llm-kb
← Back to research
Paper

Robustifying Vision-Language Models via Test-Time Prompt Adaptation

A new arxiv paper proposes a test-time prompt adaptation method to improve robustness of Vision-Language Models like CLIP against adversarial perturbations. The approach leverages distributional structure rather than sample-level heuristics to distinguish adversarial mispredictions from true semantic consistency.

0 engagement·1 source·Fri, Jul 10, 2026, 02:19 PM
The paper, posted on arxiv on 2026-07-10, addresses the vulnerability of pre-trained VLMs such as CLIP to adversarial attacks. Existing test-time adaptation methods rely on sample-level confidence heuristics, which fail to handle confident adversarial mispredictions. The authors observe that adversarial distortion is structurally brittle: while holistic representations are corrupted, semantic information can still be recovered by adapting prompts at test time using distributional cues. The method aims to improve zero-shot robustness without requiring additional training data.

Entities

Vision-Language Models(concept)CLIP(model)Test-Time Prompt Adaptation(concept)Adversarial Perturbations(concept)

Related

Paper

Foveated Dynamic Transformer (FDT) paper proposes foveation-guided token selection for robust vision transformers

A new arXiv paper introduces the Foveated Dynamic Transformer (FDT), a vision transformer architecture that uses foveation-guided dynamic token selection inspired by the human visual system. The model demonstrates strong resilience to noise and adversarial attacks without explicit adversarial training, offering a path to more efficient and robust vision models.

0 engagement·1 source·arxiv
Fri, Jul 10, 2026, 02:53 PM
arXiv
Paper

TCLA: Training-Free Few-Shot Adaptation for Medical VLMs

Researchers propose TCLA, a training-free method to adapt medical Vision-Language Models (VLMs) to out-of-distribution data using only a few examples. It corrects inference logits without additional trainable components, improving stability in low-data regimes like 1-shot. The method is model-agnostic and fast, addressing domain shifts and class bias in medical imaging.

0 engagement·1 source·arxiv
Fri, Jul 10, 2026, 04:06 PM
arXiv
Paper

CLAP paper proposes direct VLM-to-VLA adaptation to isolate semantic transfer

A new arXiv paper introduces CLAP, a method that converts pretrained vision-language models (VLMs) into vision-language-action models (VLAs) with minimal architectural changes, avoiding the distribution mismatch caused by predicting actions as bare numeric tokens. The approach aims to clarify how VLM capabilities transfer across model scales for robot control.

0 engagement·1 source·arxiv
Thu, Jul 9, 2026, 10:34 PM
arXiv
Paper

Activation-Guided GCG attacks target refusal direction in LLMs

A new arxiv paper introduces Activation-Guided GCG, an adversarial attack that optimizes suffixes by directly targeting a model's internal refusal direction in activation space, rather than output-based objectives. The work probes the geometry of safety representations, showing that refusal behavior is mediated by low-dimensional directions that can be suppressed via optimization.

0 engagement·1 source·arxiv
Thu, Jul 9, 2026, 07:21 PM
arXiv
Paper

TILDE Paper Proposes TILt-based Distributional Erasure for Concept Unlearning in Diffusion Models

A new arxiv paper (July 7, 2026) introduces TILDE, a method for concept unlearning in text-to-image diffusion models that aims to remove unwanted concepts while preserving generation quality, diversity, and semantic coverage on benign prompts. The work addresses privacy, copyright, and safety concerns, with the gold standard being a retain-only model trained from scratch without the unwanted data.

0 engagement·1 source·arxiv
Tue, Jul 7, 2026, 03:59 PM
arXiv