SEA: Low-Resource Safety Alignment for Multimodal Large Language Models via Synthetic Embeddings
On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness
also in 2 more
Abstract (arXiv)
Multimodal Large Language Models (MLLMs) have serious security vulnerabilities.While safety alignment using multimodal datasets consisting of text and data of additional modalities can effectively enhance MLLM's security, it is costly to construct these datasets. Existing low-resource security alignment methods, including textual alignment, have been found to struggle with the security risks posed by additional modalities. To address this, we propose Synthetic Embedding augmented safety Alignment (SEA), which optimizes embeddings of additional modality through gradient updates to expand textual datasets. This enables multimodal safety alignment training even when only textual data is available. Extensive experiments on image, video, and audio-based MLLMs demonstrate that SEA can synthesize a high-quality embedding on a single RTX3090 GPU within 24 seconds. SEA significantly improves the security of MLLMs when faced with threats from additional modalities. To assess the security risks introduced by video and audio, we also introduced a new benchmark called VA-SafetyBench. High attack success rates across multiple MLLMs validate its challenge. Our code and data will be available at https://github.com/ZeroNLP/SEA.
Key facts. Cited by 9 papers in the map (data through 7 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 23 of its 39 references that are in the map. First posted on arXiv 18 Feb 2025.
Builds on
23 of 39 references.
Closest ancestors · 5
Same direction, newest first
- 2024VLSBench: Unveiling Visual Leakage in Multimodal Safety29 Nov
- 2024SPA-VL: A Comprehensive Safety Preference Alignment Dataset for Vision Language Model17 Jun
- 2024Cross-Modal Safety Alignment: Is textual unlearning all you need?27 May
- 2024JailBreakV: A Benchmark for Assessing the Robustness of MultiModal Large Language Models against Jailbreak Attacks3 Apr
- 2023FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts9 Nov
Other references · 18
- 2017Proximal Policy Optimization Algorithmscited by 14,441
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2020Measuring Massive Multitask Language Understandingcited by 7,768
- 2023Improved Baselines with Visual Instruction Tuningcited by 4,362
- 2024Qwen2-VL: Enhancing Vision-Language Model's Perception of the World at Any Resolutioncited by 4,151
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 2,914
- 2024CogVideoX: Text-to-Video Diffusion Models with An Expert Transformercited by 2,198
- 2024Video-MME: The First-Ever Comprehensive Evaluation Benchmark of Multi-modal LLMs in Video Analysiscited by 1,375
- 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,326
- 2023MVBench: A Comprehensive Multi-modal Video Understanding Benchmarkcited by 1,086
- 2024VideoLLaMA 2: Advancing Spatial-Temporal Modeling and Audio Understanding in Video-LLMscited by 749
- 2023Qwen-Audio: Advancing Universal Audio Understanding via Unified Large-Scale Audio-Language Modelscited by 591
6 more
- 2024Pyramidal Flow Matching for Efficient Video Generative Modelingcited by 354
- 2024PKU-SafeRLHF: Towards Multi-Level Safety Alignment for LLMs with Human Preferencecited by 252
- 2024AIR-Bench: Benchmarking Large Audio-Language Models via Generative Comprehensioncited by 215
- 2023DRESS: Instructing Large Vision-Language Models to Align and Interact with Humans via Natural Language Feedbackcited by 99
- 2024Align Anything: Training All-Modality Models to Follow Instructions with Language Feedbackcited by 38
- 2024Assessment of Multimodal Large Language Models in Alignment with Human Valuescited by 36
Built on by
Citing papers per year: 2025: 4; 2026: 5.
9 papers.
- 2025Omni-SafetyBench: A Benchmark for Safety Evaluation of Audio-Visual Large Language Modelscited by 13
- 2025Rethinking Jailbreak Detection of Large Vision Language Models with Representational Contrastive Scoringcited by 9
- 2025Harmonious Parameter Adaptation in Continual Visual Instruction Tuning for Safety-Aligned MLLMscited by 3
- 2025Empowering Multimodal LLMs with External Tools: A Comprehensive Surveycited by 2
- 2026Safety Geometry Collapse in Multimodal LLMs and Adaptive Drift Correctioncited by 1
- 2026StructBreak: Structural Cognitive Overload-Induced Safety Failures in MLLMscited by 0
- 2026Audio Jailbreaks in Large Audio-Language Models: Taxonomy, Attack-Defense Analysis, and Cost-Aware Evaluationcited by 0
- 2026V-DEAL: Diagnosing Video Safety De-Calibration as an Understanding-Refusal Coupling Failurecited by 0
- 2026Controllable Multi-label Video Safety Detection via Adaptive Tversky Policy Optimizationcited by 0
- 2026Controllable Multi-label Video Safety Detection via Adaptive Tversky Policy Optimization1 Oct 2026
- 2026V-DEAL: Diagnosing Video Safety De-Calibration as an Understanding-Refusal Coupling Failure23 Jul 2026
- 2026Audio Jailbreaks in Large Audio-Language Models: Taxonomy, Attack-Defense Analysis, and Cost-Aware Evaluation28 May 2026
- 2026StructBreak: Structural Cognitive Overload-Induced Safety Failures in MLLMs25 May 2026
- 2026Safety Geometry Collapse in Multimodal LLMs and Adaptive Drift Correction18 May 2026
- 2025Rethinking Jailbreak Detection of Large Vision Language Models with Representational Contrastive Scoring12 Dec 2025
- 2025Harmonious Parameter Adaptation in Continual Visual Instruction Tuning for Safety-Aligned MLLMs25 Nov 2025
- 2025Empowering Multimodal LLMs with External Tools: A Comprehensive Survey14 Aug 2025
- 2025Omni-SafetyBench: A Benchmark for Safety Evaluation of Audio-Visual Large Language Models10 Aug 2025
Similar, not cited
Close in wording, no citation either way
- 2025Do We Really Need Curated Malicious Data for Safety Alignment in Multi-modal Large Language Models?
- 2026SafeSteer: A Decoding-level Defense Mechanism for Multimodal Large Language Models
- 2025Reimagining Safety Alignment with An Image
- 2024Eyes Closed, Safety On: Protecting Multimodal LLMs via Image-to-Text Transformation
- 2025DREAM: Disentangling Risks to Enhance Safety Alignment in Multimodal Large Language Models
- 2024MLLM-Protector: Ensuring MLLM's Safety without Hurting Performance
- 2026GuardAlign: Test-time Safety Alignment in Multimodal Large Language Models
- 2026CASA: Classification Augmented with Safety Attention for Robust Multimodal Alignment