ASAM: Boosting Segment Anything Model with Adversarial Tuning
Not on the map. Why?
Abstract (arXiv)
In the evolving landscape of computer vision, foundation models have emerged as pivotal tools, exhibiting exceptional adaptability to a myriad of tasks. Among these, the Segment Anything Model (SAM) by Meta AI has distinguished itself in image segmentation. However, SAM, like its counterparts, encounters limitations in specific niche applications, prompting a quest for enhancement strategies that do not compromise its inherent capabilities. This paper introduces ASAM, a novel methodology that amplifies SAM's performance through adversarial tuning. We harness the potential of natural adversarial examples, inspired by their successful implementation in natural language processing. By utilizing a stable diffusion model, we augment a subset (1%) of the SA-1B dataset, generating adversarial instances that are more representative of natural variations rather than conventional imperceptible perturbations. Our approach maintains the photorealism of adversarial examples and ensures alignment with original mask annotations, thereby preserving the integrity of the segmentation task. The fine-tuned ASAM demonstrates significant improvements across a diverse range of segmentation tasks without necessitating additional data or architectural modifications. The results of our extensive evaluations confirm that ASAM establishes new benchmarks in segmentation tasks, thereby contributing to the advancement of foundational models in computer vision. Our project page is in https://asam2024.github.io/.
Key facts. Cited by 12 papers in the map (data through 14 Oct 2026). Builds on 77 of its 90 references that are in the map. First posted on arXiv 1 May 2024.
Builds on
77 of 90 references.
References · 77
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
- 2023GPT-4 Technical Reportcited by 18,396
- 2014Microsoft COCO: Common Objects in Contextcited by 17,608
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
- 2020Denoising Diffusion Implicit Modelscited by 9,781
- 2023Segment Anythingcited by 8,234
- 2023DINOv2: Learning Robust Visual Features without Supervisioncited by 7,974
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
38 more
- 2023BLIP-2: Bootstrapping Language-Image Pre-training with Frozen Image Encoders and Large Language Modelscited by 6,137
- 2022Classifier-Free Diffusion Guidancecited by 5,847
- 2023Adding Conditional Control to Text-to-Image Diffusion Modelscited by 5,503
- 2022PaLM: Scaling Language Modeling with Pathwayscited by 5,326
- 2013Intriguing properties of neural networkscited by 5,155
- 2016The Cityscapes Dataset for Semantic Urban Scene Understandingcited by 4,444
- 2022BLIP: Bootstrapping Language-Image Pre-training for Unified Vision-Language Understanding and Generationcited by 4,322
- 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,152
- 2022Self-Instruct: Aligning Language Models with Self-Generated Instructionscited by 2,724
- 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,517
- 2019LVIS: A Dataset for Large Vocabulary Instance Segmentationcited by 1,217
- 2022Null-text Inversion for Editing Real Images using Guided Diffusion Modelscited by 1,179
- 2021MUSIQ: Multi-scale Image Quality Transformercited by 1,081
- 2016Semantic Understanding of Scenes through the ADE20K Datasetcited by 1,069
- 2017Virtual Adversarial Training: A Regularization Method for Supervised and Semi-Supervised Learningcited by 920
- 2018Robustness May Be at Odds with Accuracycited by 880
- 2020Overfitting in adversarially robust deep learningcited by 506
- 2017NIMA: Neural Image Assessmentcited by 389
- 2023Segment Anything in High Qualitycited by 376
- 2019Adversarial Examples Improve Image Recognitioncited by 286
- 2016Adversarial Training Methods for Semi-Supervised Text Classificationcited by 280
- 2023Customized Segment Anything Model for Medical Image Segmentationcited by 280
- 2019FreeLB: Enhanced Adversarial Training for Natural Language Understandingcited by 264
- 2023Personalize Segment Anything Model with One Shotcited by 250
- 2020Attacks Which Do Not Kill Training Make Adversarial Learning Strongercited by 243
- 2021Anabranch Network for Camouflaged Object Segmentationcited by 227
- 2020Geometry-aware Instance-reweighted Adversarial Trainingcited by 198
- 2023EfficientSAM: Leveraged Masked Image Pretraining for Efficient Segment Anythingcited by 188
- 2023Semantic-SAM: Segment and Recognize Anything at Any Granularitycited by 185
- 2021No-Reference Image Quality Assessment via Transformers, Relative Ranking, and Self-Consistencycited by 166
- 2023SAM3D: Segment Anything in 3D Scenescited by 157
- 2020Understanding and Mitigating the Tradeoff Between Robustness and Accuracycited by 149
- 2023DatasetDM: Synthesizing Data with Perception Annotations Using Diffusion Modelscited by 123
- 2023Segment Anything Is Not Always Perfect: An Investigation of SAM on Different Real-world Applicationscited by 121
- 2020CascadePSP: Toward Class-Agnostic and Very High-Resolution Segmentation via Global and Local Refinementcited by 113
- 2019Robust Neural Machine Translation with Doubly Adversarial Inputscited by 106
- 2023Can SAM Segment Anything? When SAM Meets Camouflaged Object Detectioncited by 100
- 2022LAS-AT: Adversarial Training with Learnable Attack Strategycited by 95
50 most cited of 77 All 77 (JSON)
Built on by
Citing papers per year: 2024: 3; 2025: 3; 2026: 6.
12 papers.
- 2024Segment Anything with Multiple Modalitiescited by 12
- 2025OCRT: Boosting Foundation Models in the Open World with Object-Concept-Relation Triadcited by 6
- 2024Towards Adversarial Robustness via Debiased High-Confidence Logit Alignmentcited by 5
- 2024Bootstrap Segmentation Foundation Model under Distribution Shift via Object-Centric Learningcited by 4
- 2025Segment Any-Quality Images with Generative Latent Space Enhancementcited by 3
- 2026Boosting Segment Anything Model to Generalize Visually Non-Salient Scenarioscited by 3
- 2025SAM4EM: Efficient memory-based two stage prompt-free segment anything model adapter for complex 3D neuroscience electron microscopy stackscited by 2
- 2026Towards Any-Quality Image Segmentation via Generative and Adaptive Latent Space Enhancementcited by 0
- 2026BREPS: Bounding-Box Robustness Evaluation of Promptable Segmentationcited by 0
- 2026Adaptive Causal Alignment for High-Confidence Adversarial Trainingcited by 0
- 2026Where Does Texture Evidence Live in SAM? Features, Proposal Masks, and Texture Segmentationcited by 0
- 2026Robust Activation Map Rectification for Weakly Supervised Volumetric Segmentation: Temporal Coherence as a Free Lunchcited by 0
- 2026Robust Activation Map Rectification for Weakly Supervised Volumetric Segmentation: Temporal Coherence as a Free Lunch22 Jul 2026
- 2026Where Does Texture Evidence Live in SAM? Features, Proposal Masks, and Texture Segmentation7 Jun 2026
- 2026Adaptive Causal Alignment for High-Confidence Adversarial Training2 Jun 2026
- 2026BREPS: Bounding-Box Robustness Evaluation of Promptable Segmentation21 Jan 2026
- 2026Towards Any-Quality Image Segmentation via Generative and Adaptive Latent Space Enhancement5 Jan 2026
- 2026Boosting Segment Anything Model to Generalize Visually Non-Salient Scenarios2 Jan 2026
- 2025SAM4EM: Efficient memory-based two stage prompt-free segment anything model adapter for complex 3D neuroscience electron microscopy stacks30 Apr 2025
- 2025OCRT: Boosting Foundation Models in the Open World with Object-Concept-Relation Triad24 Mar 2025
- 2025Segment Any-Quality Images with Generative Latent Space Enhancement16 Mar 2025
- 2024Bootstrap Segmentation Foundation Model under Distribution Shift via Object-Centric Learning29 Aug 2024
- 2024Segment Anything with Multiple Modalities17 Aug 2024
- 2024Towards Adversarial Robustness via Debiased High-Confidence Logit Alignment12 Aug 2024
Similar, not cited
Close in wording, no citation either way
- 2025X-SAM: From Segment Anything to Any Segmentation
- 2023TinySAM: Pushing the Envelope for Efficient Segment Anything Model
- 2024SAM-SP: Self-Prompting Makes SAM Great Again
- 2025Segment Anyword: Mask Prompt Inversion for Open-Set Grounded Segmentation
- 2024Red-Teaming Segment Anything Model
- 2024Explore In-Context Segmentation via Latent Diffusion Models
- 2025AHCQ-SAM: Toward Accurate and Hardware-Compatible Post-Training Segment Anything Model Quantization
- 2025SAQ-SAM: Semantically-Aligned Quantization for Segment Anything Model