arXiv:2602.05175cs.CV2026-02

用距离场统一几何与纹理,提升模型抗干扰能力。

Enhancing Adversarial Robustness with Signed Distance Fields for Harmonizing Geometric Invariance and Texture

  • 将图像掩码转为符号距离场,构建稳定几何锚点
  • 在ImageNet上达84.79%干净准确率与83.52%鲁棒准确率
  • 推理无额外开销,适合实时应用

深度神经网络在视觉识别中表现优异,但对难以察觉的对抗攻击仍高度敏感。现有防御策略如对抗训练和基于扩散的净化虽有进展,却常受限于高计算成本、信息丢失和推理延迟。为此,我们提出几何与纹理平衡净化框架(GeoTexPuri),通过协调不变的几何结构与纹理特征来增强对抗鲁棒性。具体而言,该框架在训练阶段将离散图像掩码转换为连续空间场,利用符号距离场(SDF)生成稳定的结构锚点,抵御局部像素噪声。通过多流训练目标,模型学习内化纯净表征,有效对齐语义纹理线索与底层几何不变性。在ImageNet上的大量实验表明,GeoTexPuri实现84.79%的干净准确率和83.52%的鲁棒准确率(AutoAttack下)。关键在于,推理阶段为确定性分类器,仅需输入图像,无需辅助几何模块或额外计算开销,从而为实时应用提供可扩展且高效的解决方案。

原文摘要 · Abstract (English)

Deep neural networks demonstrate impressive performance in visual recognition but remain highly vulnerable to imperceptible adversarial attacks. Existing defense strategies such as adversarial training and diffusion-based purification have achieved significant progress but are frequently constrained by high computational cost, information loss, and inference latency. To address these challenges, we propose a Geometric and Texture balancing Purification (GeoTexPuri) framework that enhances adversarial robustness by harmonizing invariant geometric structures with textural features. Specifically, the framework integrates dense geometric guidance into the training phase by transforming discrete image masks into continuous spatial fields via Signed Distance Fields (SDF). This process establishes stable structural anchors that shield the model from local pixel noise. Through a multi-stream training objective, the model learns to internalize purified representations that effectively align semantic textural cues with these underlying geometric invariants. Extensive experiments on ImageNet demonstrate the efficacy of our approach. GeoTexPuri achieves 84.79\% clean accuracy and 83.52\% robust accuracy under the AutoAttack. Crucially, GeoTexPuri functions as a deterministic classifier during inference, requiring only the input image without any auxiliary geometric modules or additional computational costs, thereby ensuring a scalable and efficient solution for real-time applications.

对抗鲁棒性符号距离场图像净化高效推理

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。