arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 2603.04839cs.CV

通过语义增强的动态对比交互实现高度可迁移的视觉-语言攻击

Towards Highly Transferable Vision-Language Attack via Semantic-Augmented Dynamic Contrastive Interaction

School of Artificial Intelligence and Computer Science, Jiangnan University(江南大学人工智能与计算机科学学院);Centre for Vision, Speech and Signal Processing (CVSSP), University of Surrey(Surrey 大学视觉、语音和信号处理中心)

Yuanbo Li, Tianyang Xu, Cong Hu, Tao Zhou, Xiao-Jun Wu, Josef Kittler

AI总结:

本文提出SADCA方法,通过语义引导的渐进扰动提升视觉-语言模型的对抗可迁移性,实验表明其在多个数据集上优于现有方法。

摘要:

随着视觉-语言预训练(VLP)模型的快速发展和广泛应用,其对对抗攻击的脆弱性已成为关键问题。现有攻击主要依赖静态跨模态交互,仅破坏正向图像-文本对,导致跨模态破坏有限和可迁移性差。为此,我们提出语义增强的动态对比攻击(SADCA),通过动态交互增强对抗可迁移性。SADCA通过建立包含对抗样本、正样本和负样本的对比学习机制,强化获得扰动的语义不一致性。此外,我们发现传统转移攻击中常用的输入变换也对VLP有益,因此引入语义增强模块以增加对抗示例的多样性和泛化能力。在多个数据集和模型上的实验表明,SADCA显著提升了对抗可迁移性,并在多个基准上超越了现有方法。代码已开源:https://github.com/LiYuanBoJNU/SADCA。

英文摘要:

With the rapid advancement and widespread application of vision-language pre-training (VLP) models, their vulnerability to adversarial attacks has become a critical concern. In general, the adversarial examples can typically be designed to exhibit transferable power, attacking not only different models but also across diverse tasks. However, existing attacks on language-vision models mainly rely on static cross-modal interactions and focus solely on disrupting positive image-text pairs, resulting in limited cross-modal disruption and poor transferability. To address this issue, we propose a Semantic-Augmented Dynamic Contrastive Attack (SADCA) that enhances adversarial transferability through progressive and semantically guided perturbation. SADCA progressively disrupts cross-modal alignment through dynamic interactions between adversarial images and texts. This is accomplished by SADCA establishing a contrastive learning mechanism involving adversarial, positive and negative samples, to reinforce the semantic inconsistency of the obtained perturbations. Moreover, we empirically find that input transformations commonly used in traditional transfer-based attacks also benefit VLPs, which motivates a semantic augmentation module that increases the diversity and generalization of adversarial examples. Extensive experiments on multiple datasets and models demonstrate that SADCA significantly improves adversarial transferability and consistently surpasses state-of-the-art methods. The code is released at https://github.com/LiYuanBoJNU/SADCA.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑