Sim-CLIP: Unsupervised Siamese Adversarial Fine-Tuning for Robust and Semantically-Rich Vision-Language Models
On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness
Abstract (arXiv)
Vision-Language Models (VLMs) rely heavily on pretrained vision encoders to support downstream tasks such as image captioning, visual question answering, and zero-shot classification. Despite their strong performance, these encoders remain highly vulnerable to imperceptible adversarial perturbations, which can severely degrade both robustness and semantic quality in multimodal reasoning. In this work, we introduce Sim-CLIP, an unsupervised adversarial fine-tuning framework that enhances the robustness of the CLIP vision encoder while preserving overall semantic representations. Sim-CLIP adopts a Siamese training architecture with a cosine similarity objective and a symmetric stop-gradient mechanism to enforce semantic alignment between clean and adversarial views. This design avoids large-batch contrastive learning and additional momentum encoders, enabling robust training with low computational overhead. We evaluate Sim-CLIP across multiple Vision-Language Models and tasks under both targeted and untargeted adversarial attacks. Experimental results demonstrate that Sim-CLIP consistently outperforms state-of-the-art robust CLIP variants, achieving stronger adversarial robustness while maintaining or improving semantic fidelity. These findings highlight the limitations of existing adversarial defenses and establish Sim-CLIP as an effective and scalable solution for robust vision-language representation learning.
Key facts. Cited by 12 papers in the map (data through 7 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 36 of its 52 references that are in the map. First posted on arXiv 20 Jul 2024.
Builds on
36 of 52 references.
Closest ancestors · 3
Same direction, newest first
- 2024Robust CLIP: Unsupervised Adversarial Fine-Tuning of Vision Embeddings for Robust Large Vision-Language Models19 Feb
- 2023On Evaluating Adversarial Robustness of Large Vision-Language Models26 May
- 2022Understanding Zero-Shot Adversarial Robustness for Large-Scale Models14 Dec
Other references · 33
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
- 2023GPT-4 Technical Reportcited by 18,132
- 2014Microsoft COCO: Common Objects in Contextcited by 17,498
- 2020A Simple Framework for Contrastive Learning of Visual Representationscited by 11,979
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,029
- 2023Visual Instruction Tuningcited by 7,792
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2021Emerging Properties in Self-Supervised Vision Transformerscited by 6,893
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2020Bootstrap your own latent: A new approach to self-supervised Learningcited by 4,712
- 2020Exploring Simple Siamese Representation Learningcited by 2,853
21 more
- 2021BEiT: BERT Pre-Training of Image Transformerscited by 2,360
- 2014CIDEr: Consensus-based Image Description Evaluationcited by 2,027
- 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,565
- 2017EuroSAT: A Novel Dataset and Deep Learning Benchmark for Land Use and Land Cover Classificationcited by 1,488
- 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,442
- 2015Flickr30k Entities: Collecting Region-to-Phrase Correspondences for Richer Image-to-Sentence Modelscited by 1,352
- 2019OK-VQA: A Visual Question Answering Benchmark Requiring External Knowledgecited by 1,114
- 2018VizWiz Grand Challenge: Answering Visual Questions from Blind Peoplecited by 852
- 2023OpenFlamingo: An Open-Source Framework for Training Large Autoregressive Vision-Language Modelscited by 560
- 2017Adversarial Patchcited by 514
- 2018Rotation Equivariant CNNs for Digital Pathologycited by 420
- 2023Are aligned neural networks adversarially aligned?cited by 305
- 2021Gradient-based Adversarial Attacks against Text Transformerscited by 233
- 2023Macaw-LLM: Multi-Modal Language Modeling with Image, Audio, Video, and Text Integrationcited by 168
- 2020Robust Pre-Training by Adversarial Contrastive Learningcited by 144
- 2023On the Adversarial Robustness of Multi-Modal Foundation Modelscited by 142
- 2023AdvCLIP: Downstream-agnostic Adversarial Examples in Multimodal Contrastive Learningcited by 101
- 2021When Does Contrastive Learning Preserve Adversarial Robustness from Pretraining to Finetuning?cited by 76
- 2023CleanCLIP: Mitigating Data Poisoning Attacks in Multimodal Contrastive Learningcited by 62
- 2021Improved Text Classification via Contrastive Adversarial Trainingcited by 38
- 2023Language-Driven Anchors for Zero-Shot Adversarial Robustnesscited by 23
Built on by
Citing papers per year: 2024: 4; 2025: 6; 2026: 2.
12 papers.
- 2025A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluationscited by 66
- 2024Jailbreak Attacks and Defenses against Multimodal Generative Models: A Surveycited by 31
- 2024Securing Vision-Language Models with a Robust Encoder Against Jailbreak and Adversarial Attackscited by 13
- 2025Distributed LLMs and Multimodal Large Language Models: A Survey on Advances, Challenges, and Future Directionscited by 10
- 2025VEAttack: Downstream-agnostic Vision Encoder Attack against Large Vision Language Modelscited by 7
- 2024Seeing is Deceiving: Exploitation of Visual Pathways in Multi-Modal Language Modelscited by 4
- 2025Unveiling Trust in Multimodal Large Language Models: Evaluation, Analysis, and Mitigationcited by 4
- 2025Diffusion-based Cumulative Adversarial Purification for Vision Language Modelscited by 2
- 2025Bridging Text and Video Generation: A Surveycited by 2
- 2024TriplePlay: Enhancing Federated Learning with CLIP for Non-IID Data and Resource Efficiencycited by 1
- 2026What Makes VLMs Robust? Towards Reconciling Robustness and Accuracy in Vision-Language Modelscited by 0
- 2026Investigating Adversarial Robustness of Multi-modal Large Language Modelscited by 0
- 2026Investigating Adversarial Robustness of Multi-modal Large Language Models2 Jun 2026
- 2026What Makes VLMs Robust? Towards Reconciling Robustness and Accuracy in Vision-Language Models13 Mar 2026
- 2025Bridging Text and Video Generation: A Survey6 Oct 2025
- 2025Unveiling Trust in Multimodal Large Language Models: Evaluation, Analysis, and Mitigation21 Aug 2025
- 2025Diffusion-based Cumulative Adversarial Purification for Vision Language Models4 Jun 2025
- 2025VEAttack: Downstream-agnostic Vision Encoder Attack against Large Vision Language Models23 May 2025
- 2025Distributed LLMs and Multimodal Large Language Models: A Survey on Advances, Challenges, and Future Directions20 Mar 2025
- 2025A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluations14 Feb 2025
- 2024Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey14 Nov 2024
- 2024Seeing is Deceiving: Exploitation of Visual Pathways in Multi-Modal Language Models7 Nov 2024
- 2024Securing Vision-Language Models with a Robust Encoder Against Jailbreak and Adversarial Attacks11 Sep 2024
- 2024TriplePlay: Enhancing Federated Learning with CLIP for Non-IID Data and Resource Efficiency9 Sep 2024
Similar, not cited
Close in wording, no citation either way
- 2026Beyond Standard Benchmarks: A Systematic Audit of Vision-Language Model's Robustness to Natural Semantic Variation Across Diverse Tasks
- 2026Sparse CLIP: Co-Optimizing Interpretability and Performance in Contrastive Learning
- 2024Revisiting the Adversarial Robustness of Vision Language Models: a Multimodal Perspective
- 2022CLIP-TD: CLIP Targeted Distillation for Vision-Language Tasks
- 2026Robustifying Vision-Language Models via Test-Time Prompt Adaptation
- 2025Double Visual Defense: Adversarial Pre-training and Instruction Tuning for Improving Vision-Language Model Robustness
- 2025Robust-LLaVA: On the Effectiveness of Large-Scale Robust Image Encoders for Multi-modal Large Language Models
- 2024CLIP-PING: Boosting Lightweight Vision-Language Models with Proximus Intrinsic Neighbors Guidance