SafeMT: Multi-turn Safety for Multimodal Language Models

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Zhu, Han, Dai, Juntao, Ji, Jiaming, Li, Haoran, Cai, Chengkun, Wen, Pengcheng, Chan, Chi-Min, Chen, Boyuan, Yang, Yaodong, Han, Sirui, Guo, Yike
Format: Preprint
Published: 2025
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866915553200832512
author Zhu, Han
Dai, Juntao
Ji, Jiaming
Li, Haoran
Cai, Chengkun
Wen, Pengcheng
Chan, Chi-Min
Chen, Boyuan
Yang, Yaodong
Han, Sirui
Guo, Yike
author_facet Zhu, Han
Dai, Juntao
Ji, Jiaming
Li, Haoran
Cai, Chengkun
Wen, Pengcheng
Chan, Chi-Min
Chen, Boyuan
Yang, Yaodong
Han, Sirui
Guo, Yike
contents With the widespread use of multi-modal Large Language models (MLLMs), safety issues have become a growing concern. Multi-turn dialogues, which are more common in everyday interactions, pose a greater risk than single prompts; however, existing benchmarks do not adequately consider this situation. To encourage the community to focus on the safety issues of these models in multi-turn dialogues, we introduce SafeMT, a benchmark that features dialogues of varying lengths generated from harmful queries accompanied by images. This benchmark consists of 10,000 samples in total, encompassing 17 different scenarios and four jailbreak methods. Additionally, we propose Safety Index (SI) to evaluate the general safety of MLLMs during conversations. We assess the safety of 17 models using this benchmark and discover that the risk of successful attacks on these models increases as the number of turns in harmful dialogues rises. This observation indicates that the safety mechanisms of these models are inadequate for recognizing the hazard in dialogue interactions. We propose a dialogue safety moderator capable of detecting malicious intent concealed within conversations and providing MLLMs with relevant safety policies. Experimental results from several open-source models indicate that this moderator is more effective in reducing multi-turn ASR compared to existed guard models.
format Preprint
id arxiv_https___arxiv_org_abs_2510_12133
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle SafeMT: Multi-turn Safety for Multimodal Language Models
Zhu, Han
Dai, Juntao
Ji, Jiaming
Li, Haoran
Cai, Chengkun
Wen, Pengcheng
Chan, Chi-Min
Chen, Boyuan
Yang, Yaodong
Han, Sirui
Guo, Yike
Computation and Language
Artificial Intelligence
With the widespread use of multi-modal Large Language models (MLLMs), safety issues have become a growing concern. Multi-turn dialogues, which are more common in everyday interactions, pose a greater risk than single prompts; however, existing benchmarks do not adequately consider this situation. To encourage the community to focus on the safety issues of these models in multi-turn dialogues, we introduce SafeMT, a benchmark that features dialogues of varying lengths generated from harmful queries accompanied by images. This benchmark consists of 10,000 samples in total, encompassing 17 different scenarios and four jailbreak methods. Additionally, we propose Safety Index (SI) to evaluate the general safety of MLLMs during conversations. We assess the safety of 17 models using this benchmark and discover that the risk of successful attacks on these models increases as the number of turns in harmful dialogues rises. This observation indicates that the safety mechanisms of these models are inadequate for recognizing the hazard in dialogue interactions. We propose a dialogue safety moderator capable of detecting malicious intent concealed within conversations and providing MLLMs with relevant safety policies. Experimental results from several open-source models indicate that this moderator is more effective in reducing multi-turn ASR compared to existed guard models.
title SafeMT: Multi-turn Safety for Multimodal Language Models
topic Computation and Language
Artificial Intelligence
url https://arxiv.org/abs/2510.12133