arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 2407.14971cs.CVcs.AIcs.CLcs.LG

Sim-CLIP: 无监督的孪生对抗微调用于鲁棒且语义丰富的视觉-语言模型

Sim-CLIP: Unsupervised Siamese Adversarial Fine-Tuning for Robust and Semantically-Rich Vision-Language Models

Florida Atlantic University(佛罗里达大西洋大学)

Md Zarif Hossain, Ahmed Imteaj

AI总结:

Sim-CLIP通过无监督对抗微调提升CLIP视觉编码器的鲁棒性,同时保持语义表示。采用孪生架构和余弦相似度目标,避免大批次对比学习和额外动量编码器,实现低计算开销的鲁棒训练。

摘要:

视觉-语言模型(VLMs)依赖预训练视觉编码器支持下游任务,如图像描述、视觉问答和零样本分类。尽管性能强大,这些编码器仍易受不可察觉对抗扰动影响,严重降低多模态推理的鲁棒性和语义质量。本文提出Sim-CLIP,一种无监督对抗微调框架,增强CLIP视觉编码器的鲁棒性并保持整体语义表示。Sim-CLIP采用孪生训练架构,结合余弦相似度目标和对称停止梯度机制,强制清洁和对抗视角之间的语义对齐。此设计避免了大批次对比学习和额外动量编码器,实现低计算开销的鲁棒训练。我们评估了Sim-CLIP在多种视觉-语言模型和任务上,针对目标和非目标对抗攻击。实验结果表明,Sim-CLIP在对抗鲁棒性上优于现有最先进鲁棒CLIP变体,同时保持或提升语义保真度。这些发现突显了现有对抗防御的局限性,并确立Sim-CLIP作为鲁棒视觉-语言表示学习的有效且可扩展的解决方案。

英文摘要:

Vision-Language Models (VLMs) rely heavily on pretrained vision encoders to support downstream tasks such as image captioning, visual question answering, and zero-shot classification. Despite their strong performance, these encoders remain highly vulnerable to imperceptible adversarial perturbations, which can severely degrade both robustness and semantic quality in multimodal reasoning. In this work, we introduce Sim-CLIP, an unsupervised adversarial fine-tuning framework that enhances the robustness of the CLIP vision encoder while preserving overall semantic representations. Sim-CLIP adopts a Siamese training architecture with a cosine similarity objective and a symmetric stop-gradient mechanism to enforce semantic alignment between clean and adversarial views. This design avoids large-batch contrastive learning and additional momentum encoders, enabling robust training with low computational overhead. We evaluate Sim-CLIP across multiple Vision-Language Models and tasks under both targeted and untargeted adversarial attacks. Experimental results demonstrate that Sim-CLIP consistently outperforms state-of-the-art robust CLIP variants, achieving stronger adversarial robustness while maintaining or improving semantic fidelity. These findings highlight the limitations of existing adversarial defenses and establish Sim-CLIP as an effective and scalable solution for robust vision-language representation learning.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑