提出新数据集与强化学习方法,提升视觉语言模型识别跨模态不安全概念的能力。
Bridging the Gap in Vision Language Models in Identifying Unsafe Concepts Across Modalities
- 构建包含75个不安全概念的UnsafeConcepts数据集,含1.5K张图像。
- 发现开源VLM在图文识别不安全概念上存在系统性差距,误判率较高。
- 用PPO强化学习直接基于模型响应优化,无需人工标注偏好数据。
视觉语言模型(VLMs)因其内部伦理标准和强大推理能力,被越来越多地用于识别不安全或不当图像。然而,它们在不同模态(如文本和图像)下识别各类不安全概念的能力仍不明确。为此,我们首先构建了UnsafeConcepts数据集,包含75个不安全概念(如“卐字符”、“性骚扰”、“袭击”)及其关联的1.5K张图像。我们系统评估了8个主流VLMs在概念识别(感知)和伦理推理(对齐)方面的能力。结果发现,尽管多数VLM能准确感知不安全概念,但常将其误判为安全;且开源VLM在区分视觉与文本不安全概念上存在一致性的模态差距。为此,我们提出一种简化的基于近端策略优化(PPO)的强化学习方法,直接利用VLM输出的奖励分数进行训练,无需收集人工标注的偏好数据。实验表明,该方法有效提升了VLM在图像上的对齐能力,同时保持通用性能,优于监督微调(SFT)和直接偏好优化(DPO)等基线。我们希望该数据集、评估结果与对齐方案能推动安全VLM的发展。
原文摘要 · Abstract (English)
Vision-language models (VLMs) are increasingly applied to identify unsafe or inappropriate images due to their internal ethical standards and powerful reasoning abilities. However, it is still unclear whether they can recognize various unsafe concepts when presented in different modalities, such as text and images. To address this, we first compile the UnsafeConcepts dataset, featuring 75 unsafe concepts, i.e., ``Swastika,'' ``Sexual Harassment,'' and ``Assaults,'' along with associated 1.5K images. We then conduct a systematic evaluation of VLMs' perception (concept recognition) and alignment (ethical reasoning) capabilities. We assess eight popular VLMs and find that, although most VLMs accurately perceive unsafe concepts, they sometimes mistakenly classify these concepts as safe. We also identify a consistent modality gap among open-source VLMs in distinguishing between visual and textual unsafe concepts. To bridge this gap, we introduce a simplified reinforcement learning (RL)-based approach using proximal policy optimization (PPO) to strengthen the ability to identify unsafe concepts from images. Our approach uses reward scores based directly on VLM responses, bypassing the need for collecting human-annotated preference data to train a new reward model. Experimental results show that our approach effectively enhances VLM alignment on images while preserving general capabilities. It outperforms baselines such as supervised fine-tuning (SFT) and direct preference optimization (DPO). We hope our dataset, evaluation findings, and proposed alignment solution contribute to the community's efforts in advancing safe VLMs.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。