提出注意力引导的测试时提示调优,提升视觉语言模型在对抗攻击下的细粒度鲁棒性。
Towards Fine-Grained Robustness: Attention-Guided Test-Time Prompt Tuning for Vision-Language Models

- 用注意力机制识别对抗攻击下仍有效的语义区域。
- 基于语义区域动态调整增强强度,提升细粒度任务性能。
- 适合需要高鲁棒性的图像分类与跨模态任务应用。
视觉语言模型(如CLIP)在下游任务中展现出优异的零样本性能,但近期研究证实对抗攻击会显著降低其推理能力,威胁实际应用。现有测试时适应方法多依赖多视图增强进行微调,难以识别语义信息,且易破坏细粒度场景中的判别区域。为此,本文提出注意力引导的测试时提示调优(A-TPT),一种保持语义信息的适应方法。首先改进梯度注意力传播机制,识别在对抗攻击下仍存的语义区域;进而利用这些区域指导空间可变的增强强度与多视图集成,用于提示调优与推理。大量实验表明,A-TPT在对抗数据和干净数据上均优于现有测试时适应方法。代码已开源:https://github.com/SEU-VIPGroup/A-TPT。
原文摘要 · Abstract (English)
Vision-Language Models (VLMs), such as CLIP, have achieved significant zero-shot performance on downstream tasks with various fine-tuning adaptation methods. However, recent studies have proven that adversarial attacks can significantly degrade the inference ability of VLMs, posing substantial risks to their practical applications. Prevalent test-time adaptation methods typically rely on multi-view augmentation to implement various fine-tuning strategies, which struggle to identify semantic information and are prone to destroying discriminative regions in fine-grained scenarios. To address these limitations, we propose Attention-Guided Test-Time Prompt Tuning (A-TPT), a semantics-preserving method designed for test-time adaptation. We first refine the gradient attention rollout mechanism to identify semantically meaningful regions surviving under adversarial attacks. Furthermore, we leverage them to guide the spatially varying augmentation intensities and multi-view ensemble for prompt tuning and inference. Extensive experiments demonstrate that A-TPT outperforms existing test-time adaptation methods on both adversarial and clean data. Codes are available at https://github.com/SEU-VIPGroup/A-TPT .
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。