arXiv:2605.27927cs.CVcs.LG2026-05

提出轻量级防御框架SIGN,高效抵御视觉语言模型的对抗攻击。

Structure-Guided Visual Perturbation Neutralization for LVLMs

论文配图:Structure-Guided Visual Perturbation Neutralization for LVLMs
图 1 · 摘自论文原文
  • 通过结构提取与动态中和实现像素级扰动抑制
  • 仅修改0.5%像素,每图耗时0.16秒,防御成功率超87%
  • 无需训练,兼容性好,适合部署在资源受限场景

图像输入使大型视觉语言模型(LVLMs)能感知细粒度视觉信息,但也引入了像素级攻击面,使对抗扰动可引发不安全行为。现有多数防御方法针对传统计算机视觉设计,常忽略LVLM所需的跨模态对齐,导致性能下降。而少数专为LVLM设计的防御需大量图像修改并带来显著计算开销,损害推理质量与效率。为此,我们提出结构引导中和(SIGN),一种轻量、即插即用的防御框架,通过先验结构提取提升LVLM兼容性,并借助动态引导中和实现高效扰动抑制。大量实验表明,SIGN在仅修改0.5%像素、每图耗时0.16秒的情况下,防御成功率超过87%,同时几乎保留原始视觉表示与正常任务性能。本工作提供了一种无需昂贵训练的轻量替代方案,凸显利用视觉编码器实现高效对抗防护的潜力。代码已开源于https://anonymous.4open.science/r/SIGN-BCB1。

原文摘要 · Abstract (English)

Image inputs enable Large Vision Language Models (LVLMs) to perceive fine-grained visual information, but also introduce a pixel-level attack surface through which adversarial perturbations can elicit unsafe model behaviors. However, most existing defenses are designed for traditional computer vision settings and thus often overlook the cross-modal alignment required by LVLMs, leading to degraded performance. Meanwhile, the limited defenses tailored to LVLMs often require substantial image modifications and introduce considerable computational overhead, thereby compromising inference quality and efficiency. To address these limitations, we propose Structure-Induced Guided Neutralization (SIGN), a lightweight, plug-and-play defense framework that improves LVLM compatibility via Prior Structural Extraction and achieves efficient perturbation suppression via Dynamic Guided Neutralization. Extensive experiments show that SIGN achieves over 87\% defense success rate with only 0.5\% pixel modification and 0.16 seconds per image, while nearly preserving original visual representations and benign task performance. Our work offers a lightweight alternative to defenses that require costly model training and highlights the potential of exploiting a vision encoder for efficient adversarial protection. Our code is open source on https://anonymous.4open.science/r/SIGN-BCB1.

视觉语言模型对抗防御轻量化

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。