mlsanityData to 7 Oct 2026

Sim-CLIP: Unsupervised Siamese Adversarial Fine-Tuning for Robust and Semantically-Rich Vision-Language Models

arXiv 2407.14971 ↗First posted 20 Jul 2024cs.CV cs.AI cs.CLcited by 12

On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness

Abstract (arXiv)

Vision-Language Models (VLMs) rely heavily on pretrained vision encoders to support downstream tasks such as image captioning, visual question answering, and zero-shot classification. Despite their strong performance, these encoders remain highly vulnerable to imperceptible adversarial perturbations, which can severely degrade both robustness and semantic quality in multimodal reasoning. In this work, we introduce Sim-CLIP, an unsupervised adversarial fine-tuning framework that enhances the robustness of the CLIP vision encoder while preserving overall semantic representations. Sim-CLIP adopts a Siamese training architecture with a cosine similarity objective and a symmetric stop-gradient mechanism to enforce semantic alignment between clean and adversarial views. This design avoids large-batch contrastive learning and additional momentum encoders, enabling robust training with low computational overhead. We evaluate Sim-CLIP across multiple Vision-Language Models and tasks under both targeted and untargeted adversarial attacks. Experimental results demonstrate that Sim-CLIP consistently outperforms state-of-the-art robust CLIP variants, achieving stronger adversarial robustness while maintaining or improving semantic fidelity. These findings highlight the limitations of existing adversarial defenses and establish Sim-CLIP as an effective and scalable solution for robust vision-language representation learning.

Key facts. Cited by 12 papers in the map (data through 7 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 36 of its 52 references that are in the map. First posted on arXiv 20 Jul 2024.

Builds on

36 of 52 references.

Closest ancestors · 3

Same direction, newest first

  1. 2024Robust CLIP: Unsupervised Adversarial Fine-Tuning of Vision Embeddings for Robust Large Vision-Language Models19 Feb
  2. 2023On Evaluating Adversarial Robustness of Large Vision-Language Models26 May
  3. 2022Understanding Zero-Shot Adversarial Robustness for Large-Scale Models14 Dec

Other references · 33

  1. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
  2. 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
  3. 2023GPT-4 Technical Reportcited by 18,132
  4. 2014Microsoft COCO: Common Objects in Contextcited by 17,498
  5. 2020A Simple Framework for Contrastive Learning of Visual Representationscited by 11,979
  6. 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,029
  7. 2023Visual Instruction Tuningcited by 7,792
  8. 2014Explaining and Harnessing Adversarial Examplescited by 7,287
  9. 2021Emerging Properties in Self-Supervised Vision Transformerscited by 6,893
  10. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
  11. 2020Bootstrap your own latent: A new approach to self-supervised Learningcited by 4,712
  12. 2020Exploring Simple Siamese Representation Learningcited by 2,853
21 more
  1. 2021BEiT: BERT Pre-Training of Image Transformerscited by 2,360
  2. 2014CIDEr: Consensus-based Image Description Evaluationcited by 2,027
  3. 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,565
  4. 2017EuroSAT: A Novel Dataset and Deep Learning Benchmark for Land Use and Land Cover Classificationcited by 1,488
  5. 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,442
  6. 2015Flickr30k Entities: Collecting Region-to-Phrase Correspondences for Richer Image-to-Sentence Modelscited by 1,352
  7. 2019OK-VQA: A Visual Question Answering Benchmark Requiring External Knowledgecited by 1,114
  8. 2018VizWiz Grand Challenge: Answering Visual Questions from Blind Peoplecited by 852
  9. 2023OpenFlamingo: An Open-Source Framework for Training Large Autoregressive Vision-Language Modelscited by 560
  10. 2017Adversarial Patchcited by 514
  11. 2018Rotation Equivariant CNNs for Digital Pathologycited by 420
  12. 2023Are aligned neural networks adversarially aligned?cited by 305
  13. 2021Gradient-based Adversarial Attacks against Text Transformerscited by 233
  14. 2023Macaw-LLM: Multi-Modal Language Modeling with Image, Audio, Video, and Text Integrationcited by 168
  15. 2020Robust Pre-Training by Adversarial Contrastive Learningcited by 144
  16. 2023On the Adversarial Robustness of Multi-Modal Foundation Modelscited by 142
  17. 2023AdvCLIP: Downstream-agnostic Adversarial Examples in Multimodal Contrastive Learningcited by 101
  18. 2021When Does Contrastive Learning Preserve Adversarial Robustness from Pretraining to Finetuning?cited by 76
  19. 2023CleanCLIP: Mitigating Data Poisoning Attacks in Multimodal Contrastive Learningcited by 62
  20. 2021Improved Text Classification via Contrastive Adversarial Trainingcited by 38
  21. 2023Language-Driven Anchors for Zero-Shot Adversarial Robustnesscited by 23

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2024: 4; 2025: 6; 2026: 2.

12 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026Beyond Standard Benchmarks: A Systematic Audit of Vision-Language Model's Robustness to Natural Semantic Variation Across Diverse Tasks
  2. 2026Sparse CLIP: Co-Optimizing Interpretability and Performance in Contrastive Learning
  3. 2024Revisiting the Adversarial Robustness of Vision Language Models: a Multimodal Perspective
  4. 2022CLIP-TD: CLIP Targeted Distillation for Vision-Language Tasks
  5. 2026Robustifying Vision-Language Models via Test-Time Prompt Adaptation
  6. 2025Double Visual Defense: Adversarial Pre-training and Instruction Tuning for Improving Vision-Language Model Robustness
  7. 2025Robust-LLaVA: On the Effectiveness of Large-Scale Robust Image Encoders for Multi-modal Large Language Models
  8. 2024CLIP-PING: Boosting Lightweight Vision-Language Models with Proximus Intrinsic Neighbors Guidance