ECCV 2026 · Accepted

Learning from Adversity:
Semantic-Aware Mask Refinement
through Adversarial Perturbation

A framework that repurposes adversarial perturbation — from a destructive testing tool into a constructive engine for generating realistic, semantic-aware training noise for mask refinement.

1 KAIST2 NAVER Cloud, Image Vision3 DeepAuto.ai
0
APmask on 1% PointWSSIS
0
APboundary gain
0
IoU on DIS (U-Net)
0
trainable params (0.6%)
Qualitative comparison of Phoenix
Qualitative comparison of our mask refinement with existing approaches on (a) instance segmentation and (b) fine-grained segmentation. Phoenix recovers complex structures and boundary details that competing refiners miss.
Abstract

What doesn't kill you makes you stronger

Despite significant advances in image segmentation, even state-of-the-art models produce masks with imperfect boundaries, semantic inconsistencies, and structural errors. Mask refinement addresses these limitations, yet current approaches rely on simplistic synthetic noise that fails to capture the complex error patterns of real segmentation models. We introduce Phoenix, a framework that leverages adversarial learning to generate semantically meaningful noise patterns and contrastive learning to model refinement relationships. Our approach consists of two innovations: (1) Adversarial Mask Perturbation (AMP), which employs embedding-space attacks to create semantic-aware noise that mimics real segmentation errors, and (2) Contrastive Mask Refinement Learning (CMRL), a tri-directional framework that ensures feature consistency within semantic regions while maintaining separation between classes. Experiments demonstrate that Phoenix significantly outperforms existing methods across diverse tasks, while consistently enhancing state-of-the-art segmentation models with substantial improvements.

TL;DR

Two ideas, one synergy

AMP and CMRL are mutually constitutive: combined they exceed the sum of their parts (+10.4 IoU vs. +6.2 and +2.5 alone).

AMP
🎯

Adversarial, not destructive

We repurpose embedding-space FGSM as a constructive noise generator. Perturbations concentrate exactly where models are uncertain — challenging boundaries and ambiguous regions.

🎛️

Controllable noise

Guidance masks and an IoU threshold τ let us dial error type (over/under-segmentation) and intensity, covering the full spectrum of realistic failures.

CMRL
🧲

Tri-directional contrast

Six regions over target / noisy / refined masks drive intra-class consistency, inter-class separation, and self-improvement — tailored to refinement, not generic representation learning.

Method

The Phoenix framework

Built on a frozen SAM encoder; only the lightweight decoder (4M params) is fine-tuned.

Phoenix framework overview
Overview. AMP injects learnable perturbation embeddings into the frozen decoder to synthesize realistic noisy masks; CMRL then supervises refinement in feature space across six target/noisy/refined regions.
AMP

Semantic-aware noise via embedding attacks

Unlike morphological operations that apply random geometric distortions, AMP runs FGSM in the embedding space of a frozen decoder. The resulting noise is image-conditional and lands on semantically hard regions — over-/under-segmentation, contextual confusion, and boundary imprecision — at only ~6 ms per update.

Morphological vs adversarial noise
Morphological (left) vs. our adversarial (right) noise masks.
CMRL contrastive learning
Tri-directional contrastive structure over six pixel regions.
CMRL

Contrastive refinement in feature space

CMRL partitions pixels into true / success / failure × foreground / background regions and applies three objectives — intra-class consistency, inter-class contrast, and self-improvement bootstrapping — guiding failures toward already-corrected regions within the same image.

Why it works

Adversarial noise is semantically richer

Pearson correlation between noise location and image edge/texture maps on LVIS val.

Morphological noise distribution
Morphological: narrowly concentrated near 0 — semantically uncorrelated.
Adversarial noise distribution
Adversarial (ours): spans [−0.6, 0.8] — aligns with semantic structures and homogeneous regions, mirroring real-model errors.
Noise pattern comparison vs real model errors
Realism. AMP reproduces the failure patterns of real models (1% PointWSSIS, DIS-UNet) that morphological operations cannot synthesize.
Results

State-of-the-art across tasks

Weakly semi-supervised instance segmentation — PointWSSIS, COCO train5K (LVIS annotations)

MethodSupervisionAPmaskAPboundary
PointWSSIS𝓕 1% + 𝓟 99%12.66.3
+ SegRefiner14.79.5
+ SAMRefiner21.816.4
+ Phoenix (ours)28.7 +16.123.6 +17.3
PointWSSIS𝓕 5% + 𝓟 95%25.716.4
+ SegRefiner27.620.2
+ SAMRefiner32.826.2
+ Phoenix (ours)36.3 +10.630.2 +13.8
PointWSSIS𝓕 10% + 𝓟 90%30.220.4
+ SegRefiner31.723.8
+ SAMRefiner36.629.7
+ Phoenix (ours)38.9 +8.732.6 +12.2

𝓕: full mask annotations · 𝓟: object-center point annotations. Gains shown vs. the unrefined baseline.

Fine-grained segmentation — DIS benchmark, average over 5 splits

Base modelRefinerIoUBoundary 𝓕
U-Net54.768.4
+ SegRefiner58.772.6
+ Phoenix75.7 +21.084.4 +16.0
PSPNet55.869.8
+ Phoenix75.9 +20.184.8 +15.0
HRNet60.574.9
+ Phoenix76.0 +15.585.1 +10.2
ISNet66.179.6
+ Phoenix76.6 +11.085.9 +6.3
Analysis

Efficient, stable, and synergistic

Component synergy

AMPCMRLAP1IoU1
22.365.3
26.9 +4.671.5 +6.2
23.8 +1.567.8 +2.5
28.7 +6.475.7 +10.4

Combined gain (+10.4 IoU) exceeds the sum of parts — true synergy.

Encoder efficiency

EncoderAP1VRAMFPS
ViT-H28.74.9 GB3.5
ViT-L26.64.1 GB5.6
ViT-B22.42.8 GB12.4
EfficientViT-XL128.00.8 GB45.2

EfficientViT-XL1 retains accuracy at a 17× memory cut and 45 FPS. Over 5 runs Phoenix is stable: AP1=28.7±0.5, AP2=46.9±0.3.

Citation

BibTeX

@inproceedings{kim2026phoenix,
  title     = {Learning from Adversity: Semantic-Aware Mask Refinement
               through Adversarial Perturbation},
  author    = {Kim, Beomyoung and Hwang, Sung Ju},
  booktitle = {European Conference on Computer Vision (ECCV)},
  year      = {2026}
}
⚙️ TODO before launch: replace the Paper / arXiv button links in the hero, confirm the Code repo URL, and update this BibTeX with the official ECCV 2026 proceedings entry once available.
×zoom