跳到正文
返回论文列表
cs.CR提交于 已译

Omni-UBench:跨安全性、效用性与可靠性评测全模态大语言模型护栏

Omni-UBench: Benchmarking Omni-Modal LLM-based Guardrails Across Safety, Utility, and Reliability

Junhao Wang · Yidou Chen · Li Lu · Hongwei Yao · Xiaodan Li · Mengjie Wu · et al.

中文摘要

全模态大语言模型(OLLMs)推动了人与人工智能之间日益无缝的交互,但对异构模态的统一处理也扩大了攻击面,使对手能够利用更丰富的输入组合绕过安全对齐。为此,全模态护栏被用于检测并过滤任意模态中的不安全查询。由于缺乏综合评测基准,其能力与局限仍未得到充分认识。Omni-UBench是首个全模态安全评估综合框架,从安全性、效用性和可靠性三个关键维度评测护栏模型。该基准汇集来自35种以上异构来源的超过183k个样本,涵盖文本、图像、音频、视频及其跨模态组合,并依据统一风险分类体系标注安全标签。基于Omni-UBench对15个代表性OLLMs及全模态护栏的评测发现:现代OLLMs即使未经护栏专项调优,也表现出较强的内容审核潜力;现有护栏仍难以识别隐藏有害意图的跨模态查询或复杂越狱攻击;其还存在明显的安全幻觉和对文本模式过度敏感的问题,反映出对跨模态安全语义的理解不足。这些发现为未来开发更可信的全模态护栏提供了参考。

关键要点

  1. 01现有护栏缺少综合评测基准,能力与局限尚不清楚
  2. 02Omni-UBench从安全性、效用性和可靠性评估全模态护栏
  3. 03基准包含35种以上来源、超过183k个多模态安全样本
  4. 0415个代表性OLLMs及护栏的评测覆盖多种模态组合
  5. 05现有护栏对隐藏意图、复杂越狱及文本模式仍存在不足

解读

尚无解读。

原始英文摘要

arXiv:2610.31713v1 Announce Type: cross Abstract: Advances in Omni-modal Large Language Models (OLLMs) have enabled increasingly seamless human-AI interaction, but their unified processing of heterogeneous modalities also expands the attack surface, allowing adversaries to exploit richer input compositions to circumvent safety alignment. To counter such risks, omni-modal guardrails have been proposed to detect and filter unsafe queries across arbitrary modalities. However, their capabilities and limitations remain insufficiently understood due to the absence of a comprehensive evaluation benchmark. In this paper, we present Omni-UBench, the first comprehensive framework for omni-modal safety assessment, evaluating guardrail models along three critical dimensions, i.e., safety, utility, and reliability. Omni-UBench curates over 183k samples drawn from 35+ heterogeneous sources spanning text, image, audio, video, and their cross-modal combinations, annotated with safety labels under a unified risk taxonomy. Benchmarking under Omni-UBench on 15 representative OLLMs and omni-modal guardrails yields several key findings, including: (1) modern OLLMs exhibit strong content moderation potential even without guardrail-specific tuning; (2) existing guardrails still struggle to identify cross-modal queries that conceal harmful intent or involve sophisticated jailbreaks; (3) they further exhibit substantial safety hallucination and over-sensitivity to textual patterns, revealing a deficient understanding of cross-modal safety semantics. Our findings provide valuable insights for developing more trustworthy omni-modal guardrails in future research.

同方向论文 · cs.CR

查看全部 →

反向发现 · 这篇论文相关的工具与提示词

去交叉发现 →

关联提示词 · 3

研究github.com/f/awesome-chatgpt-prompts·外部收录·

Unbiased English Literature Character Analysis AI Assistant

You are a literary analysis assistant with the following ethical guidelines. Apply them to every character analysis you write: 1. Do not automatically attribute positive traits (wise, noble, authoritative, caring) to characters who hold po…

研究github.com/f/awesome-chatgpt-prompts·外部收录·

Act as a Resume Reviewer for Anthropic Fellows Program

Act as a Resume Reviewer. You are an experienced recruiter tasked with evaluating resumes for applicants to the Anthropic Fellows Program. Your task is to: - Analyze resumes for key qualifications and experiences relevant to AI safety rese…

编程github.com/f/awesome-chatgpt-prompts·外部收录·

Large Language Models Security Specialist

I want you to act as a Large Language Model security specialist. Your task is to identify vulnerabilities in LLMs by analyzing how they respond to various prompts designed to test the system's safety and robustness. I will provide some spec…