视觉语言模型安全对齐能力会下降,该研究提出方法在推理时修复这一问题。
Unraveling and Mitigating Safety Alignment Degradation of Vision-Language Models
- 通过跨模态表征干预,修复视觉输入导致的安全对齐退化
- 不需额外训练,使LLaVA-7B的不安全率从61.53%降至3.15%
- 适合关注多模态安全性的研究人员和应用开发者
视觉语言模型(VLM)的安全对齐能力在引入视觉模块后容易退化。本文研究此现象,称为‘安全对齐退化’,发现其源于多模态输入引入后产生的表征差距。具体而言,多模态输入的表示偏离了仅文本输入所对应的分布,而后者正是语言模型骨干网络优化的基础。同时,原本在纯文本嵌入空间中建立的安全对齐能力无法有效迁移至新的多模态表示空间。为缓解该问题,我们提出跨模态表征操控(CMRM),一种在推理阶段进行的表征干预方法,可在不破坏VLM功能的前提下恢复其来自语言模型骨干的内在安全对齐能力。实验表明,该框架能显著恢复继承自语言模型的安全对齐能力,且对生成流畅性和语言能力影响极小,无需额外训练。例如,LLaVA-7B在多模态输入下的不安全率可从61.53%降至最低3.15%。警告:本文包含有毒或有害语言示例。
原文摘要 · Abstract (English)
The safety alignment ability of Vision-Language Models (VLMs) is prone to be degraded by the integration of the vision module compared to its LLM backbone. We investigate this phenomenon, dubbed as ''safety alignment degradation'' in this paper, and show that the challenge arises from the representation gap that emerges when introducing vision modality to VLMs. In particular, we show that the representations of multi-modal inputs shift away from that of text-only inputs which represent the distribution that the LLM backbone is optimized for. At the same time, the safety alignment capabilities, initially developed within the textual embedding space, do not successfully transfer to this new multi-modal representation space. To reduce safety alignment degradation, we introduce Cross-Modality Representation Manipulation (CMRM), an inference time representation intervention method for recovering the safety alignment ability that is inherent in the LLM backbone of VLMs, while simultaneously preserving the functional capabilities of VLMs. The empirical results show that our framework significantly recovers the alignment ability that is inherited from the LLM backbone with minimal impact on the fluency and linguistic capabilities of pre-trained VLMs even without additional training. Specifically, the unsafe rate of LLaVA-7B on multi-modal input can be reduced from 61.53% to as low as 3.15% with only inference-time intervention. WARNING: This paper contains examples of toxic or harmful language.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。