mlsanityData to 14 Oct 2026

ToViLaG: Your Visual-Language Generative Model is Also An Evildoer

arXiv 2312.11523 ↗First posted 13 Dec 2023cs.CL cs.AIcited by 27

Not on the map. Why?

Abstract (arXiv)

Warning: this paper includes model outputs showing offensive content. Recent large-scale Visual-Language Generative Models (VLGMs) have achieved unprecedented improvement in multimodal image/text generation. However, these models might also generate toxic content, e.g., offensive text and pornography images, raising significant ethical risks. Despite exhaustive studies on toxic degeneration of language models, this problem remains largely unexplored within the context of visual-language generation. This work delves into the propensity for toxicity generation and susceptibility to toxic data across various VLGMs. For this purpose, we built ToViLaG, a dataset comprising 32K co-toxic/mono-toxic text-image pairs and 1K innocuous but evocative text that tends to stimulate toxicity. Furthermore, we propose WInToRe, a novel toxicity metric tailored to visual-language generation, which theoretically reflects different aspects of toxicity considering both input and output. On such a basis, we benchmarked the toxicity of a diverse spectrum of VLGMs and discovered that some models do more evil than expected while some are more vulnerable to infection, underscoring the necessity of VLGMs detoxification. Therefore, we develop an innovative bottleneck-based detoxification method. Our method could reduce toxicity while maintaining comparable generation quality, providing a promising initial solution to this line of research.

Key facts. Cited by 27 papers in the map (data through 14 Oct 2026). Builds on 62 of its 84 references that are in the map. First posted on arXiv 13 Dec 2023.

Builds on

62 of 84 references.

References · 62

  1. 2017Attention Is All You Needcited by 60,361
  2. 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
  3. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
  4. 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
  5. 2020Denoising Diffusion Probabilistic Modelscited by 21,076
  6. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
  7. 2014Microsoft COCO: Common Objects in Contextcited by 17,608
  8. 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
  9. 2020Denoising Diffusion Implicit Modelscited by 9,781
  10. 2023Visual Instruction Tuningcited by 7,869
  11. 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,585
  12. 2023BLIP-2: Bootstrapping Language-Image Pre-training with Frozen Image Encoders and Large Language Modelscited by 6,137
38 more
  1. 2019BERTScore: Evaluating Text Generation with BERTcited by 5,512
  2. 2022Flamingo: a Visual Language Model for Few-Shot Learningcited by 4,386
  3. 2022BLIP: Bootstrapping Language-Image Pre-training for Unified Vision-Language Understanding and Generationcited by 4,322
  4. 2021On the Opportunities and Risks of Foundation Modelscited by 4,033
  5. 2022OPT: Open Pre-trained Transformer Language Modelscited by 3,512
  6. 2016Improved Techniques for Training GANscited by 2,970
  7. 2022InstructPix2Pix: Learning to Follow Image Editing Instructionscited by 2,611
  8. 2015VQA: Visual Question Answeringcited by 2,506
  9. 2021CLIPScore: A Reference-free Evaluation Metric for Image Captioningcited by 2,424
  10. 2023PaLM-E: An Embodied Multimodal Language Modelcited by 2,071
  11. 2021LAION-400M: Open Dataset of CLIP-Filtered 400 Million Image-Text Pairscited by 1,555
  12. 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,255
  13. 2021Conceptual 12M: Pushing Web-Scale Image-Text Pre-Training To Recognize Long-Tail Visual Conceptscited by 1,216
  14. 2020Oscar: Object-Semantics Aligned Pre-training for Vision-Language Taskscited by 1,214
  15. 2016Deep Variational Information Bottleneckcited by 930
  16. 2016SPICE: Semantic Propositional Image Caption Evaluationcited by 824
  17. 2019Plug and Play Language Models: A Simple Approach to Controlled Text Generationcited by 799
  18. 2022OFA: Unifying Architectures, Tasks, and Modalities Through a Simple Sequence-to-Sequence Learning Frameworkcited by 745
  19. 2019Universal Adversarial Triggers for Attacking and Analyzing NLPcited by 722
  20. 2021CogView: Mastering Text-to-Image Generation via Transformerscited by 694
  21. 2021SimVLM: Simple Visual Language Model Pretraining with Weak Supervisioncited by 647
  22. 2022GIT: A Generative Image-to-text Transformer for Vision and Languagecited by 537
  23. 2022Transformer Feed-Forward Layers Build Predictions by Promoting Concepts in the Vocabulary Spacecited by 532
  24. 2021DExperts: Decoding-Time Controlled Text Generation with Experts and Anti-Expertscited by 441
  25. 2022ToxiGen: A Large-Scale Machine-Generated Dataset for Adversarial and Implicit Hate Speech Detectioncited by 422
  26. 2020GeDi: Generative Discriminator Guided Sequence Generationcited by 378
  27. 2021FUDGE: Controlled Text Generation With Future Discriminatorscited by 376
  28. 2021Multimodal datasets: misogyny, pornography, and malignant stereotypescited by 327
  29. 2021How Much Can CLIP Benefit Vision-and-Language Tasks?cited by 321
  30. 2022CogView2: Faster and Better Text-to-Image Generation via Hierarchical Transformerscited by 307
  31. 2021Latent Hatred: A Benchmark for Understanding Implicit Hate Speechcited by 217
  32. 2022A New Generation of Perspective API: Efficient Multilingual Character-level Transformerscited by 185
  33. 2021Challenges in Detoxifying Language Modelscited by 169
  34. 2022CM3: A Causal Masked Multimodal Model of the Internetcited by 142
  35. 2020REVISE: A Tool for Measuring and Mitigating Bias in Visual Datasetscited by 136
  36. 2022A Prompt Array Keeps the Bias Away: Debiasing Vision-Language Models with Adversarial Learningcited by 104
  37. 2021FairFil: Contrastive Neural Debiasing Method for Pretrained Text Encoderscited by 75
  38. 2022Exploring the Limits of Domain-Adaptive Training for Detoxifying Large-Scale Language Modelscited by 68

50 most cited of 62 All 62 (JSON)

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2024: 9; 2025: 14; 2026: 4.

27 papers.

Sort:

By area:

  1. 2024Safety of Multimodal Large Language Models on Images and Textscited by 75
  2. 2024Align Anything: Training All-Modality Models to Follow Instructions with Language Feedbackcited by 39
  3. 2024Assessment of Multimodal Large Language Models in Alignment with Human Valuescited by 36
  4. 2024LLMs Meet Multimodal Generation and Editing: A Surveycited by 35
  5. 2025Towards Robust and Secure Embodied AI: A Survey on Vulnerabilities and Attackscited by 34
  6. 2024From LLMs to MLLMs: Exploring the Landscape of Multimodal Jailbreakingcited by 24
  7. 2024Adversarial Attacks of Vision Tasks in the Past 10 Years: A Surveycited by 23
  8. 2024SANER: Annotation-free Societal Attribute Neutralizer for Debiasing CLIPcited by 19
  9. 2024Cross-Modal Safety Mechanism Transfer in Large Vision-Language Modelscited by 19
  10. 2025Automating Steering for Safe Multimodal Large Language Modelscited by 17
  11. 2025MoHoBench: Assessing Honesty of Multimodal Large Language Models via Unanswerable Visual Questionscited by 11
  12. 2025CHAI: Command Hijacking against embodied AIcited by 11
15 more
  1. 2025Zero-Shot Defense Against Toxic Images via Inherent Multimodal Alignment in LVLMscited by 6
  2. 2025REVAL: A Comprehension Evaluation on Reliability and Values of Large Vision-Language Modelscited by 5
  3. 2025REVEAL: Multi-turn Evaluation of Image-Input Harms for Vision LLMcited by 5
  4. 2025Bias in Gender Bias Benchmarks: How Spurious Features Distort Evaluationcited by 5
  5. 2025Unveiling Trust in Multimodal Large Language Models: Evaluation, Analysis, and Mitigationcited by 4
  6. 2024Embedding an Ethical Mind: Aligning Text-to-Image Synthesis via Lightweight Value Optimizationcited by 2
  7. 2025How Jailbreak Defenses Work and Ensemble? A Mechanistic Investigationcited by 2
  8. 2025Q-MLLM: Vector Quantization for Robust Multimodal Large Language Model Securitycited by 2
  9. 2025ExtremeAIGC: Benchmarking LMM Vulnerability to AI-Generated Extremist Contentcited by 1
  10. 2025MDIT-Bench: Evaluating the Dual-Implicit Toxicity in Large Multimodal Modelscited by 1
  11. 2025VModA: An Effective Framework for Adaptive NSFW Image Moderationcited by 1
  12. 2026Old Tricks, New Models: How Simple Image Transformations Break Modern AI-based Content Moderationcited by 0
  13. 2026Guardrail-Agnostic Societal Bias Evaluation in Large Vision-Language Modelscited by 0
  14. 2026SPARK: Representation-Level KV Memory Alignment for Safer Vision-Language Modelscited by 0
  15. 2026ShieldCLIP: Selective Safety Alignment for Harmful Content Mitigation in Multimodal Foundation Modelscited by 0