MMT-ARD: Multimodal Multi-Teacher Adversarial Distillation for Robust Vision-Language Models
On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness
Abstract (arXiv)
Vision-Language Models (VLMs) are increasingly deployed in safety-critical applications, making their adversarial robustness a crucial concern. While adversarial knowledge distillation has shown promise in transferring robustness from teacher to student models, traditional single-teacher approaches suffer from limited knowledge diversity, slow convergence, and difficulty in balancing robustness and accuracy. To address these challenges, we propose MMT-ARD: a Multimodal Multi-Teacher Adversarial Robust Distillation framework. Our key innovation is a dual-teacher knowledge fusion architecture that collaboratively optimizes clean feature preservation and robust feature enhancement. To better handle challenging adversarial examples, we introduce a dynamic weight allocation strategy based on teacher confidence, enabling adaptive focus on harder samples. Moreover, to mitigate bias among teachers, we design an adaptive sigmoid-based weighting function that balances the strength of knowledge transfer across modalities. Extensive experiments on ImageNet and zero-shot benchmarks demonstrate that MMT-ARD improves robust accuracy by +4.32% and zero-shot accuracy by +3.5% on the ViT-B-32 model, while achieving a 2.3x increase in training efficiency over traditional single-teacher methods. These results highlight the effectiveness and scalability of MMT-ARD in enhancing the adversarial robustness of multimodal large models. Our codes are available at https://github.com/itsnotacie/MMT-ARD.
Key facts. Cited by 11 papers in the map (data through 14 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 22 of its 28 references that are in the map. First posted on arXiv 21 Nov 2025.
Builds on
22 of 28 references.
Closest ancestors · 4
Same direction, newest first
- 2024One Prompt Word is Enough to Boost Adversarial Robustness for Pre-trained Vision-Language Models4 Mar
- 2024Robust CLIP: Unsupervised Adversarial Fine-Tuning of Vision Embeddings for Robust Large Vision-Language Models19 Feb
- 2024Pre-trained Model Guided Fine-Tuning for Zero-Shot Adversarial Robustness9 Jan
- 2022Understanding Zero-Shot Adversarial Robustness for Large-Scale Models14 Dec
Other references · 18
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,517
- 2017ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Modelscited by 666
- 2018Improving Transferability of Adversarial Examples with Input Diversitycited by 599
- 2019Evading Defenses to Transferable Adversarial Examples by Translation-Invariant Attackscited by 442
- 2019Enhancing Adversarial Example Transferability with an Intermediate Level Attackcited by 140
- 2018AutoZOOM: Autoencoder-based Zeroth Order Optimization Method for Attacking Black-box Neural Networkscited by 137
- 2022Cross-Image Relational Knowledge Distillation for Semantic Segmentationcited by 118
- 2018Transferable Adversarial Attacks for Image and Video Object Detectioncited by 109
- 2023CLIP-KD: An Empirical Study of CLIP Model Distillationcited by 87
- 2021Revisiting Adversarial Robustness Distillation: Robust Soft Labels Make Student Bettercited by 79
- 2017Adversarial Transformation Networks: Learning to Generate Adversarial Examplescited by 62
6 more
- 2020Universal Adversarial Attack on Attention and the Resulting Dataset DAmageNetcited by 45
- 2021Hierarchical Self-supervised Augmented Knowledge Distillationcited by 44
- 2022Transferable Adversarial Attack based on Integrated Gradientscited by 35
- 2023Mitigating Accuracy-Robustness Trade-off via Balanced Multi-Teacher Adversarial Distillationcited by 13
- 2023Improving Adversarial Robust Fairness via Anti-Bias Soft Label Distillationcited by 8
- 2024Revisiting Semi-supervised Adversarial Robustness via Noise-aware Online Robust Distillationcited by 1
Built on by
Citing papers per year: 2025: 1; 2026: 10.
11 papers.
- 2025CodeV: Code with Images for Faithful Visual Reasoning via Tool-Aware Policy Optimizationcited by 26
- 2026Bridging Reasoning Trajectories in On-Policy Distillation via Near-Future Guidancecited by 13
- 2026Cornerstones or Stumbling Blocks? Deciphering the Rock Tokens in On-Policy Distillationcited by 11
- 2026UniFusion: A Unified Image Fusion Framework with Robust Representation and Source-Aware Preservationcited by 6
- 2026When Models Learn to Ask Why: Adaptive Causal Reasoning for Trustworthy Medical Vision-Language Modelscited by 6
- 2026Learning Transferable Temporal Primitives for Video Reasoning via Synthetic Videoscited by 2
- 2026Dual Distribution Estimation for Zero-shot Noisy Test-Time Adaptation with VLMscited by 2
- 2026BlackMirror: Black-Box Backdoor Detection for Text-to-Image Models via Instruction-Response Deviationcited by 1
- 2026GaitProtector: Impersonation-Driven Gait De-Identification via Training-Free Diffusion Latent Optimizationcited by 1
- 2026Semantic Robustness Certification for Vision-Language Modelscited by 1
- 2026Asynchronous Federated Unlearning with Invariance Calibration for Medical Imagingcited by 0
- 2026Dual Distribution Estimation for Zero-shot Noisy Test-Time Adaptation with VLMs24 Jun 2026
- 2026Semantic Robustness Certification for Vision-Language Models17 Jun 2026
- 2026Bridging Reasoning Trajectories in On-Policy Distillation via Near-Future Guidance29 May 2026
- 2026GaitProtector: Impersonation-Driven Gait De-Identification via Training-Free Diffusion Latent Optimization12 May 2026
- 2026Cornerstones or Stumbling Blocks? Deciphering the Rock Tokens in On-Policy Distillation10 May 2026
- 2026Asynchronous Federated Unlearning with Invariance Calibration for Medical Imaging29 Apr 2026
- 2026When Models Learn to Ask Why: Adaptive Causal Reasoning for Trustworthy Medical Vision-Language Models24 Mar 2026
- 2026Learning Transferable Temporal Primitives for Video Reasoning via Synthetic Videos18 Mar 2026
- 2026UniFusion: A Unified Image Fusion Framework with Robust Representation and Source-Aware Preservation15 Mar 2026
- 2026BlackMirror: Black-Box Backdoor Detection for Text-to-Image Models via Instruction-Response Deviation6 Mar 2026
- 2025CodeV: Code with Images for Faithful Visual Reasoning via Tool-Aware Policy Optimization24 Nov 2025
Similar, not cited
Close in wording, no citation either way
- 2023Distilling Out-of-Distribution Robustness from Vision-Language Foundation Models
- 2025Improving Adversarial Robustness Through Adaptive Learning-Driven Multi-Teacher Knowledge Distillation
- 2026The Professor: Multi-Teacher Unsupervised Prompt Distillation for Vision-Language Models
- 2025AMMKD: Adaptive Multimodal Multi-teacher Distillation for Lightweight Vision-Language Models
- 2024Adversarial Prompt Distillation for Vision-Language Models
- 2026Beyond Single-Sample: Reliable Multi-Sample Distillation for Video Understanding
- 2025Robust-LLaVA: On the Effectiveness of Large-Scale Robust Image Encoders for Multi-modal Large Language Models
- 2025Double Visual Defense: Adversarial Pre-training and Instruction Tuning for Improving Vision-Language Model Robustness