arXiv:2505.18884cs.LGcs.AI2025-05NeurIPS

提出无监督对抗微调框架LORE,提升视觉编码器鲁棒性同时保持清晰数据性能。

LORE: Lagrangian-Optimized Robust Embeddings for Visual Encoders

  • 基于约束优化的无监督对抗微调,通过嵌入空间近似约束平衡鲁棒性与准确率。
  • 在CLIP图像编码器上实现零样本对抗鲁棒性显著提升,干净数据准确率下降不足1.5%。
  • 适合追求模型鲁棒性与泛化能力的视觉系统开发者,尤其适用于开放域任务。

视觉编码器已成为现代计算机视觉流程的核心组件。然而,抵御对抗扰动的鲁棒性仍是关键挑战。现有方法多采用有监督或无监督的对抗微调策略,但存在两大局限:(i)早期微调阶段易出现不稳定,导致收敛不佳,且对干净数据性能产生负面影响;(ii)在鲁棒性与干净数据准确率之间权衡不佳,难以同时优化。为此,本文提出拉格朗日优化鲁棒嵌入(LORE),一种新型无监督对抗微调框架。该方法采用约束优化,从原理上实现对抗目标与原始性能的平衡。通过强制嵌入空间中的邻近性约束,LORE能有效维持对抗微调过程中的干净数据性能。大量实验表明,LORE显著提升了零样本对抗鲁棒性,同时对干净数据准确率的损害极小。此外,我们验证了经对抗微调的CLIP图像编码器在分布外泛化能力上的优势,并增强了图像嵌入的可解释性。

原文摘要 · Abstract (English)

Visual encoders have become fundamental components in modern computer vision pipelines. However, ensuring robustness against adversarial perturbations remains a critical challenge. Recent efforts have explored both supervised and unsupervised adversarial fine-tuning strategies. We identify two key limitations in these approaches: (i) they often suffer from instability, especially during the early stages of fine-tuning, resulting in suboptimal convergence and degraded performance on clean data, and (ii) they exhibit a suboptimal trade-off between robustness and clean data accuracy, hindering the simultaneous optimization of both objectives. To overcome these challenges, we propose Lagrangian-Optimized Robust Embeddings (LORE), a novel unsupervised adversarial fine-tuning framework. LORE utilizes constrained optimization, which offers a principled approach to balancing competing goals, such as improving robustness while preserving nominal performance. By enforcing embedding-space proximity constraints, LORE effectively maintains clean data performance throughout adversarial fine-tuning. Extensive experiments show that LORE significantly improves zero-shot adversarial robustness with minimal degradation in clean data accuracy. Furthermore, we demonstrate the effectiveness of the adversarially fine-tuned CLIP image encoder in out-of-distribution generalization and enhancing the interpretability of image embeddings.

视觉编码器对抗鲁棒性无监督学习CLIP

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。