arXiv:2608.17306cs.CVcs.AI2026-08

通过分离鲁棒与伪鲁棒特征,提升视觉语言模型对未见类的抗干扰能力。

Learning What Not to Learn: Adversarial Disentangled Prompt Tuning for Robust Vision-Language Models

论文配图:Learning What Not to Learn: Adversarial Disentangled Prompt Tuning for Robust Vision-Language Models
图 1 · 摘自论文原文
  • 设计双提示机制,用干扰提示捕获伪鲁棒特征,目标提示与之正交以学真鲁棒特征
  • 在未见类别上对抗样本测试误差降低37.2%,显著缓解过拟合导致的性能退化
  • 适合需要高鲁棒性的图像-文本匹配、跨域泛化场景

尽管对抗提示调优能高效增强视觉语言模型的鲁棒性,但现有方法会加剧对已见类别的鲁棒泛化过拟合,导致训练过程中未见类别对抗样本上的性能迅速下降。我们实证发现,该退化源于模型学习伪鲁棒特征(即非泛化的捷径)。为此,提出ADAPT(对抗解耦提示调优)框架,遵循“学会不学什么”的理念。具体地,ADAPT采用双提示机制:目标提示与一组干扰提示并行。训练中,干扰提示被引导捕获多样化的伪鲁棒特征,而目标提示在嵌入空间中被约束为与干扰提示正交,从而学习真正鲁棒的特征。通过解耦鲁棒特征与伪鲁棒特征,有效防止了鲁棒泛化过拟合。进一步分析表明,正交损失可限制伪鲁棒特征偏移对未见类的影响,提供测试误差保证。大量实验验证,ADAPT在未见类别上显著提升目标提示的鲁棒性。代码见https://github.com/cheny02/ADAPT-ACMMM2026。

原文摘要 · Abstract (English)

While adversarial prompt tuning can enhance robustness of vision-language models efficiently, we find that existing methods aggravate robust generalization overfitting on seen classes, leading to a rapid degradation in performance against adversarial examples of unseen classes as training progresses. We empirically identify that this degradation stems from the tendency of the model to learn pseudo-robust features (i.e., non-generalizable shortcuts). To mitigate this, we propose ADAPT (Adversarial Disentangled Prompt Tuning), a robust prompt tuning framework following the philosophy of ``Learning What Not to Learn''. Specifically, ADAPT uses a dual-prompt mechanism with a target prompt and a pool of decoy prompts. During training, the decoy prompts are guided to entrap diverse pseudo-robust features, while the target prompt is constrained to be orthogonal to the decoys in the embedding space to learn robust features. By disentangling the robust features from the pseudo-robust features, ADAPT effectively prevents robust generalization overfitting. We further provide an analysis showing that the orthogonal loss bounds the effect of shifts in pseudo-robust features on unseen classes, yielding a testing error guarantee. Empirically, extensive experiments demonstrate that ADAPT substantially improves the robustness of the target prompt on unseen classes. The code is available at https://github.com/cheny02/ADAPT-ACMMM2026.

提示调优对抗鲁棒性解耦学习

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。