提出自适应防御框架,保护自动驾驶视觉语言模型免受全维度攻击。
NutVLM: A Self-Adaptive Defense Framework against Full-Dimension Attacks for Vision Language Models in Autonomous Driving
- 用三路分类识别良性样本、局部干扰和全局扰动。
- 局部干扰通过灰度掩码净化,全局扰动用提示调优修复。
- 无需重训模型,提升鲁棒性且保持正常性能,适合智能交通系统。
视觉语言模型(VLMs)在自动驾驶中提升了感知能力,但仍易受对抗性威胁,包括局部物理贴片到难以察觉的全局扰动。现有防御方法有限,难以兼顾鲁棒性与干净样本性能。为此,我们提出NutVLM,一种覆盖感知-决策全生命周期的自适应防御框架。首先,采用NutNet++作为哨兵,通过三路分类识别良性样本、局部贴片与全局扰动。随后,局部威胁通过高效灰度掩码净化,全局扰动则触发专家引导的对抗提示调优(EAPT)。EAPT不依赖全模型微调,而是基于梯度优化潜空间并离散投影,生成“修正驾驶提示”,重新聚焦VLM注意力。在Dolphins基准上评估,NutVLM整体指标提升4.89%(如准确率、语言评分、GPT评分),验证其为智能交通系统的可扩展安全方案。代码已开源:https://github.com/PXX/NutVLM。
原文摘要 · Abstract (English)
Vision Language Models (VLMs) have advanced perception in autonomous driving (AD), but they remain vulnerable to adversarial threats. These risks range from localized physical patches to imperceptible global perturbations. Existing defense methods for VLMs remain limited and often fail to reconcile robustness with clean-sample performance. To bridge these gaps, we propose NutVLM, a comprehensive self-adaptive defense framework designed to secure the entire perception-decision lifecycle. Specifically, we first employ NutNet++ as a sentinel, which is a unified detection-purification mechanism. It identifies benign samples, local patches, and global perturbations through three-way classification. Subsequently, localized threats are purified via efficient grayscale masking, while global perturbations trigger Expert-guided Adversarial Prompt Tuning (EAPT). Instead of the costly parameter updates of full-model fine-tuning, EAPT generates "corrective driving prompts" via gradient-based latent optimization and discrete projection. These prompts refocus the VLM's attention without requiring exhaustive full-model retraining. Evaluated on the Dolphins benchmark, our NutVLM yields a 4.89% improvement in overall metrics (e.g., Accuracy, Language Score, and GPT Score). These results validate NutVLM as a scalable security solution for intelligent transportation. Our code is available at https://github.com/PXX/NutVLM.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。