Zero-Shot Defense Against Toxic Images via Inherent Multimodal Alignment in LVLMs
On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness
Abstract (arXiv)
Large Vision-Language Models (LVLMs) have made significant strides in multimodal comprehension, thanks to extensive pre-training and fine-tuning on large-scale visual datasets. However, despite their robust textual safety mechanisms, they remain vulnerable to harmful visual inputs. Existing safeguards-typically relying on pre-filtering or fine-tuning-incur high costs and diminish overall utility. To address this critical vulnerability, we introduce SafeCLIP, a lightweight method that leverages LVLMs inherent multimodal alignment for zero-shot toxic image detection. By projecting CLIPs discarded CLS token into its text space and matching it with toxic descriptors, SafeCLIP detects harmful content without any architectural changes-adding minimal latency and enabling dynamic safety corrections during inference and fine-tuning.Experiments show that SafeCLIP achieves a 66.9% defense success rate with only 3.2% false positive rate and 7.2% overhead. In contrast, state-of-the-art methods achieve 52.9% success but have a 10.7% false positive rate and 210% overhead. Our work demonstrates that leveraging inherent multimodal alignment can yield efficient, low-cost LVLM safety. Code is available at anonymous.4open.science/r/safeclip-2C01.
Key facts. Cited by 6 papers in the map (data through 14 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 15 of its 24 references that are in the map. First posted on arXiv 25 Feb 2025.
Builds on
15 of 24 references.
Closest ancestors · 2
Same direction, newest first
- 2024Eyes Closed, Safety On: Protecting Multimodal LLMs via Image-to-Text Transformation14 Mar
- 2023How Robust is Google's Bard to Adversarial Image Attacks?21 Sep
Other references · 13
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2023GPT-4 Technical Reportcited by 18,396
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
- 2023Qwen-VL: A Versatile Vision-Language Model for Understanding, Localization, Text Reading, and Beyondcited by 2,224
- 2022Learn to Explain: Multimodal Reasoning via Thought Chains for Science Question Answeringcited by 1,919
- 2023MM-Vet: Evaluating Large Multimodal Models for Integrated Capabilitiescited by 1,239
- 2025Janus-Pro: Unified Multimodal Understanding and Generation with Data and Model Scalingcited by 812
- 2024ScreenAI: A Vision-Language Model for UI and Infographics Understandingcited by 98
- 2024Defending Large Language Models Against Jailbreak Attacks via Layer-specific Editingcited by 79
- 2024Understanding the Impact of Negative Prompts: When and How Do They Take Effect?cited by 51
- 2023ToViLaG: Your Visual-Language Generative Model is Also An Evildoercited by 27
1 more
- 2023HOD: A Benchmark Dataset for Harmful Object Detectioncited by 10
Built on by
Citing papers per year: 2025: 5; 2026: 1.
6 papers.
- 2025SafeR-CLIP: Mitigating NSFW Content in Vision-Language Models While Preserving Pre-Trained Knowledgecited by 3
- 2025Q-MLLM: Vector Quantization for Robust Multimodal Large Language Model Securitycited by 2
- 2025Understanding and Mitigating Toxicity in Image-Text Pretraining Datasets: A Case Study on LLaVAcited by 1
- 2025CompAgent: An Agentic Framework for Visual Compliance Verificationcited by 1
- 2025SGM: Safety Glasses for Multimodal Large Language Models via Neuron-Level Detoxificationcited by 1
- 2026Visual Compliance via Executable Safety Rule Entailmentcited by 0
- 2026Visual Compliance via Executable Safety Rule Entailment16 Sep 2026
- 2025SGM: Safety Glasses for Multimodal Large Language Models via Neuron-Level Detoxification17 Dec 2025
- 2025SafeR-CLIP: Mitigating NSFW Content in Vision-Language Models While Preserving Pre-Trained Knowledge20 Nov 2025
- 2025Q-MLLM: Vector Quantization for Robust Multimodal Large Language Model Security20 Nov 2025
- 2025CompAgent: An Agentic Framework for Visual Compliance Verification31 Oct 2025
- 2025Understanding and Mitigating Toxicity in Image-Text Pretraining Datasets: A Case Study on LLaVA9 May 2025
Similar, not cited
Close in wording, no citation either way
- 2026ShieldCLIP: Selective Safety Alignment for Harmful Content Mitigation in Multimodal Foundation Models
- 2024VLSBench: Unveiling Visual Leakage in Multimodal Safety
- 2025MSR-Align: Policy-Grounded Multimodal Alignment for Safety-Aware Reasoning in Vision-Language Models
- 2026SafeCap: Improving LVLM Safety with Image Captioning Reinforcement Learning
- 2026GuardAlign: Test-time Safety Alignment in Multimodal Large Language Models
- 2025ELITE: Enhanced Language-Image Toxicity Evaluation for Safety
- 2025Security Tensors as a Cross-Modal Bridge: Extending Text-Aligned Safety to Vision in LVLM
- 2025ShieldVLM: Safeguarding the Multimodal Implicit Toxicity via Deliberative Reasoning with LVLMs