ToViLaG: Your Visual-Language Generative Model is Also An Evildoer
Not on the map. Why?
Abstract (arXiv)
Warning: this paper includes model outputs showing offensive content. Recent large-scale Visual-Language Generative Models (VLGMs) have achieved unprecedented improvement in multimodal image/text generation. However, these models might also generate toxic content, e.g., offensive text and pornography images, raising significant ethical risks. Despite exhaustive studies on toxic degeneration of language models, this problem remains largely unexplored within the context of visual-language generation. This work delves into the propensity for toxicity generation and susceptibility to toxic data across various VLGMs. For this purpose, we built ToViLaG, a dataset comprising 32K co-toxic/mono-toxic text-image pairs and 1K innocuous but evocative text that tends to stimulate toxicity. Furthermore, we propose WInToRe, a novel toxicity metric tailored to visual-language generation, which theoretically reflects different aspects of toxicity considering both input and output. On such a basis, we benchmarked the toxicity of a diverse spectrum of VLGMs and discovered that some models do more evil than expected while some are more vulnerable to infection, underscoring the necessity of VLGMs detoxification. Therefore, we develop an innovative bottleneck-based detoxification method. Our method could reduce toxicity while maintaining comparable generation quality, providing a promising initial solution to this line of research.
Key facts. Cited by 27 papers in the map (data through 14 Oct 2026). Builds on 62 of its 84 references that are in the map. First posted on arXiv 13 Dec 2023.
Builds on
62 of 84 references.
References · 62
- 2017Attention Is All You Needcited by 60,361
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
- 2020Denoising Diffusion Probabilistic Modelscited by 21,076
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
- 2014Microsoft COCO: Common Objects in Contextcited by 17,608
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
- 2020Denoising Diffusion Implicit Modelscited by 9,781
- 2023Visual Instruction Tuningcited by 7,869
- 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,585
- 2023BLIP-2: Bootstrapping Language-Image Pre-training with Frozen Image Encoders and Large Language Modelscited by 6,137
38 more
- 2019BERTScore: Evaluating Text Generation with BERTcited by 5,512
- 2022Flamingo: a Visual Language Model for Few-Shot Learningcited by 4,386
- 2022BLIP: Bootstrapping Language-Image Pre-training for Unified Vision-Language Understanding and Generationcited by 4,322
- 2021On the Opportunities and Risks of Foundation Modelscited by 4,033
- 2022OPT: Open Pre-trained Transformer Language Modelscited by 3,512
- 2016Improved Techniques for Training GANscited by 2,970
- 2022InstructPix2Pix: Learning to Follow Image Editing Instructionscited by 2,611
- 2015VQA: Visual Question Answeringcited by 2,506
- 2021CLIPScore: A Reference-free Evaluation Metric for Image Captioningcited by 2,424
- 2023PaLM-E: An Embodied Multimodal Language Modelcited by 2,071
- 2021LAION-400M: Open Dataset of CLIP-Filtered 400 Million Image-Text Pairscited by 1,555
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,255
- 2021Conceptual 12M: Pushing Web-Scale Image-Text Pre-Training To Recognize Long-Tail Visual Conceptscited by 1,216
- 2020Oscar: Object-Semantics Aligned Pre-training for Vision-Language Taskscited by 1,214
- 2016Deep Variational Information Bottleneckcited by 930
- 2016SPICE: Semantic Propositional Image Caption Evaluationcited by 824
- 2019Plug and Play Language Models: A Simple Approach to Controlled Text Generationcited by 799
- 2022OFA: Unifying Architectures, Tasks, and Modalities Through a Simple Sequence-to-Sequence Learning Frameworkcited by 745
- 2019Universal Adversarial Triggers for Attacking and Analyzing NLPcited by 722
- 2021CogView: Mastering Text-to-Image Generation via Transformerscited by 694
- 2021SimVLM: Simple Visual Language Model Pretraining with Weak Supervisioncited by 647
- 2022GIT: A Generative Image-to-text Transformer for Vision and Languagecited by 537
- 2022Transformer Feed-Forward Layers Build Predictions by Promoting Concepts in the Vocabulary Spacecited by 532
- 2021DExperts: Decoding-Time Controlled Text Generation with Experts and Anti-Expertscited by 441
- 2022ToxiGen: A Large-Scale Machine-Generated Dataset for Adversarial and Implicit Hate Speech Detectioncited by 422
- 2020GeDi: Generative Discriminator Guided Sequence Generationcited by 378
- 2021FUDGE: Controlled Text Generation With Future Discriminatorscited by 376
- 2021Multimodal datasets: misogyny, pornography, and malignant stereotypescited by 327
- 2021How Much Can CLIP Benefit Vision-and-Language Tasks?cited by 321
- 2022CogView2: Faster and Better Text-to-Image Generation via Hierarchical Transformerscited by 307
- 2021Latent Hatred: A Benchmark for Understanding Implicit Hate Speechcited by 217
- 2022A New Generation of Perspective API: Efficient Multilingual Character-level Transformerscited by 185
- 2021Challenges in Detoxifying Language Modelscited by 169
- 2022CM3: A Causal Masked Multimodal Model of the Internetcited by 142
- 2020REVISE: A Tool for Measuring and Mitigating Bias in Visual Datasetscited by 136
- 2022A Prompt Array Keeps the Bias Away: Debiasing Vision-Language Models with Adversarial Learningcited by 104
- 2021FairFil: Contrastive Neural Debiasing Method for Pretrained Text Encoderscited by 75
- 2022Exploring the Limits of Domain-Adaptive Training for Detoxifying Large-Scale Language Modelscited by 68
50 most cited of 62 All 62 (JSON)
Built on by
Citing papers per year: 2024: 9; 2025: 14; 2026: 4.
27 papers.
Sort:
By area:
- 2024Safety of Multimodal Large Language Models on Images and Textscited by 75
- 2024Align Anything: Training All-Modality Models to Follow Instructions with Language Feedbackcited by 39
- 2024Assessment of Multimodal Large Language Models in Alignment with Human Valuescited by 36
- 2024LLMs Meet Multimodal Generation and Editing: A Surveycited by 35
- 2025Towards Robust and Secure Embodied AI: A Survey on Vulnerabilities and Attackscited by 34
- 2024From LLMs to MLLMs: Exploring the Landscape of Multimodal Jailbreakingcited by 24
- 2024Adversarial Attacks of Vision Tasks in the Past 10 Years: A Surveycited by 23
- 2024SANER: Annotation-free Societal Attribute Neutralizer for Debiasing CLIPcited by 19
- 2024Cross-Modal Safety Mechanism Transfer in Large Vision-Language Modelscited by 19
- 2025Automating Steering for Safe Multimodal Large Language Modelscited by 17
- 2025MoHoBench: Assessing Honesty of Multimodal Large Language Models via Unanswerable Visual Questionscited by 11
- 2025CHAI: Command Hijacking against embodied AIcited by 11
15 more
- 2025Zero-Shot Defense Against Toxic Images via Inherent Multimodal Alignment in LVLMscited by 6
- 2025REVAL: A Comprehension Evaluation on Reliability and Values of Large Vision-Language Modelscited by 5
- 2025REVEAL: Multi-turn Evaluation of Image-Input Harms for Vision LLMcited by 5
- 2025Bias in Gender Bias Benchmarks: How Spurious Features Distort Evaluationcited by 5
- 2025Unveiling Trust in Multimodal Large Language Models: Evaluation, Analysis, and Mitigationcited by 4
- 2024Embedding an Ethical Mind: Aligning Text-to-Image Synthesis via Lightweight Value Optimizationcited by 2
- 2025How Jailbreak Defenses Work and Ensemble? A Mechanistic Investigationcited by 2
- 2025Q-MLLM: Vector Quantization for Robust Multimodal Large Language Model Securitycited by 2
- 2025ExtremeAIGC: Benchmarking LMM Vulnerability to AI-Generated Extremist Contentcited by 1
- 2025MDIT-Bench: Evaluating the Dual-Implicit Toxicity in Large Multimodal Modelscited by 1
- 2025VModA: An Effective Framework for Adaptive NSFW Image Moderationcited by 1
- 2026Old Tricks, New Models: How Simple Image Transformations Break Modern AI-based Content Moderationcited by 0
- 2026Guardrail-Agnostic Societal Bias Evaluation in Large Vision-Language Modelscited by 0
- 2026SPARK: Representation-Level KV Memory Alignment for Safer Vision-Language Modelscited by 0
- 2026ShieldCLIP: Selective Safety Alignment for Harmful Content Mitigation in Multimodal Foundation Modelscited by 0
- 2026ShieldCLIP: Selective Safety Alignment for Harmful Content Mitigation in Multimodal Foundation Models30 Sep 2026
- 2026SPARK: Representation-Level KV Memory Alignment for Safer Vision-Language Models13 Sep 2026
- 2026Guardrail-Agnostic Societal Bias Evaluation in Large Vision-Language Models30 Aug 2026
- 2026Old Tricks, New Models: How Simple Image Transformations Break Modern AI-based Content Moderation30 Jul 2026
- 2025Q-MLLM: Vector Quantization for Robust Multimodal Large Language Model Security20 Nov 2025
- 2025CHAI: Command Hijacking against embodied AI30 Sep 2025
- 2025Bias in Gender Bias Benchmarks: How Spurious Features Distort Evaluation9 Sep 2025
- 2025Unveiling Trust in Multimodal Large Language Models: Evaluation, Analysis, and Mitigation21 Aug 2025
- 2025MoHoBench: Assessing Honesty of Multimodal Large Language Models via Unanswerable Visual Questions29 Jul 2025
- 2025Automating Steering for Safe Multimodal Large Language Models17 Jul 2025
- 2025VModA: An Effective Framework for Adaptive NSFW Image Moderation29 May 2025
- 2025MDIT-Bench: Evaluating the Dual-Implicit Toxicity in Large Multimodal Models22 May 2025
15 more
- 2025REVEAL: Multi-turn Evaluation of Image-Input Harms for Vision LLM7 May 2025
- 2025REVAL: A Comprehension Evaluation on Reliability and Values of Large Vision-Language Models20 Mar 2025
- 2025ExtremeAIGC: Benchmarking LMM Vulnerability to AI-Generated Extremist Content13 Mar 2025
- 2025Zero-Shot Defense Against Toxic Images via Inherent Multimodal Alignment in LVLMs25 Feb 2025
- 2025How Jailbreak Defenses Work and Ensemble? A Mechanistic Investigation20 Feb 2025
- 2025Towards Robust and Secure Embodied AI: A Survey on Vulnerabilities and Attacks18 Feb 2025
- 2024Align Anything: Training All-Modality Models to Follow Instructions with Language Feedback20 Dec 2024
- 2024Adversarial Attacks of Vision Tasks in the Past 10 Years: A Survey31 Oct 2024
- 2024Embedding an Ethical Mind: Aligning Text-to-Image Synthesis via Lightweight Value Optimization16 Oct 2024
- 2024Cross-Modal Safety Mechanism Transfer in Large Vision-Language Models16 Oct 2024
- 2024SANER: Annotation-free Societal Attribute Neutralizer for Debiasing CLIP19 Aug 2024
- 2024From LLMs to MLLMs: Exploring the Landscape of Multimodal Jailbreaking21 Jun 2024
- 2024LLMs Meet Multimodal Generation and Editing: A Survey29 May 2024
- 2024Assessment of Multimodal Large Language Models in Alignment with Human Values26 Mar 2024
- 2024Safety of Multimodal Large Language Models on Images and Texts1 Feb 2024
- 2024Safety of Multimodal Large Language Models on Images and Textscited by 75
- 2024Assessment of Multimodal Large Language Models in Alignment with Human Valuescited by 36
- 2024From LLMs to MLLMs: Exploring the Landscape of Multimodal Jailbreakingcited by 24
- 2024Adversarial Attacks of Vision Tasks in the Past 10 Years: A Surveycited by 23
- 2024SANER: Annotation-free Societal Attribute Neutralizer for Debiasing CLIPcited by 19
- 2024Cross-Modal Safety Mechanism Transfer in Large Vision-Language Modelscited by 19
- 2025MoHoBench: Assessing Honesty of Multimodal Large Language Models via Unanswerable Visual Questionscited by 11
- 2025Zero-Shot Defense Against Toxic Images via Inherent Multimodal Alignment in LVLMscited by 6
- 2025REVAL: A Comprehension Evaluation on Reliability and Values of Large Vision-Language Modelscited by 5
- 2025Bias in Gender Bias Benchmarks: How Spurious Features Distort Evaluationcited by 5
- 2025Unveiling Trust in Multimodal Large Language Models: Evaluation, Analysis, and Mitigationcited by 4
- 2025Q-MLLM: Vector Quantization for Robust Multimodal Large Language Model Securitycited by 2
12 most cited of 16 All 16 (JSON)
- 2026SPARK: Representation-Level KV Memory Alignment for Safer Vision-Language Models13 Sep 2026
- 2026Guardrail-Agnostic Societal Bias Evaluation in Large Vision-Language Models30 Aug 2026
- 2025Q-MLLM: Vector Quantization for Robust Multimodal Large Language Model Security20 Nov 2025
- 2025Bias in Gender Bias Benchmarks: How Spurious Features Distort Evaluation9 Sep 2025
- 2025Unveiling Trust in Multimodal Large Language Models: Evaluation, Analysis, and Mitigation21 Aug 2025
- 2025MoHoBench: Assessing Honesty of Multimodal Large Language Models via Unanswerable Visual Questions29 Jul 2025
- 2025MDIT-Bench: Evaluating the Dual-Implicit Toxicity in Large Multimodal Models22 May 2025
- 2025REVAL: A Comprehension Evaluation on Reliability and Values of Large Vision-Language Models20 Mar 2025
- 2025ExtremeAIGC: Benchmarking LMM Vulnerability to AI-Generated Extremist Content13 Mar 2025
- 2025Zero-Shot Defense Against Toxic Images via Inherent Multimodal Alignment in LVLMs25 Feb 2025
- 2024Adversarial Attacks of Vision Tasks in the Past 10 Years: A Survey31 Oct 2024
- 2024Cross-Modal Safety Mechanism Transfer in Large Vision-Language Models16 Oct 2024
12 newest of 16 All 16 (JSON)
- 2024LLMs Meet Multimodal Generation and Editing: A Surveycited by 35
- 2025Towards Robust and Secure Embodied AI: A Survey on Vulnerabilities and Attackscited by 34
- 2025CHAI: Command Hijacking against embodied AIcited by 11
- 2025REVEAL: Multi-turn Evaluation of Image-Input Harms for Vision LLMcited by 5
- 2025VModA: An Effective Framework for Adaptive NSFW Image Moderationcited by 1
- 2025CHAI: Command Hijacking against embodied AI30 Sep 2025
- 2025VModA: An Effective Framework for Adaptive NSFW Image Moderation29 May 2025
- 2025REVEAL: Multi-turn Evaluation of Image-Input Harms for Vision LLM7 May 2025
- 2025Towards Robust and Secure Embodied AI: A Survey on Vulnerabilities and Attacks18 Feb 2025
- 2024LLMs Meet Multimodal Generation and Editing: A Survey29 May 2024