首个多模态安全意识评测基准,揭示大模型安全判断能力严重不足
Can't See the Forest for the Trees: Benchmarking Multimodal Safety Awareness for Multimodal LLMs
- 构建29类安全场景的图像-提示对数据集,评估模型识别危险内容能力
- 九款主流模型平均误判率超30%,如GPT-4V将近六成正常内容判为危险
- 发现现有改进方法均难奏效,凸显多模态安全意识仍存巨大挑战
多模态大语言模型(MLLMs)通过文本与图像交互拓展了传统语言模型的能力,但其安全性仍是重大挑战,尤其在准确判断多模态内容是否安全——我们称之为安全意识。本文提出MMSafeAware,首个全面的多模态安全意识评测基准,涵盖29种安全场景,包含1500组精心设计的图像-提示对。该基准包含不安全和过度敏感两个子集,用于评估模型对危险内容的识别能力及避免过度敏感以维持实用性。使用MMSafeAware评估九款广泛使用的MLLMs发现,当前模型安全意识不足且普遍过度敏感:例如,GPT-4V将36.1%的危险输入误判为安全,将59.9%的良性输入误判为危险。我们进一步探索三种改进方法——基于提示的策略、视觉对比解码和视觉主导推理微调,但均未达到理想效果。研究结果表明,实现鲁棒的多模态安全意识仍面临严峻挑战,亟需深入研究。所有代码与数据将公开,以推动后续研究。
原文摘要 · Abstract (English)
Multimodal Large Language Models (MLLMs) have expanded the capabilities of traditional language models by enabling interaction through both text and images. However, ensuring the safety of these models remains a significant challenge, particularly in accurately identifying whether multimodal content is safe or unsafe-a capability we term safety awareness. In this paper, we introduce MMSafeAware, the first comprehensive multimodal safety awareness benchmark designed to evaluate MLLMs across 29 safety scenarios with 1500 carefully curated image-prompt pairs. MMSafeAware includes both unsafe and over-safety subsets to assess models abilities to correctly identify unsafe content and avoid over-sensitivity that can hinder helpfulness. Evaluating nine widely used MLLMs using MMSafeAware reveals that current models are not sufficiently safe and often overly sensitive; for example, GPT-4V misclassifies 36.1% of unsafe inputs as safe and 59.9% of benign inputs as unsafe. We further explore three methods to improve safety awareness-prompting-based approaches, visual contrastive decoding, and vision-centric reasoning fine-tuning-but find that none achieve satisfactory performance. Our findings highlight the profound challenges in developing MLLMs with robust safety awareness, underscoring the need for further research in this area. All the code and data will be publicly available to facilitate future research.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。