mlsanityData to 14 Oct 2026

Zero-Shot Defense Against Toxic Images via Inherent Multimodal Alignment in LVLMs

arXiv 2503.00037 ↗First posted 25 Feb 2025cs.CL cs.AI cs.CVcited by 6

On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness

Abstract (arXiv)

Large Vision-Language Models (LVLMs) have made significant strides in multimodal comprehension, thanks to extensive pre-training and fine-tuning on large-scale visual datasets. However, despite their robust textual safety mechanisms, they remain vulnerable to harmful visual inputs. Existing safeguards-typically relying on pre-filtering or fine-tuning-incur high costs and diminish overall utility. To address this critical vulnerability, we introduce SafeCLIP, a lightweight method that leverages LVLMs inherent multimodal alignment for zero-shot toxic image detection. By projecting CLIPs discarded CLS token into its text space and matching it with toxic descriptors, SafeCLIP detects harmful content without any architectural changes-adding minimal latency and enabling dynamic safety corrections during inference and fine-tuning.Experiments show that SafeCLIP achieves a 66.9% defense success rate with only 3.2% false positive rate and 7.2% overhead. In contrast, state-of-the-art methods achieve 52.9% success but have a 10.7% false positive rate and 210% overhead. Our work demonstrates that leveraging inherent multimodal alignment can yield efficient, low-cost LVLM safety. Code is available at anonymous.4open.science/r/safeclip-2C01.

Key facts. Cited by 6 papers in the map (data through 14 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 15 of its 24 references that are in the map. First posted on arXiv 25 Feb 2025.

Builds on

15 of 24 references.

Closest ancestors · 2

Same direction, newest first

  1. 2024Eyes Closed, Safety On: Protecting Multimodal LLMs via Image-to-Text Transformation14 Mar
  2. 2023How Robust is Google's Bard to Adversarial Image Attacks?21 Sep

Other references · 13

  1. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
  2. 2023GPT-4 Technical Reportcited by 18,396
  3. 2024The Llama 3 Herd of Modelscited by 14,715
  4. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
  5. 2023Qwen-VL: A Versatile Vision-Language Model for Understanding, Localization, Text Reading, and Beyondcited by 2,224
  6. 2022Learn to Explain: Multimodal Reasoning via Thought Chains for Science Question Answeringcited by 1,919
  7. 2023MM-Vet: Evaluating Large Multimodal Models for Integrated Capabilitiescited by 1,239
  8. 2025Janus-Pro: Unified Multimodal Understanding and Generation with Data and Model Scalingcited by 812
  9. 2024ScreenAI: A Vision-Language Model for UI and Infographics Understandingcited by 98
  10. 2024Defending Large Language Models Against Jailbreak Attacks via Layer-specific Editingcited by 79
  11. 2024Understanding the Impact of Negative Prompts: When and How Do They Take Effect?cited by 51
  12. 2023ToViLaG: Your Visual-Language Generative Model is Also An Evildoercited by 27
1 more
  1. 2023HOD: A Benchmark Dataset for Harmful Object Detectioncited by 10

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 5; 2026: 1.

6 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026ShieldCLIP: Selective Safety Alignment for Harmful Content Mitigation in Multimodal Foundation Models
  2. 2024VLSBench: Unveiling Visual Leakage in Multimodal Safety
  3. 2025MSR-Align: Policy-Grounded Multimodal Alignment for Safety-Aware Reasoning in Vision-Language Models
  4. 2026SafeCap: Improving LVLM Safety with Image Captioning Reinforcement Learning
  5. 2026GuardAlign: Test-time Safety Alignment in Multimodal Large Language Models
  6. 2025ELITE: Enhanced Language-Image Toxicity Evaluation for Safety
  7. 2025Security Tensors as a Cross-Modal Bridge: Extending Text-Aligned Safety to Vision in LVLM
  8. 2025ShieldVLM: Safeguarding the Multimodal Implicit Toxicity via Deliberative Reasoning with LVLMs