arXiv:2511.16229cs.CRcs.AI2025-11中稿 · NDSS 2026被引 2

用分层量化让多模态大模型更抗攻击,同时保持推理能力。

Q-MLLM: Vector Quantization for Robust Multimodal Large Language Model Security

  • 通过像素级和语义级双重量化,构建对抗攻击的离散屏障。
  • 对越狱攻击防御成功率高达100%(仅1例存疑),且推理开销极小。
  • 无需额外微调或检测模块,适合部署在安全敏感的多模态系统中。

多模态大语言模型在跨模态理解方面表现出色,但其视觉输入仍易受对抗攻击,尽管文本安全机制较强。根本原因在于视觉表征的连续性使梯度攻击可行,且文本安全机制难以迁移至视觉内容。本文提出Q-MLLM,通过两级向量量化在像素块与语义层面实现视觉表征离散化,形成对抗攻击的瓶颈,同时弥合跨模态安全对齐缺口。采用两阶段训练策略,在保障模型实用性的同时实现鲁棒学习。实验表明,相比现有方法,Q-MLLM在越狱攻击与有毒图像攻击上防御成功率显著提升:对越狱攻击防御成功率达100%(仅1例存疑),且在多个实用基准测试中表现优异,推理开销极低。该工作证明向量量化是无需昂贵安全微调或检测开销的高效防御手段。代码已开源。

原文摘要 · Abstract (English)

Multimodal Large Language Models (MLLMs) have demonstrated impressive capabilities in cross-modal understanding, but remain vulnerable to adversarial attacks through visual inputs despite robust textual safety mechanisms. These vulnerabilities arise from two core weaknesses: the continuous nature of visual representations, which allows for gradient-based attacks, and the inadequate transfer of text-based safety mechanisms to visual content. We introduce Q-MLLM, a novel architecture that integrates two-level vector quantization to create a discrete bottleneck against adversarial attacks while preserving multimodal reasoning capabilities. By discretizing visual representations at both pixel-patch and semantic levels, Q-MLLM blocks attack pathways and bridges the cross-modal safety alignment gap. Our two-stage training methodology ensures robust learning while maintaining model utility. Experiments demonstrate that Q-MLLM achieves significantly better defense success rate against both jailbreak attacks and toxic image attacks than existing approaches. Notably, Q-MLLM achieves perfect defense success rate (100\%) against jailbreak attacks except in one arguable case, while maintaining competitive performance on multiple utility benchmarks with minimal inference overhead. This work establishes vector quantization as an effective defense mechanism for secure multimodal AI systems without requiring expensive safety-specific fine-tuning or detection overhead. Code is available at https://github.com/Amadeuszhao/QMLLM.

多模态安全向量量化对抗防御大模型

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。