ATAC: Augmentation-Based Test-Time Adversarial Correction for CLIP
arXiv:2511.17362v3 Announce Type: replace
Abstract: Despite its remarkable success in zero-shot image-text matching, CLIP remains highly vulnerable to adversarial perturbations on images. As adversarial fine-tuning is prohibitively costly, recent work…