Multi-PA: A Multi-perspective Benchmark on Privacy Assessment for Large Vision-Language Models
On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness
Abstract (arXiv)
Large Vision-Language Models (LVLMs) exhibit impressive potential across various tasks but also face significant privacy risks, limiting their practical applications. Current researches on privacy assessment for LVLMs is limited in scope, with gaps in both assessment dimensions and privacy categories. To bridge this gap, we propose Multi-PA, a comprehensive benchmark for evaluating the privacy preservation capabilities of LVLMs in terms of privacy awareness and leakage. Privacy awareness measures the model's ability to recognize the privacy sensitivity of input data, while privacy leakage assesses the risk of the model unintentionally disclosing privacy information in its output. We design a range of sub-tasks to thoroughly evaluate the model's privacy protection offered by LVLMs. Multi-PA covers 26 categories of personal privacy, 15 categories of trade secrets, and 18 categories of state secrets, totaling 31,962 samples. Based on Multi-PA, we evaluate the privacy preservation capabilities of 21 open-source and 2 closed-source LVLMs. Our results reveal that current LVLMs generally pose a high risk of facilitating privacy breaches, with vulnerabilities varying across personal privacy, trade secret, and state secret.
Key facts. Cited by 3 papers in the map (data through 14 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 45 of its 68 references that are in the map. First posted on arXiv 27 Dec 2024.
Builds on
45 of 68 references.
Closest ancestors · 2
Same direction, newest first
- 2024MLLMGuard: A Multi-dimensional Safety Evaluation Suite for Multimodal Large Language Models11 Jun
- 2024Private Attribute Inference from Images with Vision-Language Models16 Apr
Other references · 43
- 2023GPT-4 Technical Reportcited by 18,396
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
- 2023Visual Instruction Tuningcited by 7,869
- 2023BLIP-2: Bootstrapping Language-Image Pre-training with Frozen Image Encoders and Large Language Modelscited by 6,137
- 2024Gemini 1.5: Unlocking multimodal understanding across millions of tokens of contextcited by 3,224
- 2023Mistral 7Bcited by 3,164
- 2023InstructBLIP: Towards General-purpose Vision-Language Models with Instruction Tuningcited by 2,876
- 2016Deep Learning with Differential Privacycited by 2,728
- 2023MiniGPT-4: Enhancing Vision-Language Understanding with Advanced Large Language Modelscited by 2,711
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
- 2023Qwen-VL: A Versatile Vision-Language Model for Understanding, Localization, Text Reading, and Beyondcited by 2,224
- 2020Extracting Training Data from Large Language Modelscited by 2,189
31 more
- 2024Phi-3 Technical Report: A Highly Capable Language Model Locally on Your Phonecited by 1,917
- 2023PaLM 2 Technical Reportcited by 1,162
- 2024ChatGLM: A Family of Large Language Models from GLM-130B to GLM-4 All Toolscited by 1,121
- 2024MiniCPM-V: A GPT-4V Level MLLM on Your Phonecited by 1,079
- 2021A General Language Assistant as a Laboratory for Alignmentcited by 1,055
- 2023A Survey on Multimodal Large Language Modelscited by 909
- 2023Shikra: Unleashing Multimodal LLM's Referential Dialogue Magiccited by 906
- 2018The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networkscited by 864
- 2022Quantifying Memorization Across Neural Language Modelscited by 763
- 2024Yi: Open Foundation Models by 01.AIcited by 719
- 2023CogVLM: Visual Expert for Pretrained Language Modelscited by 708
- 2023MiniGPT-v2: large language model as a unified interface for vision-language multi-task learningcited by 625
- 2023Otter: A Multi-Modal Model with In-Context Instruction Tuningcited by 550
- 2023mPLUG-Owl2: Revolutionizing Multi-modal Large Language Model with Modality Collaborationcited by 547
- 2023Scalable Extraction of Training Data from (Production) Language Modelscited by 434
- 2023InternLM-XComposer: A Vision-Language Large Model for Advanced Text-image Comprehension and Compositioncited by 297
- 2024TrustLLM: Trustworthiness in Large Language Modelscited by 285
- 2023Membership Inference Attacks against Language Models via Neighbourhood Comparisoncited by 258
- 2023The Unlocking Spell on Base LLMs: Rethinking Alignment via In-Context Learningcited by 257
- 2023Can LLMs Keep a Secret? Testing Privacy Implications of Language Models via Contextual Integrity Theorycited by 230
- 2023Beyond Memorization: Violating Privacy Via Inference with Large Language Modelscited by 175
- 2023The Capacity for Moral Self-Correction in Large Language Modelscited by 173
- 2023Defending Large Language Models Against Jailbreaking Attacks Through Goal Prioritizationcited by 170
- 2017Towards a Visual Privacy Advisor: Understanding and Predicting Privacy Risks in Imagescited by 101
- 2024Keeping LLMs Aligned After Fine-tuning: The Crucial Role of Prompt Templatescited by 96
- 2021Federated Learning: Opportunities and Challengescited by 84
- 2023Bag of Tricks for Training Data Extraction from Language Modelscited by 70
- 2024LLM-PBE: Assessing Data Privacy in Large Language Modelscited by 41
- 2023PrivLM-Bench: A Multi-level Privacy Evaluation Benchmark for Language Modelscited by 37
- 2024Assessment of Multimodal Large Language Models in Alignment with Human Valuescited by 36
- 2023Integration of Large Language Models and Federated Learningcited by 31
Built on by
Citing papers per year: 2025: 1; 2026: 2.
3 papers.
- 2025MultiPriv: Benchmarking Individual-Level Privacy Reasoning in Vision-Language Modelscited by 5
- 2026PII-VisBench: Evaluating Personally Identifiable Information Safety in Vision Language Models Along a Continuum of Visibilitycited by 3
- 2026Which private attributes do VLMs agree on and predict well?cited by 0
- 2026Which private attributes do VLMs agree on and predict well?8 Feb 2026
- 2026PII-VisBench: Evaluating Personally Identifiable Information Safety in Vision Language Models Along a Continuum of Visibility9 Jan 2026
- 2025MultiPriv: Benchmarking Individual-Level Privacy Reasoning in Vision-Language Models21 Nov 2025
Similar, not cited
Close in wording, no citation either way
- 2026Unveiling Privacy Risks in Multi-modal Large Language Models: Task-specific Vulnerabilities and Mitigation Challenges
- 2025Assessing Visual Privacy Risks in Multimodal AI: A Novel Taxonomy-Grounded Evaluation of Vision-Language Models
- 2025Defeating Cerberus: Concept-Guided Privacy-Leakage Mitigation in Multimodal Language Models
- 2024The Phantom Menace: Unmasking Privacy Leakages in Vision-Language Models
- 2026When Visual Privacy Protection Meets Multimodal Large Language Models
- 2025On the Robustness of Vision-Language Models in Zero-shot Privacy Classification
- 2025A Survey on Privacy Risks and Protection in Large Language Models
- 2024Privacy-Aware Visual Language Models