[1] timm/tf_efficientnet_l2.ns_jft_in1k_475 · hugging face. https://huggingface.co/timm/tf_efficientnet_l2.ns_jft_in1k_475. (Accessed on 06/05/2023). 8
[2] Centercrop — torchvision main documentation. https://pytorch.org/vision/main/generated/torchvision.transformsCenterCrop.html. (Accessed on 03/07/2023). 5
[3] Iclr 2023. https://iclr.cc/. (Accessed on 11/10/2022). 10
[4] Random oversizedcrop — torchvision main documentation. https://pytorch.org/vision/main/generated/torchvision.transforms.RandomResizedCrop.html. (Accessed on 03/08/2023). 6
[5] Alcorn, M. A., Li, Q., Gong, Z., Wang, C., Mai, L., Ku, W.-S., and Nguyen, A. Strike (with) a pose: Neural networks are easily fooled by strange poses of familiar objects. In Proceedings of the IEEE/CVF conference on computer vision and pattern recognition, pp. 4845-4854, 2019. 3, 10
[6] Ayhan, M. S. and Berens, P. Test-time data augmentation for estimation of heteroscedastic aleatoric uncertainty in deep neural networks. In Medical Imaging with Deep Learning, 2018. 3
[7] Bahat, Y. and Shakhnarovich, G. Classification confidence estimation with test-time data-augmentation. arXiv e-prints, pp. arXiv-2006, 2020. 3
[8] Barbu, A., Mayo, D., Alverio, J., Luo, W., Wang, C., Gutfreund, D., Tenenbaum, J., and Katz, B. Objectnet: A large-scale bias-controlled dataset for pushing the limits of object recognition models. Advances in neural information processing systems, 32, 2019. 3
[9] Bau, D., Zhou, B., Khosla, A., Oliva, A., and Torralba, A. Network dissection: Quantifying interpretability of deep visual representations. In Proceedings of the IEEE conference on computer vision and pattern recognition, pp. 6541-6549, 2017. 1
[10] Beyer, L., Henaff, O. J., Kolesnikov, A., Zhai, X., and Oord, A. v. d. Are we done with imagenet? arXiv preprint arXiv:2006.07159, 2020. 3, 8
[11] Chefer, H., Schwartz, I., and Wolf, L. Optimizing relevance maps of vision transformers improves robustness. In Oh, A. H., Agarwal, A., Belgrave, D., and Cho, K. (eds.), Advances in Neural Information Processing Systems, 2022. URL https://openreview.net/forum?id=upuYKQiyxa_.10
[12] Chen, P., Agarwal, C., and Nguyen, A. The shape and simplicity biases of adversarially robust imagenet-trained cnns. arXiv preprint arXiv:2006.09373, 2020. 23
[13] Chen, S., Huang, X., He, Z., and Sun, C. Damagenet: A universal adversarial dataset. arXiv preprint arXiv:1912.07160, 2019. 7
[14] Chun, S., Lee, J. Y., and Kim, J. Cyclic test time augmentation with entropy weight method. In Uncertainty in Artificial Intelligence, pp. 433-442. PMLR, 2022. 3
[15] De Vries, T., Misra, I., Wang, C., and Van der Maaten, L. Does object recognition work for everyone? In Proceedings of the IEEE/CVF conference on computer vision and pattern recognition workshops, pp. 52-59, 2019. 10
[16] Donnelly, J., Barnett, A. J., and Chen, C. Deformable protopnet: An interpretable image classifier using deformable prototypes. In Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition, pp. 10265-10275, 2022. 2, 3
[17] Dosovitskiy, A., Beyer, L., Kolesnikov, A., Weissenborn, D., Zhai, X., Unterthiner, T., Dehghani, M., Minderer, M., Heigold, G., Gelly, S., et al. An image is worth 16x16 words: Transformers for image recognition at scale. In International Conference on Learning Representations, 2020. 2, 3, 27, 41
[18] Fu, J., Zheng, H., and Mei, T. Look closer to see better: Recurrent attention convolutional neural network for fine-grained image recognition. In Proceedings of the IEEE conference on computer vision and pattern recognition, pp. 4438-4446, 2017. 2
[19] Geirhos, R., Rubisch, P., Michaelis, C., Bethge, M., Wichmann, F. A., and Brendel, W. Imagenet-trained CNNs are biased towards texture; increasing shape bias improves accuracy and robustness. In International Conference on Learning Representations, 2019. URL https://openreview.net/forum?id=Bygh9j09KX.23
[20] Geirhos, R., Jacobsen, J.-H., Michaelis, C., Zemel, R., Brendel, W., Bethge, M., and Wichmann, F. A. Shortcut learning in deep neural networks. Nature Machine Intelligence, 2(11):665-673, 2020. 34