arXiv:2505.23745cs.CVcs.AI2025-05被引 4

让视觉语言模型自己判断预测可信度,提升安全应用可靠性。

To Trust Or Not To Trust Your Vision-Language Model's Prediction

  • 不重新训练模型,通过图像嵌入空间分析判断预测是否可信
  • 在17个数据集上检测错误预测,性能比基线提升超50%
  • 适合关注模型安全性的研究人员和工业部署者

视觉语言模型(VLM)在对齐视觉与文本模态方面表现出色,广泛应用于多模态理解与生成。尽管其在零样本和迁移学习中表现优异,但仍然容易发生误分类,常给出高置信度的错误预测,这在安全敏感领域可能造成严重后果。本文提出TrustVLM,一种无需训练的框架,用于评估VLM预测的可信度。基于观察到的模态差距及某些概念在图像嵌入空间中表征更清晰的洞察,我们设计了一种新的置信度评分函数,利用该空间提升误分类检测能力。我们在17个不同数据集上,使用4种架构和2个VLM进行严格评估,结果表明,相比现有基线,TrustVLM在AURC上提升51.87%,在AUROC上提升9.14%,在FPR95上提升32.42%。该方法无需重训练即可增强模型可靠性,为VLM在现实场景中的安全部署铺平道路。代码已公开于https://github.com/EPFL-IMOS/TrustVLM。

原文摘要 · Abstract (English)

Vision-Language Models (VLMs) have demonstrated strong capabilities in aligning visual and textual modalities, enabling a wide range of applications in multimodal understanding and generation. While they excel in zero-shot and transfer learning scenarios, VLMs remain susceptible to misclassification, often yielding confident yet incorrect predictions. This limitation poses a significant risk in safety-critical domains, where erroneous predictions can lead to severe consequences. In this work, we introduce TrustVLM, a training-free framework designed to address the critical challenge of estimating when VLM's predictions can be trusted. Motivated by the observed modality gap in VLMs and the insight that certain concepts are more distinctly represented in the image embedding space, we propose a novel confidence-scoring function that leverages this space to improve misclassification detection. We rigorously evaluate our approach across 17 diverse datasets, employing 4 architectures and 2 VLMs, and demonstrate state-of-the-art performance, with improvements of up to 51.87% in AURC, 9.14% in AUROC, and 32.42% in FPR95 compared to existing baselines. By improving the reliability of the model without requiring retraining, TrustVLM paves the way for safer deployment of VLMs in real-world applications. The code is available at https://github.com/EPFL-IMOS/TrustVLM.

视觉语言模型可信度评估模型安全

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。