Co-Evolutionary Multi-Modal Alignment via Structured Adversarial Evolution

TL;DR

This paper introduces CEMMA, a co-evolutionary framework for multimodal safety alignment that dynamically adapts to evolving adversarial attacks, significantly improving robustness and generalization of large language models.

Contribution

It presents a novel adaptive framework with evolutionary attack and defense mechanisms for multimodal alignment, moving beyond static adversarial supervision.

Findings

Increased attack success rate against jailbreak prompts.

Enhanced robustness and generalization across benchmarks.

Maintains compatibility with inference-time defenses.

Abstract

Adversarial behavior plays a central role in aligning large language models with human values. However, existing alignment methods largely rely on static adversarial settings, which fundamentally limit robustness, particularly in multimodal settings with a larger attack surface. In this work, we move beyond static adversarial supervision and introduce co-evolutionary alignment with evolving attacks, instantiated by CEMMA (Co-Evolutionary Multi-Modal Alignment), an automated and adaptive framework for multimodal safety alignment. We introduce an Evolutionary Attacker that decomposes adversarial prompts into method templates and harmful intents. By employing genetic operators, including mutation, crossover, and differential evolution, it enables simple seed attacks to inherit the structural efficacy of sophisticated jailbreaks. The Adaptive Defender is iteratively updated on the synthesized hard negatives, forming a closed-loop process that adapts alignment to evolving attacks. Experiments show that the Evolutionary Attacker substantially increases red-teaming jailbreak attack success rate (ASR), while the Adaptive Defender improves robustness and generalization across benchmarks with higher data efficiency, without inducing excessive benign refusal, and remains compatible with inference-time defenses such as AdaShield.