CoCA: Regaining Safety-awareness of Multimodal Large Language Models with Constitutional Calibration

Fuente: arXiv
Salvato in:
Dettagli Bibliografici
Autori principali: Gao, Jiahui, Pi, Renjie, Han, Tianyang, Wu, Han, Hong, Lanqing, Kong, Lingpeng, Jiang, Xin, Li, Zhenguo
Natura: Preprint
Pubblicazione: 2024
Soggetti:
Accesso online:
Tags: Aggiungi Tag
Nessun Tag, puoi essere il primo ad aggiungerne!!
_version_ 1866914967773511680
author Gao, Jiahui
Pi, Renjie
Han, Tianyang
Wu, Han
Hong, Lanqing
Kong, Lingpeng
Jiang, Xin
Li, Zhenguo
author_facet Gao, Jiahui
Pi, Renjie
Han, Tianyang
Wu, Han
Hong, Lanqing
Kong, Lingpeng
Jiang, Xin
Li, Zhenguo
contents The deployment of multimodal large language models (MLLMs) has demonstrated remarkable success in engaging in conversations involving visual inputs, thanks to the superior power of large language models (LLMs). Those MLLMs are typically built based on the LLMs, with an image encoder to process images into the token embedding space of the LLMs. However, the integration of visual modality has introduced a unique vulnerability: the MLLM becomes susceptible to malicious visual inputs and prone to generating sensitive or harmful responses, even though the LLM has been trained on textual dataset to align with human value. In this paper, we first raise the question: ``Do the MLLMs possess safety-awareness against malicious image inputs?". We find that after adding a principle that specifies the safety requirement into the input of the MLLM, the model's safety awareness becomes boosted. This phenomenon verifies the existence of MLLM's safety-awareness against image inputs, it is only weakened by the modality gap. We then introduce a simple yet effective technique termed CoCA, which amplifies the safety-awareness of the MLLM by calibrating its output distribution. Our proposed strategy helps the model reclaim its original safety awareness without losing its original capabilities. We verify the effectiveness of our approach on both multimodal safety and understanding benchmarks.
format Preprint
id arxiv_https___arxiv_org_abs_2409_11365
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle CoCA: Regaining Safety-awareness of Multimodal Large Language Models with Constitutional Calibration
Gao, Jiahui
Pi, Renjie
Han, Tianyang
Wu, Han
Hong, Lanqing
Kong, Lingpeng
Jiang, Xin
Li, Zhenguo
Computation and Language
The deployment of multimodal large language models (MLLMs) has demonstrated remarkable success in engaging in conversations involving visual inputs, thanks to the superior power of large language models (LLMs). Those MLLMs are typically built based on the LLMs, with an image encoder to process images into the token embedding space of the LLMs. However, the integration of visual modality has introduced a unique vulnerability: the MLLM becomes susceptible to malicious visual inputs and prone to generating sensitive or harmful responses, even though the LLM has been trained on textual dataset to align with human value. In this paper, we first raise the question: ``Do the MLLMs possess safety-awareness against malicious image inputs?". We find that after adding a principle that specifies the safety requirement into the input of the MLLM, the model's safety awareness becomes boosted. This phenomenon verifies the existence of MLLM's safety-awareness against image inputs, it is only weakened by the modality gap. We then introduce a simple yet effective technique termed CoCA, which amplifies the safety-awareness of the MLLM by calibrating its output distribution. Our proposed strategy helps the model reclaim its original safety awareness without losing its original capabilities. We verify the effectiveness of our approach on both multimodal safety and understanding benchmarks.
title CoCA: Regaining Safety-awareness of Multimodal Large Language Models with Constitutional Calibration
topic Computation and Language
url https://arxiv.org/abs/2409.11365