Skip to content

Translation in progress Some entries still include text in the original language.

Oct 13 · Tuesday

All papers

Found 11 papers
Filter7
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 215papers have no tags yet and are not included in filtered results.

Another 215papers do not have category tags yet and are not included in filtered results.

  1. DefensesarXiv 2610.07774

    研究者提出读取路由 logits 的 MoE 视觉语言模型多模态安全检测器

    AI summary研究者提出一种轻量级路由 logits 安全检测器,在提示词预填充阶段读取 MoE 视觉语言模型的专家路由信号,在生成前判断多模态请求是否安全,且不修改模型参数或专家路由。

    Published
    Evaluated models
    Qwen3-VL-30B-A3B-Instruct, Kimi-VL-A3B-Instruct
    Abstract读出而非操纵 router logits,可在不改模型的情况下降低两模型的组合式安全错误。

    作者在两个指令微调 MoE VLM 上比较改模型与读路由。组合式风险按 HoliSafe 分成五类:图文各自可安全,合在一起才不安全,或不安全内容只在图像里。

    Paper analysisRead analysis
  2. DefensesarXiv 2610.05637

    Study shows VLM visual grounding refusal rates are on average 31 to 59 percentage points lower by harm domain

    提出融合定位拒答与能力保留的安全微调,补齐视觉定位输出的拒答缺口

    Published
    Evaluated models
    Claude Sonnet 4.6, Gemini 3.5 Flash, Molmo2-8B and others5

    Abstract论文揭示了 VLM 定位安全落后于 VQA 的对齐断层,提出三成分微调方案有效弥合差距并保留定位能力,表征分析揭示了对齐机制。

    Paper analysisRead analysis
  3. DefensesarXiv 2609.38645

    用探针引导微调对齐模型且不损失可监控性

    用持续更新的探针做微调,降低有害性并保持线性可监测性

    Published
    Evaluated models
    Mistral 7B Instruct v0.1, Llama 3 8B Instruct Abliterated, Qwen3-14B
    Abstract持续重拟合的探针可降低有害性、提高诚实性,训练后概念仍能被线性探针读出。

    Probe-guided fine-tuning 把探针分数当作唯一对齐信号,用来推动 harmlessness 与 honesty,并检查训练后这些概念是否仍线性可读。

    Paper analysisRead analysis
  4. DefensesarXiv 2609.37837

    Intent-Privilege OPSD:让视觉语言模型在隐式风险下兼顾安全与有用

    提出 Intent-Privilege OPSD,对齐视觉语言模型在隐式风险下的安全与帮助性

    Published
    Evaluated models
    Qwen3-VL-4B-Instruct, LLaVA, LLaVA-1.5-7B and others4
    Abstract作者报告训练期证据化意图蒸馏兼顾安全与帮助性,效果受标注质量和评测设置影响。

    Intent-Privilege OPSD 是针对跨模态隐式风险的训练期安全—帮助性对齐方法。作者关注的不是直接拒绝敏感请求,而是按可观察图文证据保留正常帮助、约束有害信息。

    Paper analysisRead analysis
  5. DefensesarXiv 2609.15803

    研究者提出 k-robust 联盟对齐,用多智能体评审委托授权

    提出 k-robust 联盟对齐,刻画误对齐评审下的安全委托授权

    Published
    Abstract联盟覆盖使无个体对齐的评审面板仍可相对基线安全授权,数值分数改善完备性。

    委托授权的安全不要求每位评审者对齐,而要求面板在效用空间覆盖委托人。

    Paper analysisRead analysis
  6. DefensesarXiv 2609.05797

    Paper finds safety monitors mainly block requests the model would already refuse

    评估安全监视器并提出双侧梯级微调以减少会答有害请求的漏检

    Published
    Evaluated models
    Gemma-4-31B-IT, Qwen3-32B, Llama Guard 3 8B and others6

    Abstract论文发现安全监视器大多拦截模型已拒答请求,指出明确度偏差是共性原因,并通过双侧梯级微调提升回答请求的召回表现。

    Paper analysisRead analysis
  7. 研究:拒答方向可跨架构迁移,安全工具可按写入位置重新估计

    在写入点定位拒答方向,经刚性旋转跨架构迁移并门控放大

    Published
    Evaluated models
    Falcon-Mamba-7B, Falcon3-Mamba-7B, Llama-3.1-8B and others8
    Abstract拒答方向可经刚性旋转跨架构迁移,但必须在各架构的写入点读取。

    作者研究拒答表示是否随架构改变,结论是表示共享、读取位置随架构变。

    Paper analysisRead analysis
  8. Knowing What Not to Answer: Selective Non-Compliance in Vision-Language Models

    Propose the KoNA benchmark to evaluate selective non-compliance in vision-language models

    Published
    Evaluated models
    InternVL3-2B-Instruct, InternVL3-78B-Instruct, Qwen2.5-VL-3B-Instruct and others8
    AbstractKoNA evaluates selective noncompliance with five types of paired queries.

    KoNA is used to evaluate whether vision-language models can selectively refuse mixed queries: only handle the components that should not be followed, while answering the remaining components.

    Paper analysisRead analysis
  9. Study audits 9 vision-language models: national stance rewriting rate under Chinese prompts is about three times that under English

    审计视觉语言模型在敏感图像上从拒答转向国家立场重构的行为

    Published
    Evaluated models
    Qwen2-VL-7B, Qwen2.5-VL-7B, Qwen3-VL-8B and others9
    Abstract论文系统审计了 VLM 多模态审查,发现审查正从显式拒答转向隐蔽重构,且中文提示与文本先验会放大重构倾向。

    论文系统研究了中外开源视觉语言模型在政治敏感图像上的审查行为,主要内容如下。

    Paper analysisRead analysis
You have reached the end