Across the datasets and transformation types, we notice several trends. First, the policies based on loss and influence consistently outperform the random baseline. This is particularly true for the rotation augmentation for all three datasets, where the random-influence and random-loss policies achieve the full augmentation accuracy with only 5-10% of the data, compared to 90-100% of the data for random sampling. Second, we note that the policies based on influence vs. loss behave very similarly. While influence has slightly better performance (particularly on the NORB dataset), the policies are, for the most part, equivalent. A benefit of this is that the loss calculation is slightly simpler than influence to calculate, as it does not require calculating the inverse Hessian component, H -1 θ , as described in 1. Third, we note that it is possible to achieve higher accuracy than full augmentation using only a reduced set of points for augmentation, as observed in several of the plots (most notably on NORB). We believe that this higher performance may be due to a stronger bias towards harder examples in the dataset as compared to full augmentation.

Finally, we explore the effect of using support vectors for augmentation, which was proposed in the Virtual Support Vector literature (Burges & Schölkopf, 1997; Decoste & Schölkopf, 2002) . In particular, we find VSV points by tuning a linear SVM on the bottleneck features of the original training set, and then using these points as the set of augmentation points for the logistic regression model with bottleneck features. We use search over C ∈ {0.01, 0.1, 1, 10, 100} via cross-validation, and the best resulting model is used to obtain support vectors. Interestingly, we note that, though this transfer approach was not originally proposed in the VSV literature, it results in strong performance on a few of our tests (e.g., NORB-translate, NORB-crop, CIFAR10-rotate). However, the approach is not as reliable as the proposed policies in terms of finding the optimal subset of points for transformation (performing significantly below optimal, e.g., for MNIST and CIFAR10-translate), and the major limitation is that the augmentation set size is fixed to the number of support vectors rather than being able to vary depending on a desired data budget.

We additionally investigate the effect of two refinements on the initial policies: (i) reweighting the samples as they are added back to the training set and (ii) updating the scores as the augmentation proceeds, as described in Section 4.2. The latter policy assumes that the method is run in an online fashion, in contrast to the policies described thus far. This adds extra expense to the total run time, because the model must be continually updated as new points are augmented. In Figure 4 , we observe the effect of these modifications for all datasets using the rotation augmentation with model influence as the score. Full results are provided in Appendix C. Interestingly, while reweighting points seems to have a positive (if negligible) effect for MNIST, we see that it can actually hurt performance in CIFAR10 and NORB. This may indicate that the amplifying effect of augmentation may in fact be beneficial when training the model, and that reweighting may increase the role of regularization in a detrimental manner. In terms of the score updating, we see that, although updating the score can have a slight positive impact (e.g., for NORB-rotate), the performance appears to roughly match that of the original policy. Given the extra expense required in model updating, we therefore conclude that the simpler policies are preferable. Finally, to give insight into the behavior of the proposed polices, we examine the 10 points with highest influence/loss vs. least influence/loss for MNIST. We observe similar results for the other datasets (CIFAR10, NORB); additional results are provided in Appendix E. These examples help visualize the benefits of downsampling, as it is clear that the bottom set of points are all quite similar. The top points, in contrast, appear more diverse-both in terms of class label as well as features (thin lines, thick lines, slanted, straight, etc.). We postulate that promoting this diversity and removing redundancy is key in learning invariances through augmentation more efficiently.

6. DISCUSSION:

In this paper, we demonstrate that not all training points are equally useful for augmentation, and we propose simple policies that can select the most viable subset of points. Our policies, based on notions of training loss and model influence, are widely applicable to general machine learning models. Obtaining access to an augmentation score vector can be obtained in only one training cycle on the original data (e.g., a fixed cost), yet the potential improvements in augmented training can scale superlinearly with respect to the original dataset size. With many fewer data points to augment, the augmentations themselves can be applied in a more efficient manner in terms of compute and expert oversight. At an extreme, they can be specialized on a per-example basis.

A natural area of future work is to explore subset selection policies that take the entire subset into account, rather than the greedy policies described. For example, even if two samples may independently have large leave-one-out influence, it may be the case that these points influence each other and leave-one-out influence may be an overestimate (e.g., consider the case of two identical samples). Including second-order information or encouraging subset diversity4 may therefore help to improve performance even further.

A ADDITIONAL PLOTS: METRICS:

Here we provide histogram plots for loss and influence for all datasets. The key take-away from these results is that the distribution of these metrics indicate that most points have low loss and influence, and thus (according to our policies) can be augmented with low probability. 

B EXPERIMENT DETAILS:

Here we provide full implementation details on our experiments throughout the paper.

Setup. There are a few key architectural ideas in our tests: the data, the augmentations, the selection policy, a featurization preprocessing component, and a logistic regression model. Our implementation is in Python. The dataset is loaded (possibly via third party libraries) into a NumPy array. We then run this dataset through a trained CNN model, such as LeNet (LeCun et al., 1998) or ResNet50v2 (He et al., 2016) , to obtain a feature vector. The logistic regression model is then trained on this resulting "featurized" dataset and tested on a "featurized" test set. Once training is complete, both loss and influence can then be measured for each training point, and can therefore be used as scores. Augmentations are then applied exhaustively to the test set. We refer to this test set as "poisoned". The test distribution has changed, and therefore a gap has formed between the original test performance and the "poisoned" test performance. We attempt to close this gap by applying augmentations to the training set. We proceed by initializing a set with the un-augmented training set. We augment points in rounds, and the un-augmented training set corresponds to round 0. Every round, our policy is given a vector of scores, and it selects a point to augment. This point is featurized and added to the set. If score updates are enabled and the current round is sampled for testing, the model scores are re-calculated for the original data points. The CNN can be optionally retrained, but the logistic regression model must be retrained to obtain the current test accuracy. Each stochastic policy is tested 5 times. Plots show 95% confidence intervals and fix C = 10 for the logistic regression hyperparameter.

Implementation. We perform experiments in Python, using Keras (Chollet et al., 2015) , Tensorflow (Abadi et al., 2015) , Scikit-Learn (Pedregosa et al., 2011; Buitinck et al., 2013) , AutoGrad (Maclaurin et al., 2015) , and Imgaug (Jung, 2018) . We wrap Keras implementations of the CNNs in Scikit-Learn transformers, and we create new classes utilizing Scikit-Learn classifiers and their corresponding influence functions calculated with the autograd system. This allows us to decouple input data, bottleneck features, and the final classifier that calculates influence. It also allows us to perform any additional (i.e., cross validation) tuning rather easily. Augmentations are performed by Imgaug (Jung, 2018) . Our code is publicly available online5 .

Models.:

For all experiments, we use a CNN to create bottleneck features, which we then use as inputs into a linear logistic regression model. This is equivalent to freezing the weights of the CNN, or using a set of basis functions, φ i (•), to transform the inputs (Bishop, 2006) . A LeNet architecture (LeCun et al., 1998) with ReLu activations was used for MNIST; however, this model had issues performing well on the augmented sets for CIFAR10 and NORB. We had also tried a larger model from the Keras examples6 on MNIST, which resulted in similar performance to using LeNet. Both LeNet and the Keras neural network were fast to train, so we retrained the models for 40 -50 epochs with Adam (Kingma & Ba, 2014) and a minibatch size of 512, which was enough to obtain convergence. We used a ResNet50v2 model (He et al., 2016) Augmentations. Our tests use translate, rotate, and crop. Each of these augmentations is applied over a range of parameters, which results in multiple augmented images. Translate is applied for 2 pixels in all cardinal directions (e.g., up, down, left, and right) on MNIST, 3 pixels for CIFAR10, and 6 pixels for NORB (note: this pixel difference is to account for NORB images being 3 times larger than CIFAR10). Rotate is applied for the 15 (14 after removing identity transform) rotations evenly spaced between ±30 • for MNIST. CIFAR10 and NORB use ±5 • , ±2.5 • . For MNIST, crop is applied excluding the outer [1, 2, . . . , 6] pixels on all 4 image sides, and zoom is applied to rescale the resulting image back to its original dimensions. CIFAR10 and NORB exclude the outer 2 pixels. Usually, augmentations are constructed to preserve labels, but it is possible in principle to construct augmentations that utilize label information for the augmentation itself or perhaps induce a change in label (e.g., an image dataset with segmentation information can segment out all non-background classes to change the label of an image to background). Such augmentations are expensive, require domain expertise, and are hard to validate, but they may be viable if the number of total augmentations can be controlled.

C ADDITIONAL PLOTS: POLICIES:

Below we provide full experiments for the randomized (Figure 9 ) and deterministic (Figure 10 ) policies using model influence as the scoring metric across all datasets and transformations. Please see Appendix D for tables listing Area Under the Curve (AUC) statistics. 

D FULL RESULTS: POLICIES:

Below we provide Area Under the Curve (AUC) results from the plots provided in Appendix C as well as the corresponding results for loss. Compared to the plots, the AUC provides a single metric by which to determine the best performing policy. We separate tables across augmentation (translate/rotate/crop) and score function (loss/influence).

In the tables below, we make the following abbreviations corresponding to the policies described in Section 4: Det (Deterministic), Prop (Proportional), Down (Downweight), and Rand (Random). Figure 16 : The performance of CIFAR10 k-DPP policies using bottleneck features or a combination of influence and bottleneck features in the kernel. Only 250 augmented points were used due to the computational expense of samplings a larger amount of points.

For our tests, we use a k-DPP, which is a DPP conditioned on the number of points selected being equal to k. We summarize the notation given in Kulesza & Taskar (2012) for our construction of the DPP kernel, L. We set L ij = q i φ i φ j q j8 , where q i ∈ R + is a quality term and φ i ∈ R D is a diversity term. In our tests, we use influence for q i and bottleneck features for φ i . We normalized each sample with ||φ i || 2 = 1 as was suggested in Kulesza & Taskar (2012) to make all samples equally likely without taking diversity into account.

The DPP results are shown in Figure 16 . "Influence Bottleneck DPP" corresponds to using both influence and bottleneck features in the kernel. "Bottleneck DPP" corresponds to using only bottleneck features and therefore has no idea of the quality of a point. For the DPP experiments, we ran up to 250 points augmentations and re-ran the experiments 5 times. The other results included in the plot are from previous experiments. As can be seen, the influence weighted DPP performance is competitive with the influence driven approach. Using solely bottleneck features (i.e., q i = 1) for L resulted in poor performance. The reason we chose to only test up to 250 augmented points is because sampling a DPP takes O(N k 3 ), where N is the size of the full set used in the subset selection. We found this computational performance to be limiting in practice, as N = 1000 and k approached 1000. For low k, it may make sense to use DPP methods, but for larger k, alternative approaches or approximations may be required due to computational budgets.

I EFFECTS ON TRAINING PERFORMANCE:

In the context of deep learning, we expect performance to scale linearly with an increased dataset. To highlight this effect, we train a ResNet50v2 network (He et al., 2016) using Tensorflow (Abadi et al., 2015) version 1.10.1 with a variable number of training examples obtained from CIFAR10. The system which was used for the test has an Intel i7-6700k and an Nvidia GTX 1080 using CUDA 9.2 and CuDNN 7.2.1. We ran the test 5 times to control for variance. We show the resulting scaling performance in Figure 17 . Little deviation was observed from the linear fit.

We can see that the scaling is indeed linear. If we assume that the number of epochs is fixed, then we can conclude subsampling would result in a linear decrease in training time. We observe decreases in training time in our MNIST experiments, where we continously retrain our featureextraction model with variable amounts of augmented data. In a more complicated training regime, such as distributed training, we can expect this improvement to be greater. Although it is true that the initial model training may reduce some of these performance benefits, it is worth noting that a pretrained model may be used to bootstrap a different model, and the cost of the initial training can be amortized over many experiments. For the CIFAR10 translate task, we tried using the SVM support vectors to select points to augment for a ResNetv2 model. Our training used a fraction of the baseline method's total training data (1296/500), but achieved within 5% of the test accuracy. Similar trends were observed in other tasks. Augmenting a subset of the training set has the potential to decrease training time without significantly compromising model performance.

:

We also investigate a more direct generalization of the VSV method-sampling points according to their distance from the margin-in Appendix F, although this method generally underperforms the other metrics.

https://github.com/mkuchnik/Efficient_Augmentation

In practice, the non-convexity of CNNs results in accuracies which may vary slightly.

See Appendix G and H for preliminary work investigating subset diversity.

https://github.com/mkuchnik/Efficient_Augmentation

https://github.com/keras-team/keras/blob/master/examples/mnist_cnn.py

Table 11: AUC statistics: NORB Crop.

http://www.alexkulesza.com/code/dpp.tgz

We experienced numerical issues computing the elementary symmetric polynomials for high k, so we scale φi by 1000.

Figures and Tables:

Figure 1: Distribution of influence function values on initial training set for translate augmentations. Most values are not influential and can therefore be augmented with low priority. We find similar results when measuring training loss (Appendix A).

Figure 2: Influence distribution on initial training set (x-axis) vs. final training set (y-axis) for translate augmentations. Points that are uninfluential typically remain uninfluential.

Figure3: The performance of random policies using influence and loss vs. the baseline (simple random sampling). Random sampling based on loss/influence consistently outperforms the baseline.

Figure 4: The performance of policies when point downweighting is used or augmentation scores are updated.

Figure 6: Distribution of log loss values on initial training set for translate augmentations. The distributions seem to have similar shape, but with different scales. Most values are not influential and can be augmented with low priority.

Figure 8: Distribution of influence values on initial training set (x-axis) vs. final training set (y-axis) for translate augmentations. The distributions seem to have similar shape, but with different scales. Most values are not influential and can be augmented with low priority. Points that are not influential usually stay uninfluential.

Figure 10: The performance of deterministic policies using influence.

x j , y j )} of the full training set D := {(x 1 , y 1 ), . . . (x n , y n )}, such that augmenting only the subset S results in similar performance to augmenting the entire dataset D. More precisely, the goal is to minimize the size of S, |S|, subject to the constraint that perf(S aug ) ≈ perf(D aug ), where S aug and D aug represent the dataset after appending augmented examples generated from the original examples in S or D, respectively. We note that while the performance measure perf(•) may be broadly construed, we specifically focus on measuring performance based on test accuracy in our experiments.

Table content: <table><tr><td colspan="3">General Policies. Our proposed policies consist of two parts: (i) an augmentation score which maps</td></tr><tr><td colspan="3">each training point (x i , y i ) to a value s ∈ R, and (ii) a policy by which to sample points based on</td></tr><tr><td colspan="3">these augmentation scores. In Section 4.1, we describe two metrics, loss and model influence, by</td></tr><tr><td colspan="3">which augmentation scores are generated. In terms of policies for subset selection based on these</td></tr><tr><td colspan="3">scores, we first explore two simple policies-deterministic and random. In particular, given a set of</td></tr><tr><td colspan="3">augmentation scores {s 1 , . . . , s n } for the n training points, we select a subset S ⊆ D either by or-</td></tr><tr><td colspan="3">dering the points based on their scores and taking the top k values (in a deterministic fashion), or by</td></tr><tr><td colspan="3">converting each augmentation score s i to a probability π i (z) ∈ [0, 1], and then sampling according</td></tr><tr><td colspan="3">to this distribution without replacement. As the augmentation scores (and resulting policies) may be</td></tr><tr><td colspan="3">affected by updates to the model after each augmentation, we additionally explore in Section 4.2 the</td></tr><tr><td colspan="3">effect of iteratively updating or re-weighting scores to adjust for shifts in the underlying model. A</td></tr><tr><td colspan="3">non-exhaustive overview of the various augmentation policies is provided in Table 2.</td></tr><tr><td>Policy Type</td><td>Selection Function</td><td>Update Scores Downweight Points</td></tr><tr><td>Baseline</td><td>P (z</td><td/></tr></table>

model trained on the CIFAR10 dataset for the CIFAR10 tests, and we obtained good performance without using augmentations in the training process. Using a pretrained ImageNet ResNet50 model resulted in poor performance (both computationally and in accuracy). For NORB, we were able to obtain good performance on the translate task without any training-time data augmentations being applied on the NORB dataset. However, the other augmentations resulted in high prediction degradation, so the ResNet model was retrained with random rotations, shifts, and flips applied to images. All ResNet models were frozen after the initial training.Datasets. We convert each of the datasets into a binary classification task. MNIST is 3 vs. 8, CIFAR10 is airplane vs. automobile, and NORB is animal vs. human. 1000 training examples are sampled from the resulting binary classification problem. The MNIST train class split is 517/483, and its test class split is 1010/974. The CIFAR10 train class split is 523/477, and its test class split is 1000/1000. THE NORB train class split is 500/500, and its test class split is 4860/4860.

Table content: <table/>

AUC statistics: MNIST Translate.

Table content: <table><tr><td colspan="6">D.1 AREA UNDER CURVE (AUC) RESULTS USING LOSS</td></tr><tr><td>Policy</td><td colspan="2">AUC Mean AUC Std.</td><td>Policy</td><td colspan="2">AUC Mean AUC Std.</td></tr><tr><td>Det Prop Update</td><td>995.442</td><td>-</td><td>Det Prop</td><td>972.555</td><td>-</td></tr><tr><td>Det Prop Update Down</td><td>995.375</td><td>-</td><td>Rand Prop</td><td>972.423</td><td>0.119</td></tr><tr><td>Rand Prop Update Down</td><td>995.373</td><td>0.350</td><td>Det Prop Update</td><td>971.979</td><td>-</td></tr><tr><td>Rand Prop</td><td>995.305</td><td>0.242</td><td>Rand Prop Update</td><td>971.876</td><td>0.112</td></tr><tr><td>Det Prop</td><td>995.239</td><td>-</td><td>Baseline</td><td>970.589</td><td>0.671</td></tr><tr><td>Rand Prop Update</td><td>995.231</td><td>0.268</td><td>Det Prop Down</td><td>970.163</td><td>-</td></tr><tr><td>Det Prop Down</td><td>995.167</td><td>-</td><td>Rand Prop Down</td><td>969.980</td><td>0.132</td></tr><tr><td>Rand Prop Down</td><td>995.153</td><td>0.154</td><td>Det Prop Update Down</td><td>969.932</td><td>-</td></tr><tr><td>Baseline</td><td>993.599</td><td>0.355</td><td>Rand Prop Update Down</td><td>969.851</td><td>0.245</td></tr><tr><td>Rand Inverse Prop</td><td>985.775</td><td>0.656</td><td>Rand Inverse Prop</td><td>969.291</td><td>0.338</td></tr><tr><td>Det Inverse Prop</td><td>984.249</td><td>-</td><td>Det Inverse Prop</td><td>968.790</td><td>-</td></tr></table>

AUC statistics: CIFAR10 Translate.

Table content: <table><tr><td>Policy</td><td colspan="2">AUC Mean AUC Std.</td></tr><tr><td>Det Prop</td><td>896.517</td><td>-</td></tr><tr><td>Det Prop Update</td><td>896.095</td><td>-</td></tr><tr><td>Rand Prop</td><td>895.901</td><td>0.503</td></tr><tr><td>Rand Prop Update</td><td>895.793</td><td>0.686</td></tr><tr><td>Det Prop Down</td><td>890.210</td><td>-</td></tr><tr><td>Rand Prop Down</td><td>890.044</td><td>0.299</td></tr><tr><td>Det Prop Update Down</td><td>889.868</td><td>-</td></tr><tr><td>Rand Prop Update Down</td><td>889.492</td><td>0.151</td></tr><tr><td>Baseline</td><td>888.852</td><td>1.876</td></tr><tr><td>Det Inverse Prop</td><td>882.327</td><td>-</td></tr><tr><td>Rand Inverse Prop</td><td>881.991</td><td>0.572</td></tr></table>

AUC statistics: NORB Translate.

Table content: <table><tr><td>Policy</td><td colspan="2">AUC Mean AUC Std.</td></tr><tr><td>Det Prop</td><td>997.285</td><td>-</td></tr><tr><td>Rand Prop Update Down</td><td>997.266</td><td>0.152</td></tr><tr><td>Rand Prop Update</td><td>997.246</td><td>0.167</td></tr><tr><td>Rand Prop Down</td><td>997.215</td><td>0.193</td></tr><tr><td>Rand Prop</td><td>997.076</td><td>0.213</td></tr><tr><td>Det Prop Update</td><td>996.966</td><td>-</td></tr><tr><td>Det Prop Down</td><td>996.914</td><td>-</td></tr><tr><td>Det Prop Update Down</td><td>996.847</td><td>-</td></tr><tr><td>Baseline</td><td>995.393</td><td>0.637</td></tr><tr><td>Rand Inverse Prop</td><td>990.824</td><td>0.466</td></tr><tr><td>Det Inverse Prop</td><td>989.941</td><td>-</td></tr></table>

AUC statistics: MNIST Rotate.

Table content: <table><tr><td>Policy</td><td colspan="2">AUC Mean AUC Std.</td></tr><tr><td>Det Prop</td><td>975.654</td><td>-</td></tr><tr><td>Rand Prop</td><td>975.421</td><td>0.058</td></tr><tr><td>Det Prop Update</td><td>975.368</td><td>-</td></tr><tr><td>Rand Prop Update</td><td>975.293</td><td>0.127</td></tr><tr><td>Det Prop Down</td><td>973.817</td><td>-</td></tr><tr><td>Rand Prop Down</td><td>973.712</td><td>0.085</td></tr><tr><td>Det Prop Update Down</td><td>973.707</td><td>-</td></tr><tr><td>Rand Prop Update Down</td><td>973.504</td><td>0.169</td></tr><tr><td>Baseline</td><td>973.386</td><td>0.461</td></tr><tr><td>Rand Inverse Prop</td><td>969.174</td><td>0.272</td></tr><tr><td>Det Inverse Prop</td><td>969.041</td><td>-</td></tr></table>

AUC statistics: CIFAR10 Rotate.

Table content: <table><tr><td>Policy</td><td colspan="2">AUC Mean AUC Std.</td></tr><tr><td>Det Prop Update</td><td>964.548</td><td>-</td></tr><tr><td>Rand Prop Update</td><td>963.728</td><td>0.800</td></tr><tr><td>Det Prop</td><td>963.622</td><td>-</td></tr><tr><td>Rand Prop</td><td>963.386</td><td>0.549</td></tr><tr><td>Baseline</td><td>960.357</td><td>2.674</td></tr><tr><td>Rand Prop Update Down</td><td>953.545</td><td>0.322</td></tr><tr><td>Det Prop Update Down</td><td>953.328</td><td>-</td></tr><tr><td>Rand Prop Down</td><td>953.084</td><td>0.258</td></tr><tr><td>Det Prop Down</td><td>952.623</td><td>-</td></tr><tr><td>Rand Inverse Prop</td><td>947.480</td><td>1.343</td></tr><tr><td>Det Inverse Prop</td><td>944.814</td><td>-</td></tr></table>

AUC statistics: NORB Rotate.

Table content: <table><tr><td>Policy</td><td colspan="2">AUC Mean AUC Std.</td></tr><tr><td>Det Prop Down</td><td>995.839</td><td>-</td></tr><tr><td>Rand Prop Down</td><td>995.806</td><td>0.475</td></tr><tr><td>Rand Prop</td><td>995.768</td><td>0.307</td></tr><tr><td>Rand Prop Update Down</td><td>995.650</td><td>0.302</td></tr><tr><td>Rand Prop Update</td><td>995.533</td><td>0.461</td></tr><tr><td>Det Prop</td><td>995.472</td><td>-</td></tr><tr><td>Det Prop Update Down</td><td>995.260</td><td>-</td></tr><tr><td>Det Prop Update</td><td>994.901</td><td>-</td></tr><tr><td>Baseline</td><td>992.704</td><td>0.566</td></tr><tr><td>Det Inverse Prop</td><td>984.146</td><td>-</td></tr><tr><td>Rand Inverse Prop</td><td>983.969</td><td>0.384</td></tr></table>

AUC statistics: MNIST Crop.

Table content: <table><tr><td>Policy</td><td colspan="2">AUC Mean AUC Std.</td></tr><tr><td>Det Prop</td><td>966.573</td><td>-</td></tr><tr><td>Rand Prop</td><td>966.222</td><td>0.478</td></tr><tr><td>Det Prop Update</td><td>966.083</td><td>-</td></tr><tr><td>Rand Prop Update</td><td>965.468</td><td>0.510</td></tr><tr><td>Det Prop Down</td><td>964.257</td><td>-</td></tr><tr><td>Rand Prop Down</td><td>963.146</td><td>0.275</td></tr><tr><td>Det Prop Update Down</td><td>963.057</td><td>-</td></tr><tr><td>Rand Prop Update Down</td><td>962.777</td><td>0.381</td></tr><tr><td>Baseline</td><td>961.453</td><td>1.052</td></tr><tr><td>Rand Inverse Prop</td><td>958.990</td><td>0.339</td></tr><tr><td>Det Inverse Prop</td><td>958.132</td><td>-</td></tr></table>

AUC statistics: CIFAR10 Crop.

Table content: <table><tr><td>Policy</td><td colspan="2">AUC Mean AUC Std.</td></tr><tr><td>Det Prop Update</td><td>954.829</td><td>-</td></tr><tr><td>Det Prop</td><td>954.812</td><td>-</td></tr><tr><td>Rand Prop</td><td>954.420</td><td>0.464</td></tr><tr><td>Rand Prop Update</td><td>954.417</td><td>0.242</td></tr><tr><td>Baseline</td><td>950.220</td><td>2.276</td></tr><tr><td>Rand Prop Update Down</td><td>949.879</td><td>0.389</td></tr><tr><td>Det Prop Update Down</td><td>949.715</td><td>-</td></tr><tr><td>Rand Prop Down</td><td>949.647</td><td>0.699</td></tr><tr><td>Det Prop Down</td><td>949.446</td><td>-</td></tr><tr><td>Rand Inverse Prop</td><td>936.744</td><td>1.301</td></tr><tr><td>Det Inverse Prop</td><td>934.525</td><td>-</td></tr></table>

AUC statistics: MNIST Translate.

Table content: <table><tr><td>Policy</td><td colspan="2">AUC Mean AUC Std.</td></tr><tr><td>Det Prop</td><td>972.635</td><td>-</td></tr><tr><td>Rand Prop</td><td>972.427</td><td>0.219</td></tr><tr><td>Rand Prop Update</td><td>971.954</td><td>0.068</td></tr><tr><td>Det Prop Update</td><td>971.924</td><td>-</td></tr><tr><td>Baseline</td><td>970.741</td><td>0.584</td></tr><tr><td>Rand Prop Down</td><td>970.255</td><td>0.165</td></tr><tr><td>Det Prop Down</td><td>970.128</td><td>-</td></tr><tr><td>Rand Prop Update Down</td><td>969.995</td><td>0.145</td></tr><tr><td>Det Prop Update Down</td><td>969.967</td><td>-</td></tr><tr><td>Det Inverse Prop</td><td>968.695</td><td>-</td></tr><tr><td>Rand Inverse Prop</td><td>968.617</td><td>0.468</td></tr></table>

AUC statistics: CIFAR10 Translate.

Table content: <table><tr><td>Policy</td><td colspan="2">AUC Mean AUC Std.</td></tr><tr><td>Det Prop</td><td>896.517</td><td>-</td></tr><tr><td>Rand Prop Update</td><td>896.096</td><td>0.254</td></tr><tr><td>Det Prop Update</td><td>896.095</td><td>-</td></tr><tr><td>Rand Prop</td><td>895.844</td><td>0.661</td></tr><tr><td>Det Prop Down</td><td>890.194</td><td>-</td></tr><tr><td>Det Prop Update Down</td><td>889.860</td><td>-</td></tr><tr><td>Rand Prop Down</td><td>889.832</td><td>0.189</td></tr><tr><td>Rand Prop Update Down</td><td>889.606</td><td>0.139</td></tr><tr><td>Baseline</td><td>887.545</td><td>2.937</td></tr><tr><td>Det Inverse Prop</td><td>882.327</td><td>-</td></tr><tr><td>Rand Inverse Prop</td><td>882.154</td><td>0.515</td></tr></table>

AUC statistics: NORB Translate.

Table content: <table><tr><td>Policy</td><td colspan="2">AUC Mean AUC Std.</td></tr><tr><td>Rand Prop Update Down</td><td>997.277</td><td>0.071</td></tr><tr><td>Det Prop Update Down</td><td>997.249</td><td>-</td></tr><tr><td>Rand Prop</td><td>997.200</td><td>0.081</td></tr><tr><td>Rand Prop Update</td><td>997.162</td><td>0.167</td></tr><tr><td>Det Prop Update</td><td>997.128</td><td>-</td></tr><tr><td>Det Prop Down</td><td>997.111</td><td>-</td></tr><tr><td>Rand Prop Down</td><td>997.054</td><td>0.200</td></tr><tr><td>Det Prop</td><td>996.671</td><td>-</td></tr><tr><td>Baseline</td><td>995.120</td><td>0.329</td></tr><tr><td>Rand Inverse Prop</td><td>990.701</td><td>0.418</td></tr><tr><td>Det Inverse Prop</td><td>990.458</td><td>-</td></tr></table>

AUC statistics: MNIST Rotate.

Table content: <table><tr><td>Policy</td><td colspan="2">AUC Mean AUC Std.</td></tr><tr><td>Det Prop</td><td>975.624</td><td>-</td></tr><tr><td>Det Prop Update</td><td>975.430</td><td>-</td></tr><tr><td>Rand Prop</td><td>975.408</td><td>0.183</td></tr><tr><td>Rand Prop Update</td><td>975.321</td><td>0.161</td></tr><tr><td>Det Prop Down</td><td>973.907</td><td>-</td></tr><tr><td>Rand Prop Down</td><td>973.792</td><td>0.081</td></tr><tr><td>Det Prop Update Down</td><td>973.722</td><td>-</td></tr><tr><td>Rand Prop Update Down</td><td>973.678</td><td>0.149</td></tr><tr><td>Baseline</td><td>973.011</td><td>1.402</td></tr><tr><td>Rand Inverse Prop</td><td>969.086</td><td>0.427</td></tr><tr><td>Det Inverse Prop</td><td>968.836</td><td>-</td></tr></table>

AUC statistics: CIFAR10 Rotate.

Table content: <table><tr><td>Policy</td><td colspan="2">AUC Mean AUC Std.</td></tr><tr><td>Det Prop Update</td><td>964.548</td><td>-</td></tr><tr><td>Rand Prop Update</td><td>964.151</td><td>0.678</td></tr><tr><td>Det Prop</td><td>963.632</td><td>-</td></tr><tr><td>Rand Prop</td><td>963.605</td><td>0.358</td></tr><tr><td>Baseline</td><td>959.909</td><td>2.164</td></tr><tr><td>Rand Prop Update Down</td><td>953.593</td><td>0.552</td></tr><tr><td>Rand Prop Down</td><td>953.405</td><td>0.564</td></tr><tr><td>Det Prop Update Down</td><td>953.362</td><td>-</td></tr><tr><td>Det Prop Down</td><td>952.613</td><td>-</td></tr><tr><td>Rand Inverse Prop</td><td>947.515</td><td>1.959</td></tr><tr><td>Det Inverse Prop</td><td>944.818</td><td>-</td></tr></table>

AUC statistics: NORB Rotate.

Table content: <table><tr><td>Policy</td><td colspan="2">AUC Mean AUC Std.</td></tr><tr><td>Rand Prop</td><td>996.018</td><td>0.425</td></tr><tr><td>Det Prop</td><td>995.966</td><td>-</td></tr><tr><td>Det Prop Down</td><td>995.959</td><td>-</td></tr><tr><td>Rand Prop Update Down</td><td>995.883</td><td>0.392</td></tr><tr><td>Rand Prop Update</td><td>995.828</td><td>0.534</td></tr><tr><td>Det Prop Update Down</td><td>995.825</td><td>-</td></tr><tr><td>Det Prop Update</td><td>995.724</td><td>-</td></tr><tr><td>Rand Prop Down</td><td>995.266</td><td>0.575</td></tr><tr><td>Baseline</td><td>992.996</td><td>0.693</td></tr><tr><td>Rand Inverse Prop</td><td>984.038</td><td>1.097</td></tr><tr><td>Det Inverse Prop</td><td>982.945</td><td>-</td></tr></table>

AUC statistics: MNIST Crop.

Table content: <table><tr><td>Policy</td><td colspan="2">AUC Mean AUC Std.</td></tr><tr><td>Det Prop</td><td>966.586</td><td>-</td></tr><tr><td>Rand Prop</td><td>966.529</td><td>0.322</td></tr><tr><td>Det Prop Update</td><td>966.181</td><td>-</td></tr><tr><td>Rand Prop Update</td><td>965.684</td><td>0.251</td></tr><tr><td>Det Prop Down</td><td>964.369</td><td>-</td></tr><tr><td>Rand Prop Down</td><td>963.936</td><td>0.321</td></tr><tr><td>Det Prop Update Down</td><td>963.305</td><td>-</td></tr><tr><td>Rand Prop Update Down</td><td>962.908</td><td>0.218</td></tr><tr><td>Baseline</td><td>962.606</td><td>1.304</td></tr><tr><td>Rand Inverse Prop</td><td>958.602</td><td>0.751</td></tr><tr><td>Det Inverse Prop</td><td>957.854</td><td>-</td></tr></table>

AUC statistics: CIFAR10 Crop.

Table content: <table><tr><td>Policy</td><td colspan="2">AUC Mean AUC Std.</td></tr><tr><td>Det Prop</td><td>954.838</td><td>-</td></tr><tr><td>Det Prop Update</td><td>954.829</td><td>-</td></tr><tr><td>Rand Prop Update</td><td>954.682</td><td>0.503</td></tr><tr><td>Rand Prop</td><td>954.604</td><td>0.391</td></tr><tr><td>Baseline</td><td>951.899</td><td>1.507</td></tr><tr><td>Rand Prop Down</td><td>950.104</td><td>0.358</td></tr><tr><td>Det Prop Update Down</td><td>949.715</td><td>-</td></tr><tr><td>Rand Prop Update Down</td><td>949.558</td><td>0.470</td></tr><tr><td>Det Prop Down</td><td>949.446</td><td>-</td></tr><tr><td>Rand Inverse Prop</td><td>936.787</td><td>2.056</td></tr><tr><td>Det Inverse Prop</td><td>934.529</td><td>-</td></tr></table>

AUC statistics: NORB Crop.

Table content: <table><tr><td/><td>0.974</td><td/><td/><td/><td/><td/><td>0.970</td><td/><td/></tr><tr><td>Test Accuracy</td><td>0.962 0.964 0.966 0.968 0.970 0.972</td><td>0</td><td>200 Number of Augmented Points 400 600 800 Baseline Random Proportional Influence 1000 Influence Bottleneck DPP Bottleneck DPP Test Accuracy</td><td>0.962 0.965 0.967 0.970 0.975 0.972</td><td>0</td><td>200 Number of Augmented Points 400 600 800 Baseline Random Proportional Influence 1000 Influence Bottleneck DPP Bottleneck DPP Test Accuracy</td><td>0.930 0.960 0.940 0.950</td><td>0</td><td>200 Number of Augmented Points 400 600 800 Baseline Random Proportional Influence 1000 Influence Bottleneck DPP Bottleneck DPP</td></tr><tr><td/><td/><td/><td>(a) CIFAR10-translate</td><td/><td/><td>(b) CIFAR10-rotate</td><td/><td/><td>(c) CIFAR10-crop</td></tr></table>

Peer review (iclr2019):
 This paper considers how to augment training data by applying class-preserving transformations to selected datapoints. It proposes improving random datapoint selection by selection policies based on two metrics: the training loss associate with each datapoint ("Loss"), and the influence score (from Koh and Liang that approximates leave-one-one test loss). The authors consider two policies based on these metrics: apply transformations to training points in decreasing order of their score, or to training points sampled with probability proportional to score. They also consider two refinements: downweighting observations that are selected for transformation, and updating scores everytime transformations associated with an observation are added. The problem the authors tackle is important and their approach is natural and promising. On the downside, the theoretical contribution is moderate, and the empirical studies quite limited. The stated goals of the paper are quite modest: "In this work, we demonstrate that it is possible to significantly reduce the number of data points included in data augmentation while realizing the same accuracy and invariance benefits of augmenting the entire dataset". It is not too surprising that carefully choosing observations according suitable policies is an improvement over random subsampling, especially, when the test data has been "poisoned" to highlight this effect. The authors have demonstrated that two intuitive policies do indeed work, have quantified this on 3 datasets. However they do not address the important question of whether doing so can improve training time/efficiency. In other words, the authors have not attempted to investigate the computational cost of trying to assign importance scores to each observation. Thus this paper does not really demonstrate the overall usefulness of the proposed methodology. The experimental setup is also limited to (I think) favor the proposed methodology. Features are precomputed on images using a CNN, and the different methods are compared on a logistic regression layer acting on the frozen features. The existence of such a pretrained model is necessary for the proposed methods, otherwise one cannot assign selection scores to different datapoints. However, this is not needed for random selection, where the transformed inputs can directly be input to the system. A not unreasonable baseline would be to train the entire CNN with the augmented 5%,10%, 25% datasets, rather than just the last layer. Of course this now involves training the entire CNN on the augmented dataset, rather than just the last layer, but how relevant is the two stage training approach that the authors propose? In short, while I think the proposed methodology is promising, the authors missed a chance to include a more thorough analysis of the trade-offs of their method. I also think the paper makes only a minimal effort to understand the policies, the experiments could have helped shed some more light on this. Minor point: The definition of "influence" is terse e.g. I do not see the definition of H anywhere (the Hessian of the empirical loss)