鲁棒性与安全 · CVPR2026 ·2026.06.03

AGFT:面向视觉语言模型零样本对抗鲁棒性的对齐引导微调

AGFT: Alignment-Guided Fine-Tuning for Zero-Shot Adversarial Robustness of Vision-Language Models

Yubo Cui、Xianchao Guan、Zijun Xiong、Zheng Zhang

与你有关的部分

提出用原始模型软预测做文本引导的对抗微调,并用温度缩放分布一致性校准保持跨模态对齐,可直接迁移到CLIP类模型的对抗鲁棒性提升。

原文依据 AGFT leverages the probabilistic predictions of the original model for text-guided adversarial training
可迁移到 对抗鲁棒性零样本分类视觉语言预训练

摘要译文

由模型翻译 · 术语统一 · 请对照原文核对关键结论

预训练的视觉语言模型(VLM)表现出强大的零样本泛化能力,但仍易受对抗扰动影响。现有的分类引导对抗微调方法常常破坏预训练的跨模态对齐,削弱视觉-文本对应关系并降低零样本性能。本文提出对齐引导微调(AGFT)框架,在增强零样本对抗鲁棒性的同时保持跨模态语义结构。与依赖硬标签且无法维持图像与文本相对关系的基于标签的方法不同,AGFT利用原始模型的概率预测进行文本引导的对抗训练,通过软对齐分布将对抗视觉特征与文本嵌入对齐,提升零样本对抗鲁棒性。为解决微调引入的结构差异,我们引入分布一致性校准机制,调整鲁棒模型的输出以匹配预训练模型预测的温度缩放版本。在多个零样本基准上的大量实验表明,AGFT优于最优方法,同时显著提升零样本对抗鲁棒性。代码见 https://github.com/YuboCui/AGFT。

英文原文摘要 1347 字符

Pre-trained vision-language models (VLMs) exhibit strong zero-shot generalization but remain vulnerable to adversarial perturbations. Existing classification-guided adversarial fine-tuning methods often disrupt pre-trained cross-modal alignment, weakening visual-textual correspondence and degrading zero-shot performance. In this paper, we propose an Alignment-Guided Fine-Tuning (AGFT) framework that enhances zero-shot adversarial robustness while preserving the cross-modal semantic structure. Unlike label-based methods that rely on hard labels and fail to maintain the relative relationships between image and text, AGFT leverages the probabilistic predictions of the original model for text-guided adversarial training, which aligns adversarial visual features with textual embeddings via soft alignment distributions, improving zero-shot adversarial robustness. To address structural discrepancies introduced by fine-tuning, we introduce a distribution consistency calibration mechanism that adjusts the robust model's output to match a temperature-scaled version of the pre-trained model's predictions. Extensive experiments across multiple zero-shot benchmarks demonstrate that AGFT outperforms state-of-the-art methods while significantly improving zero-shot adversarial robustness. Code is available at https://github.com/YuboCui/AGFT.

标签

会议 CVPR2026
页码 22836-22846
Bibkey
来源 CVF Open Access