用强化学习优化伪标签,提升无监督域适应的抗干扰能力
A Step Towards Robust Unsupervised Domain Adaptation via Fine-Tuning and Reinforcement Learning

- 先对抗微调分类器,再用信心引导的强化学习逐步标注目标数据
- 在三个数据集上清洁准确率提升10.2%,对抗鲁棒性提高15.8%
- 适合关注模型抗攻击能力的视觉领域自适应研究者
无监督域适应中的对抗鲁棒性仍面临挑战,主要源于噪声伪标签和源域与对抗扰动目标域间的分布偏移。现有方法难以在鲁棒性与准确率间取得平衡,因域适应模型生成的伪标签在对抗攻击下易引入错误。本文提出SFT+RL框架,在CLIP预训练视觉编码器基础上分两阶段实现鲁棒性提升:第一阶段通过PGD扰动对源域进行对抗微调,部分解冻投影层以保留语义先验;第二阶段采用置信度引导的伪标签策略,使用递减阈值过滤伪标签,将高置信度目标样本与干净源样本合并为混合数据集,并对包含干净与对抗样本的批次进行对抗训练,增强跨域鲁棒性。在OfficeHome、PACS和VisDA三个基准数据集上的评估表明,该方法平均提升10.2%的清洁准确率和15.8%的对抗鲁棒性,优于现有最先进方法。
原文摘要 · Abstract (English)
Adversarial robustness in Unsupervised Domain Adaptation (UDA) remains a significant challenge due to noisy pseudo labels and inherent distributional shifts between the clean source and adversarially perturbed target domains. Existing approaches often fail to achieve an optimal trade-off between robustness and accuracy, as pseudo-labels generated by domain-adapted models tend to introduce classification errors under adversarial attacks. In this work, we propose \textbf{SFT+RL}, a two-stage robust UDA framework that integrates Supervised Fine Tuning (SFT) and Reinforcement Learning (RL) on top of CLIP's pre-trained visual encoder. In the SFT stage, we adversarially fine-tune a linear classifier using PGD-based perturbations over the labelled source domain while partially unfreezing CLIP's projection layer. It allows adaptation to adversarial noise while preserving CLIP's rich semantic priors. We introduce a confidence-guided pseudo-labeling strategy in the RL stage to annotate unlabeled target samples progressively. Pseudo labels are filtered using a decaying confidence threshold to balance quality and coverage, and the model is trained on a composite dataset formed by combining clean source samples with high-confidence target samples. Adversarial training is applied to mixed batches of clean and adversarial examples to enhance cross-domain robustness. Comprehensive evaluations on three benchmark datasets OfficeHome~\cite{tomm-ude}, PACS~\cite{pacs}, and VisDA~\cite{visda} demonstrate the effectiveness of our approach. Notably, \textbf{SFT+RL} achieves average improvements of \textbf{10.2\%} in clean accuracy and \textbf{15.8\%} in adversarial robustness across all three datasets, outperforming existing state-of-the-art methods.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。