mlsanityData to 14 Oct 2026

PRJ: Perception-Retrieval-Judgement for Generated Images

arXiv 2506.03683 ↗First posted 4 Jun 2025cs.CVcited by 2

Not on the map. Why?

Abstract (arXiv)

The rapid progress of generative AI has enabled remarkable creative capabilities, yet it also raises urgent concerns regarding the safety of AI-generated visual content in real-world applications such as content moderation, platform governance, and digital media regulation. This includes unsafe material such as sexually explicit images, violent scenes, hate symbols, propaganda, and unauthorized imitations of copyrighted artworks. Existing image safety systems often rely on rigid category filters and produce binary outputs, lacking the capacity to interpret context or reason about nuanced, adversarially induced forms of harm. In addition, standard evaluation metrics (e.g., attack success rate) fail to capture the semantic severity and dynamic progression of toxicity. To address these limitations, we propose Perception-Retrieval-Judgement (PRJ), a cognitively inspired framework that models toxicity detection as a structured reasoning process. PRJ follows a three-stage design: it first transforms an image into descriptive language (perception), then retrieves external knowledge related to harm categories and traits (retrieval), and finally evaluates toxicity based on legal or normative rules (judgement). This language-centric structure enables the system to detect both explicit and implicit harms with improved interpretability and categorical granularity. In addition, we introduce a dynamic scoring mechanism based on a contextual toxicity risk matrix to quantify harmfulness across different semantic dimensions. Experiments show that PRJ surpasses existing safety checkers in detection accuracy and robustness while uniquely supporting structured category-level toxicity interpretation.

Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Builds on 30 of its 40 references that are in the map. First posted on arXiv 4 Jun 2025.

Builds on

30 of 40 references.

References · 30

  1. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
  2. 2023GPT-4 Technical Reportcited by 18,396
  3. 2024The Llama 3 Herd of Modelscited by 14,715
  4. 2023Visual Instruction Tuningcited by 7,869
  5. 2023Improved Baselines with Visual Instruction Tuningcited by 4,418
  6. 2023SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesiscited by 4,356
  7. 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Modelscited by 513
  8. 2019Adversarial Examples Improve Image Recognitioncited by 286
  9. 2024PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Modelscited by 267
  10. 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Nowcited by 210
  11. 2023MMA-Diffusion: MultiModal Attack on Diffusion Modelscited by 194
  12. 2023SneakyPrompt: Jailbreaking Text-to-image Generative Modelscited by 189
18 more
  1. 2022Can Machines Help Us Answering Question 16 in Datasheets, and In Turn Reflecting on Inappropriate Content?cited by 155
  2. 2024Jailbreak Vision Language Models via Bi-Modal Adversarial Promptcited by 109
  3. 2024A Survey on Retrieval-Augmented Text Generation for Large Language Modelscited by 77
  4. 2023A Pilot Study of Query-Free Adversarial Attack against Stable Diffusioncited by 76
  5. 2024SafeBench: A Safety Evaluation Framework for Multimodal Large Language Modelscited by 69
  6. 2025Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Modelscited by 64
  7. 2019Training Robust Deep Neural Networks via Adversarial Noise Propagationcited by 62
  8. 2025Manipulating Multimodal Agents via Cross-Modal Prompt Injectioncited by 44
  9. 2021A Comprehensive Evaluation Framework for Deep Model Robustnesscited by 42
  10. 2021Harnessing Perceptual Adversarial Patches for Crowd Countingcited by 39
  11. 2023Pre-trained Trojan Attacks for Visual Recognitioncited by 39
  12. 2024Unveiling the Safety of GPT-4o: An Empirical Study using Jailbreak Attackscited by 38
  13. 2023SurrogatePrompt: Bypassing the Safety Filter of Text-to-Image Models via Substitutioncited by 34
  14. 2025Towards Understanding the Safety Boundaries of DeepSeek Models: Evaluation and Findingscited by 27
  15. 2023Unlocking the Emotional World of Visual Media: An Overview of the Science, Research, and Impact of Understanding Emotioncited by 12
  16. 2025CogMorph: Cognitive Morphing Attacks for Text-to-Image Modelscited by 12
  17. 2024DLP: towards active defense against backdoor attacks with decoupled learning processcited by 10
  18. 2024NBA: defensive distillation for backdoor removal via neural behavior alignmentcited by 7

Built on by

Cited by year

Citing papers per year: 2025: 2.

2 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025Bridging the Gap in Vision Language Models in Identifying Unsafe Concepts Across Modalities
  2. 2024Image Safeguarding: Reasoning with Conditional Vision Language Model and Obfuscating Unsafe Content Counterfactually
  3. 2026Harmful Content Generation in Text-to-Image Models: Capabilities and Moderation Limitations
  4. 2024Harm Amplification in Text-to-Image Models
  5. 2026Safe Alone, Unsafe Together: Safeguarding Against Implicit Toxicity When Benign Images Combine
  6. 2024MLLM-as-a-Judge for Image Safety without Human Labeling
  7. 2025SafeGen: Embedding Ethical Safeguards in Text-to-Image Generation
  8. 2024UnsafeBench: Benchmarking Image Safety Classifiers on Real-World and AI-Generated Images