Are Neuro-Inspired Multi-Modal Vision-Language Models Resilient to Membership Inference Privacy Leakage?
On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness
also in 2 more
Abstract (arXiv)
In the age of agentic AI, the growing deployment of multi-modal models (MMs) has introduced new attack vectors that can leak sensitive training data in MMs, causing privacy leakage. This paper investigates a black-box privacy attack, i.e., membership inference attack (MIA) on multi-modal vision-language models (VLMs). State-of-the-art research analyzes privacy attacks primarily to unimodal AI-ML systems, while recent studies indicate MMs can also be vulnerable to privacy attacks. While researchers have demonstrated that biologically inspired neural network representations can improve unimodal model resilience against adversarial attacks, it remains unexplored whether neuro-inspired MMs are resilient against privacy attacks. In this work, we introduce a systematic neuroscience-inspired topological regularization (tau) framework to analyze MM VLMs resilience against image-text-based inference privacy attacks. We examine this phenomenon using three VLMs: BLIP, PaliGemma 2, and ViT-GPT2, across three benchmark datasets: COCO, CC3M, and NoCaps. Our experiments compare the resilience of baseline and neuro VLMs (with topological regularization), where the tau > 0 configuration defines the NEURO variant of VLM. Our results on the BLIP model using the COCO dataset illustrate that MIA attack success in NEURO VLMs drops by 24% mean ROC-AUC, while achieving similar model utility (similarities between generated and reference captions) in terms of MPNet and ROUGE-2 metrics. This shows neuro VLMs are comparatively more resilient against privacy attacks, while not significantly compromising model utility. Our extensive evaluation with PaliGemma 2 and ViT-GPT2 models, on two additional datasets: CC3M and NoCaps, further validates the consistency of the findings. This work contributes to the growing understanding of privacy risks in MMs and provides evidence on neuro VLMs privacy threat resilience.
Key facts. Cited by 2 papers in the map (data through 7 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 78 of its 122 references that are in the map. First posted on arXiv 24 Nov 2025.
Builds on
78 of 122 references.
Closest ancestors · 9
Same direction, newest first
- 2025Seeing the Threat: Vulnerabilities in Vision-Language Models to Adversarial Attack28 May
- 2025A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluations14 Feb
- 2025Membership Inference Attacks Against Vision-Language Models27 Jan
- 2024Membership Inference Attacks against Large Vision-Language Models5 Nov
- 2024A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends10 Jul
- 2024Unveiling Typographic Deceptions: Insights of the Typographic Vulnerability in Large Vision-Language Model29 Feb
- 2024VL-Trojan: Multimodal Instruction Backdoor Attacks against Autoregressive Visual Language Models21 Feb
- 2024Shadowcast: Stealthy Data Poisoning Attacks Against Vision-Language Models5 Feb
- 2023On Evaluating Adversarial Robustness of Large Vision-Language Models26 May
Other references · 69
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
- 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,049
- 2022BLIP: Bootstrapping Language-Image Pre-training for Unified Vision-Language Understanding and Generationcited by 4,310
- 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,131
- 2023InstructBLIP: Towards General-purpose Vision-Language Models with Instruction Tuningcited by 2,855
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
- 2023A Survey on Evaluation of Large Language Modelscited by 1,227
- 2020Oscar: Object-Semantics Aligned Pre-training for Vision-Language Taskscited by 1,213
- 2020MPNet: Masked and Permuted Pre-training for Language Understandingcited by 973
- 2021Membership Inference Attacks From First Principlescited by 839
- 2023Vision-Language Models for Vision Tasks: A Surveycited by 834
38 more
- 2023Extracting Training Data from Diffusion Modelscited by 723
- 2024PaliGemma: A versatile 3B VLM for transfercited by 679
- 2016Stealing Machine Learning Models via Prediction APIscited by 602
- 2018ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Modelscited by 475
- 2018nocaps: novel object captioning at scalecited by 444
- 2020Label-Only Membership Inference Attackscited by 371
- 2024What matters when building vision-language models?cited by 321
- 2021Membership Inference Attacks on Machine Learning: A Surveycited by 306
- 2023A Survey on Multimodal Large Language Models for Autonomous Drivingcited by 288
- 2021WIT: Wikipedia-based Image Text Dataset for Multimodal Multilingual Machine Learningcited by 285
- 2019White-box vs Black-box: Bayes Optimal Strategies for Membership Inferencecited by 265
- 2016Image Captioning with Semantic Attentioncited by 260
- 2024Security and Privacy Challenges of Large Language Models: A Surveycited by 179
- 2024An Introduction to Vision-Language Modelingcited by 175
- 2019Stolen Memories: Leveraging Model Memorization for Calibrated White-Box Membership Inferencecited by 168
- 2017Machine Learning Models that Remember Too Muchcited by 165
- 2021On the Importance of Difficulty Calibration in Membership Inference Attackscited by 137
- 2022Membership Inference Attacks by Exploiting Loss Trajectorycited by 93
- 2023Vision-Language Models in Remote Sensing: Current Progress and Future Trendscited by 93
- 2021Membership Inference Attack on Graph Neural Networkscited by 81
- 2021Node-Level Membership Inference Attacks Against Graph Neural Networkscited by 80
- 2021ML-Doctor: Holistic Risk Assessment of Inference Attacks Against Machine Learning Modelscited by 79
- 2024Mission Critical -- Satellite Data is a Distinct Modality in Machine Learningcited by 76
- 2018Copycat CNN: Stealing Knowledge by Persuading Confession with Random Non-Labeled Datacited by 69
- 2022Membership Inference Attacks Against Text-to-image Generation Modelscited by 66
- 2024Exploring the Frontier of Vision-Language Models: A Survey of Current Methodologies and Future Directionscited by 66
- 2022Avoiding Overfitting: A Survey on Regularization Methods for Convolutional Neural Networkscited by 55
- 2024VHELM: A Holistic Evaluation of Vision Language Modelscited by 53
- 2021Membership Inference Attacks Against Recommender Systemscited by 52
- 2021Adapting Membership Inference Attacks to GNN for Graph Classification: Approaches and Implicationscited by 50
- 2024Multimodal Healthcare AI: Identifying and Designing Clinically Relevant Vision-Language Applications for Radiologycited by 45
- 2021Survey: Leakage and Privacy at Inference Timecited by 44
- 2023White-box Membership Inference Attacks against Diffusion Modelscited by 42
- 2018Towards Demystifying Membership Inference Attackscited by 39
- 2024Membership Inference Attacks Against In-Context Learningcited by 38
- 2023Practical Membership Inference Attacks Against Large-Scale Multi-Modal Models: A Pilot Studycited by 37
- 2020Practical No-box Adversarial Attacks against DNNscited by 32
- 2022M^4I: Multi-modal Models Membership Inferencecited by 30
50 most cited of 69 All 69 (JSON)
Built on by
Citing papers per year: 2026: 2.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2026VLALeaks: Membership Inference Attacks against Vision-Language-Action Models
- 2026Neural Gate: Mitigating Privacy Risks in LVLMs via Neuron-Level Gradient Gating
- 2025Membership Inference Attacks on Large-Scale Models: A Survey
- 2025OpenLVLM-MIA: A Controlled Benchmark Revealing the Limits of Membership Inference Attacks on Large Vision-Language Models
- 2025Assessing Visual Privacy Risks in Multimodal AI: A Novel Taxonomy-Grounded Evaluation of Vision-Language Models
- 2026Directional Embedding Smoothing for Robust Vision Language Models
- 2025VIP: Visual Information Protection through Adversarial Attacks on Vision-Language Models
- 2024Seeing is Deceiving: Exploitation of Visual Pathways in Multi-Modal Language Models