构建更精准的图文毒性评估基准,提升模型安全检测能力
ELITE: Enhanced Language-Image Toxicity Evaluation for Safety
- 引入毒性评分机制,精准识别隐性有害内容
- 过滤低质数据,生成多样化的安全与危险图文对
- 评估结果更贴近人工判断,适合模型安全研究者使用
当前视觉语言模型(VLMs)仍易受恶意提示诱导产生有害输出。现有安全评测基准主要依赖自动化方法,但难以检测隐性有害内容,导致评估不准确。我们发现现有基准存在有害程度低、数据模糊、图文组合多样性不足等问题。为此,提出ELITE基准,基于改进的ELITE评估器,显式引入毒性评分以更准确评估多模态场景中的危害性。该评估器过滤现有基准中的模糊与低质量图文对,并生成多样化的安全与不安全图文组合。实验表明,ELITE评估器在与人工评估的一致性上优于先前自动化方法,且ELITE基准具备更高品质与多样性。通过ELITE,为构建更安全、鲁棒的VLMs提供关键工具,助力真实场景中安全风险的评估与缓解。
原文摘要 · Abstract (English)
Current Vision Language Models (VLMs) remain vulnerable to malicious prompts that induce harmful outputs. Existing safety benchmarks for VLMs primarily rely on automated evaluation methods, but these methods struggle to detect implicit harmful content or produce inaccurate evaluations. Therefore, we found that existing benchmarks have low levels of harmfulness, ambiguous data, and limited diversity in image-text pair combinations. To address these issues, we propose the ELITE benchmark, a high-quality safety evaluation benchmark for VLMs, underpinned by our enhanced evaluation method, the ELITE evaluator. The ELITE evaluator explicitly incorporates a toxicity score to accurately assess harmfulness in multimodal contexts, where VLMs often provide specific, convincing, but unharmful descriptions of images. We filter out ambiguous and low-quality image-text pairs from existing benchmarks using the ELITE evaluator and generate diverse combinations of safe and unsafe image-text pairs. Our experiments demonstrate that the ELITE evaluator achieves superior alignment with human evaluations compared to prior automated methods, and the ELITE benchmark offers enhanced benchmark quality and diversity. By introducing ELITE, we pave the way for safer, more robust VLMs, contributing essential tools for evaluating and mitigating safety risks in real-world applications.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。