ELITE: Enhanced Language-Image Toxicity Evaluation for Safety
On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness
also in 1 more
Abstract (arXiv)
Current Vision Language Models (VLMs) remain vulnerable to malicious prompts that induce harmful outputs. Existing safety benchmarks for VLMs primarily rely on automated evaluation methods, but these methods struggle to detect implicit harmful content or produce inaccurate evaluations. Therefore, we found that existing benchmarks have low levels of harmfulness, ambiguous data, and limited diversity in image-text pair combinations. To address these issues, we propose the ELITE benchmark, a high-quality safety evaluation benchmark for VLMs, underpinned by our enhanced evaluation method, the ELITE evaluator. The ELITE evaluator explicitly incorporates a toxicity score to accurately assess harmfulness in multimodal contexts, where VLMs often provide specific, convincing, but unharmful descriptions of images. We filter out ambiguous and low-quality image-text pairs from existing benchmarks using the ELITE evaluator and generate diverse combinations of safe and unsafe image-text pairs. Our experiments demonstrate that the ELITE evaluator achieves superior alignment with human evaluations compared to prior automated methods, and the ELITE benchmark offers enhanced benchmark quality and diversity. By introducing ELITE, we pave the way for safer, more robust VLMs, contributing essential tools for evaluating and mitigating safety risks in real-world applications.
Key facts. Cited by 5 papers in the map (data through 7 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 20 of its 27 references that are in the map. First posted on arXiv 7 Feb 2025.
Builds on
20 of 27 references.
Closest ancestors · 5
Same direction, newest first
- 2024MLLMGuard: A Multi-dimensional Safety Evaluation Suite for Multimodal Large Language Models11 Jun
- 2024JailBreakV: A Benchmark for Assessing the Robustness of MultiModal Large Language Models against Jailbreak Attacks3 Apr
- 2024Red Teaming Visual Language Models23 Jan
- 2023MM-SafetyBench: A Benchmark for Safety Evaluation of Multimodal Large Language Models29 Nov
- 2023FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts9 Nov
Other references · 15
- 2024The Llama 3 Herd of Modelscited by 14,192
- 2023Improved Baselines with Visual Instruction Tuningcited by 4,362
- 2024Qwen2-VL: Enhancing Vision-Language Model's Perception of the World at Any Resolutioncited by 4,151
- 2014Deep Learning Face Attributes in the Wildcited by 3,679
- 2024Gemini 1.5: Unlocking multimodal understanding across millions of tokens of contextcited by 3,175
- 2024Phi-3 Technical Report: A Highly Capable Language Model Locally on Your Phonecited by 1,883
- 2024Expanding Performance Boundaries of Open-Source Multimodal Models with Model, Data, and Test-Time Scalingcited by 1,573
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,124
- 2023ShareGPT4V: Improving Large Multi-Modal Models with Better Captionscited by 1,000
- 2023DecodingTrust: A Comprehensive Assessment of Trustworthiness in GPT Modelscited by 505
- 2024A StrongREJECT for Empty Jailbreakscited by 352
- 2022A Holistic Approach to Undesired Content Detection in the Real Worldcited by 337
3 more
Built on by
Citing papers per year: 2025: 3; 2026: 2.
5 papers.
- 2025Jailbreaking on Text-to-Video Models via Scene Splitting Strategycited by 10
- 2025VLSU: Mapping the Limits of Joint Multimodal Understanding for AI Safetycited by 7
- 2025Seeing the Threat: Vulnerabilities in Vision-Language Models to Adversarial Attackcited by 5
- 2026The Side Effects of Being Smart: Safety Risks in MLLMs' Multi-Image Reasoningcited by 2
- 2026COMPASS: A Framework for Evaluating Organization-Specific Policy Alignment in LLMscited by 1
- 2026The Side Effects of Being Smart: Safety Risks in MLLMs' Multi-Image Reasoning20 Jan 2026
- 2026COMPASS: A Framework for Evaluating Organization-Specific Policy Alignment in LLMs5 Jan 2026
- 2025VLSU: Mapping the Limits of Joint Multimodal Understanding for AI Safety21 Oct 2025
- 2025Jailbreaking on Text-to-Video Models via Scene Splitting Strategy26 Sep 2025
- 2025Seeing the Threat: Vulnerabilities in Vision-Language Models to Adversarial Attack28 May 2025
Similar, not cited
Close in wording, no citation either way
- 2025HoliSafe: Holistic Safety Benchmarking and Modeling for Vision-Language Model
- 2026Lingua-SafetyBench: A Benchmark for Safety Evaluation of Multilingual Vision-Language Models
- 2025MSTS: A Multimodal Safety Test Suite for Vision-Language Models
- 2026EviSafe: Evidence-Grounded Safety Evaluation for Vision-Language Models
- 2025Safe Vision-Language Models via Unsafe Weights Manipulation
- 2025Bridging the Gap in Vision Language Models in Identifying Unsafe Concepts Across Modalities
- 2025Zero-Shot Defense Against Toxic Images via Inherent Multimodal Alignment in LVLMs
- 2026A Safety Report on GPT-5.2, Gemini 3 Pro, Qwen3-VL, Grok 4.1 Fast, Nano Banana Pro, and Seedream 4.5