GuardAlign: Test-time Safety Alignment in Multimodal Large Language Models
On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness
also in 2 more
Abstract (arXiv)
Large vision-language models (LVLMs) have achieved remarkable progress in vision-language reasoning tasks, yet ensuring their safety remains a critical challenge. Recent input-side defenses detect unsafe images with CLIP and prepend safety prefixes to prompts, but they still suffer from inaccurate detection in complex scenes and unstable safety signals during decoding. To address these issues, we propose GuardAlign, a training-free defense framework that integrates two strategies. First, OT-enhanced safety detection leverages optimal transport to measure distribution distances between image patches and unsafe semantics, enabling accurate identification of malicious regions without additional computational cost. Second, cross-modal attentive calibration strengthens the influence of safety prefixes by adaptively reallocating attention across layers, ensuring that safety signals remain consistently activated throughout generation. Extensive evaluations on six representative MLLMs demonstrate that GuardAlign reduces unsafe response rates by up to 39% on SPA-VL, while preserving utility, achieving an improvement on VQAv2 from 78.51% to 79.21%.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 58 of its 64 references that are in the map. First posted on arXiv 27 Feb 2026.
Builds on
58 of 64 references.
Closest ancestors · 14
Same direction, newest first
- 2025AMIA: Automatic Masking and Joint Intention Analysis Makes LVLMs Robust Jailbreak Defenders30 May
- 2025Dynamic Token Reweighting for Robust Vision-Language Models22 May
- 2025VLMGuard-R1: Proactive Safety Alignment for VLMs via Reasoning-Driven Prompt Optimization17 Apr
- 2025Understanding and Rectifying Safety Perception Distortion in VLMs18 Feb
- 2024ETA: Evaluating Then Aligning Safety of Vision Language Models at Inference Time9 Oct
- 2024CoCA: Regaining Safety-awareness of Multimodal Large Language Models with Constitutional Calibration17 Sep
- 2024JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models26 Jun
- 2024SPA-VL: A Comprehensive Safety Preference Alignment Dataset for Vision Language Model17 Jun
- 2024Eyes Closed, Safety On: Protecting Multimodal LLMs via Image-to-Text Transformation14 Mar
- 2024AdaShield: Safeguarding Multimodal Large Language Models from Structure-based Attack via Adaptive Shield Prompting14 Mar
- 2024MLLM-Protector: Ensuring MLLM's Safety without Hurting Performance5 Jan
- 2023MM-SafetyBench: A Benchmark for Safety Evaluation of Multimodal Large Language Models29 Nov
2 more
Other references · 44
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2024The Llama 3 Herd of Modelscited by 14,192
- 2023Improved Baselines with Visual Instruction Tuningcited by 4,362
- 2022BLIP: Bootstrapping Language-Image Pre-training for Unified Vision-Language Understanding and Generationcited by 4,310
- 2017Deep reinforcement learning from human preferencescited by 3,846
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 2,914
- 2023MiniGPT-4: Enhancing Vision-Language Understanding with Advanced Large Language Modelscited by 2,689
- 2024LLaVA-OneVision: Easy Visual Task Transfercited by 2,669
- 2023InternVL: Scaling up Vision Foundation Models and Aligning for Generic Visual-Linguistic Taskscited by 2,534
- 2016Making the V in VQA Matter: Elevating the Role of Image Understanding in Visual Question Answeringcited by 2,498
- 2013Sinkhorn Distances: Lightspeed Computation of Optimal Transportation Distancescited by 2,277
- 2023MMBench: Is Your Multi-modal Model an All-around Player?cited by 2,105
32 more
- 2022Learn to Explain: Multimodal Reasoning via Thought Chains for Science Question Answeringcited by 1,881
- 2019Towards VQA Models That Can Readcited by 1,696
- 2023MME: A Comprehensive Evaluation Benchmark for Multimodal Large Language Modelscited by 1,624
- 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,330
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,124
- 2018Computational Optimal Transportcited by 765
- 2023Aligning Large Multimodal Models with Factually Augmented RLHFcited by 703
- 2023Mitigating Object Hallucinations in Large Vision-Language Models through Visual Contrastive Decodingcited by 671
- 2015Optimal Transport for Domain Adaptationcited by 457
- 2024Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attackscited by 450
- 2024MM-LLMs: Recent Advances in MultiModal Large Language Modelscited by 277
- 2024Enhancing the Reasoning Ability of Multimodal Large Language Models via Mixed Preference Optimizationcited by 238
- 2024SALAD-Bench: A Hierarchical and Comprehensive Safety Benchmark for Large Language Modelscited by 225
- 2023Self-Evaluation Guided Beam Search for Reasoningcited by 195
- 2024InternLM-XComposer-2.5: A Versatile Large Vision Language Model Supporting Long-Contextual Input and Outputcited by 195
- 2024Safety Fine-Tuning at (Almost) No Cost: A Baseline for Vision Large Language Modelscited by 160
- 2019Scalable Gromov-Wasserstein Learning for Graph Partitioning and Matchingcited by 102
- 2024Number it: Temporal Grounding Videos like Flipping Mangacited by 65
- 2020Iterative label cleaning for transductive and semi-supervised few-shot learningcited by 40
- 2024Cascade Reward Sampling for Efficient Decoding-Time Alignmentcited by 38
- 2024AWT: Transferring Vision-Language Models via Augmentation, Weighting, and Transportationcited by 27
- 2023Tuning Multi-mode Token-level Prompt Alignment across Modalitiescited by 26
- 2025Unsupervised Visual Chain-of-Thought Reasoning via Preference Optimizationcited by 22
- 2025AffordBot: 3D Fine-grained Embodied Reasoning via Multimodal Large Language Modelscited by 15
- 2022Adaptive Distribution Calibration for Few-Shot Learning with Hierarchical Optimal Transportcited by 14
- 2025Enhancing CLIP Robustness via Cross-Modality Alignmentcited by 14
- 2024Self-Evaluation as a Defense Against Adversarial Attacks on LLMscited by 13
- 2025Dynamic Multimodal Prototype Learning in Vision-Language Modelscited by 13
- 2025Benchmarking and Bridging Emotion Conflicts for Multimodal Emotion Reasoningcited by 12
- 2024Video Repurposing from User Generated Content: A Large-scale Dataset and Benchmarkcited by 9
- 2025Hierarchical Semantic Alignment for Image Clusteringcited by 5
- 2021Few-shot Partial Multi-view Learningcited by 3
Built on by
Citing papers per year: 2026: 1.
1 paper.
Similar, not cited
Close in wording, no citation either way
- 2025VisuoAlign: Safety Alignment of LVLMs with Multimodal Tree Search
- 2025VLM-Guard: Safeguarding Vision-Language Models via Fulfilling Safety Alignment Gap
- 2025DAVSP: Safety Alignment for Large Vision-Language Models via Deep Aligned Visual Safety Prompt
- 2026SafeRI: Recognition and Intervention for Token-Level Safety Intervention in Large Vision Language Models
- 2025MSR-Align: Policy-Grounded Multimodal Alignment for Safety-Aware Reasoning in Vision-Language Models
- 2025Think-Reflect-Revise: A Policy-Guided Reflective Framework for Safety Alignment in Large Vision Language Models
- 2025Reimagining Safety Alignment with An Image
- 2026Risk Awareness Injection: Calibrating Vision-Language Models for Safety without Compromising Utility