mlsanityData to 14 Oct 2026

MMT-ARD: Multimodal Multi-Teacher Adversarial Distillation for Robust Vision-Language Models

arXiv 2511.17448 ↗First posted 21 Nov 2025cs.CVcited by 11

On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness

Abstract (arXiv)

Vision-Language Models (VLMs) are increasingly deployed in safety-critical applications, making their adversarial robustness a crucial concern. While adversarial knowledge distillation has shown promise in transferring robustness from teacher to student models, traditional single-teacher approaches suffer from limited knowledge diversity, slow convergence, and difficulty in balancing robustness and accuracy. To address these challenges, we propose MMT-ARD: a Multimodal Multi-Teacher Adversarial Robust Distillation framework. Our key innovation is a dual-teacher knowledge fusion architecture that collaboratively optimizes clean feature preservation and robust feature enhancement. To better handle challenging adversarial examples, we introduce a dynamic weight allocation strategy based on teacher confidence, enabling adaptive focus on harder samples. Moreover, to mitigate bias among teachers, we design an adaptive sigmoid-based weighting function that balances the strength of knowledge transfer across modalities. Extensive experiments on ImageNet and zero-shot benchmarks demonstrate that MMT-ARD improves robust accuracy by +4.32% and zero-shot accuracy by +3.5% on the ViT-B-32 model, while achieving a 2.3x increase in training efficiency over traditional single-teacher methods. These results highlight the effectiveness and scalability of MMT-ARD in enhancing the adversarial robustness of multimodal large models. Our codes are available at https://github.com/itsnotacie/MMT-ARD.

Key facts. Cited by 11 papers in the map (data through 14 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 22 of its 28 references that are in the map. First posted on arXiv 21 Nov 2025.

Builds on

22 of 28 references.

Closest ancestors · 4

Same direction, newest first

  1. 2024One Prompt Word is Enough to Boost Adversarial Robustness for Pre-trained Vision-Language Models4 Mar
  2. 2024Robust CLIP: Unsupervised Adversarial Fine-Tuning of Vision Embeddings for Robust Large Vision-Language Models19 Feb
  3. 2024Pre-trained Model Guided Fine-Tuning for Zero-Shot Adversarial Robustness9 Jan
  4. 2022Understanding Zero-Shot Adversarial Robustness for Large-Scale Models14 Dec

Other references · 18

  1. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
  2. 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,517
  3. 2017ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Modelscited by 666
  4. 2018Improving Transferability of Adversarial Examples with Input Diversitycited by 599
  5. 2019Evading Defenses to Transferable Adversarial Examples by Translation-Invariant Attackscited by 442
  6. 2019Enhancing Adversarial Example Transferability with an Intermediate Level Attackcited by 140
  7. 2018AutoZOOM: Autoencoder-based Zeroth Order Optimization Method for Attacking Black-box Neural Networkscited by 137
  8. 2022Cross-Image Relational Knowledge Distillation for Semantic Segmentationcited by 118
  9. 2018Transferable Adversarial Attacks for Image and Video Object Detectioncited by 109
  10. 2023CLIP-KD: An Empirical Study of CLIP Model Distillationcited by 87
  11. 2021Revisiting Adversarial Robustness Distillation: Robust Soft Labels Make Student Bettercited by 79
  12. 2017Adversarial Transformation Networks: Learning to Generate Adversarial Examplescited by 62
6 more
  1. 2020Universal Adversarial Attack on Attention and the Resulting Dataset DAmageNetcited by 45
  2. 2021Hierarchical Self-supervised Augmented Knowledge Distillationcited by 44
  3. 2022Transferable Adversarial Attack based on Integrated Gradientscited by 35
  4. 2023Mitigating Accuracy-Robustness Trade-off via Balanced Multi-Teacher Adversarial Distillationcited by 13
  5. 2023Improving Adversarial Robust Fairness via Anti-Bias Soft Label Distillationcited by 8
  6. 2024Revisiting Semi-supervised Adversarial Robustness via Noise-aware Online Robust Distillationcited by 1

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 1; 2026: 10.

11 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2023Distilling Out-of-Distribution Robustness from Vision-Language Foundation Models
  2. 2025Improving Adversarial Robustness Through Adaptive Learning-Driven Multi-Teacher Knowledge Distillation
  3. 2026The Professor: Multi-Teacher Unsupervised Prompt Distillation for Vision-Language Models
  4. 2025AMMKD: Adaptive Multimodal Multi-teacher Distillation for Lightweight Vision-Language Models
  5. 2024Adversarial Prompt Distillation for Vision-Language Models
  6. 2026Beyond Single-Sample: Reliable Multi-Sample Distillation for Video Understanding
  7. 2025Robust-LLaVA: On the Effectiveness of Large-Scale Robust Image Encoders for Multi-modal Large Language Models
  8. 2025Double Visual Defense: Adversarial Pre-training and Instruction Tuning for Improving Vision-Language Model Robustness