Techniques are disclosed for training a feature extraction model. A computing device can receive a training image and generate noised feature vectors using a feature extraction model characterized by first parameters and taking the training image as input. The computing device can determine the noised feature vectors by at least determining a feature vector for individual pixels in the training image and applying noise to each feature vector. The computing device can generate a reconstructed image using a reconstructor model characterized by second parameters and taking the noised feature vectors as input. The computing device can determine a reconstruction loss by comparing the training image with the reconstructed image and a noise loss using the noise applied to each feature vector. The computing device can update the first parameters based on the noise loss.