UnsafeBench

Benchmarking Image Safety Classifiers on Real-World and AI-Generated Images

Conference Paper (2025)
Author(s)

Yiting Qu (CISPA Helmholtz Center for Information Security)

Xinyue Shen (CISPA Helmholtz Center for Information Security)

Yixin Wu (CISPA Helmholtz Center for Information Security)

Michael Backes (CISPA Helmholtz Center for Information Security)

Savvas Zannettou (TU Delft - Organisation & Governance)

Yang Zhang (CISPA Helmholtz Center for Information Security)

Research Group
Organisation & Governance
DOI related publication
https://doi.org/10.1145/3719027.3765088
More Info
expand_more
Publication Year
2025
Language
English
Research Group
Organisation & Governance
Bibliographical Note
Green Open Access added to TU Delft Institutional Repository as part of the Taverne amendment. More information about this copyright law amendment can be found at https://www.openaccess.nl. Otherwise as indicated in the copyright section: the publisher is the copyright holder of this work and the author uses the Dutch legislation to make this work public.@en
Pages (from-to)
3221-3235
Publisher
ACM
ISBN (electronic)
9798400715259
Reuse Rights

Other than for strictly personal use, it is not permitted to download, forward or distribute the text or part of it, without the consent of the author(s) and/or copyright holder(s), unless the work is under an open content license such as Creative Commons.

Abstract

With the advent of text-to-image models and concerns about their misuse, developers are increasingly relying on image safety classifiers to moderate their generated unsafe images. Yet, the performance of current image safety classifiers remains unknown for both real-world and AI-generated images. In this work, we propose UnsafeBench, a benchmarking framework that evaluates the effectiveness and robustness of image safety classifiers, with a particular focus on the impact of AI-generated images on their performance. First, we curate a large dataset of 10K real-world and AI-generated images that are annotated as safe or unsafe based on a set of 11 unsafe categories of images (sexual, violent, hateful, etc.). Then, we evaluate the effectiveness and robustness of five popular image safety classifiers, as well as three classifiers that are powered by general-purpose visual language models. Our assessment indicates that existing image safety classifiers are not comprehensive and effective enough to mitigate the multifaceted problem of unsafe images. Also, there exists a distribution shift between real-world and AI-generated images in image qualities, styles, and layouts, leading to degraded effectiveness and robustness. Motivated by these findings, we build a comprehensive image moderation tool called PerspectiveVision, which improves the effectiveness and robustness of existing classifiers, especially on AI-generated images. UnsafeBench and PerspectiveVision can aid the research community in better understanding the landscape of image safety classification in the era of generative AI.

Files

3719027.3765088.pdf
(pdf | 5.04 Mb)
License info not available
warning

File under embargo until 22-05-2026