评测多模态大模型在不同场景下的安全判断能力,发现其常因忽略视觉上下文而误判。
Multimodal Situational Safety
- 构建包含1820对图文的安全评估基准,区分安全与危险场景。
- 当前多模态模型在指令跟随中难以同时处理显式推理、视觉理解与情境安全。
- 引入多智能体协作机制,显著提升模型响应安全性,适合安全敏感应用研究者参考。
多模态大语言模型(MLLMs)正快速发展,展现出与人及环境交互的强大能力。然而,其复杂性也带来了显著的安全隐患。本文首次提出并分析了‘多模态情境安全’这一新挑战,探讨用户或代理所处具体情境如何影响安全判断。我们认为,为实现安全响应,MLLM需结合语言查询与对应的视觉上下文进行安全评估。为此,我们构建了多模态情境安全基准(MSSBench),包含1,820个语言-图像配对样本,其中一半图像上下文安全,另一半不安全。我们还设计了评估框架,涵盖显式安全推理、视觉理解及关键的情境安全推理。结果表明,现有MLLM在指令遵循设置下难以应对这种细粒度安全问题,且无法同时解决多项挑战,凸显未来研究的关键方向。此外,我们开发了多智能体协同管道,在安全表现上持续优于原始模型。代码与数据:mssbench.github.io。
原文摘要 · Abstract (English)
Multimodal Large Language Models (MLLMs) are rapidly evolving, demonstrating impressive capabilities as multimodal assistants that interact with both humans and their environments. However, this increased sophistication introduces significant safety concerns. In this paper, we present the first evaluation and analysis of a novel safety challenge termed Multimodal Situational Safety, which explores how safety considerations vary based on the specific situation in which the user or agent is engaged. We argue that for an MLLM to respond safely, whether through language or action, it often needs to assess the safety implications of a language query within its corresponding visual context. To evaluate this capability, we develop the Multimodal Situational Safety benchmark (MSSBench) to assess the situational safety performance of current MLLMs. The dataset comprises 1,820 language query-image pairs, half of which the image context is safe, and the other half is unsafe. We also develop an evaluation framework that analyzes key safety aspects, including explicit safety reasoning, visual understanding, and, crucially, situational safety reasoning. Our findings reveal that current MLLMs struggle with this nuanced safety problem in the instruction-following setting and struggle to tackle these situational safety challenges all at once, highlighting a key area for future research. Furthermore, we develop multi-agent pipelines to coordinately solve safety challenges, which shows consistent improvement in safety over the original MLLM response. Code and data: mssbench.github.io.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。