一句话:提出语义融合方法及DUO工具,通过构造多模态有毒输入来有效测试多媒体内容审核软件。
社交媒体平台的多媒体内容审核软件常因模型复杂和跨模态语义理解困难而漏检有毒内容。论文提出 Semantic Fusion:将两个或多个已有单模态输入(如文本句子与图像)融合成语义组合新颖、且按构造即有毒的新输入,用于验证审核软件,并实现工具 DUO。评估中,DUO 针对三类有毒内容测试五个商业审核软件和两个 SOTA 模型,错误发现率最高分别达 100% 和 94.1%;用其生成用例重训两个模型,在保持原始测试集准确率的同时将鲁棒性提升 2.5%∼5.7%。
The exponential growth of social media platforms, such as Facebook, Instagram, Youtube, and TikTok, has revolutionized communication and content publication in human society. Users on these platforms can publish multimedia content that delivers information via the combination of text, audio, images, and video. Meanwhile, the multimedia content release facility has been increasingly exploited to propagate toxic content, such as hate speech, malicious advertisement, and pornography. To this end, content moderation software has been widely deployed on these platforms to detect and blocks toxic content. However, due to the complexity of content moderation models and the difficulty of understanding information across multiple modalities, existing content moderation software can fail to detect toxic content, which often leads to extremely negative impacts (e.g., harmful effects on teen mental health). We introduce Semantic Fusion, a general, effective methodology for validating multimedia content moderation software. Our key idea is to fuse two or more existing single-modal inputs (e.g., a textual sentence and an image) into a new input that combines the semantics of its ancestors in a novel manner and has toxic nature by construction. This fused input is then used for validating multimedia content moderation software. We realized Semantic Fusion as DUO, a practical content moderation software testing tool. In our evaluation, we employ DUO to test five commercial content moderation software and two state-of-the-art models against three kinds of toxic contents. The results show that DUO achieves up to 100% error finding rate (EFR) when testing moderation software and it obtains up to 94.1% EFR when testing the state-of-the-art models. In addition, we leverage the test cases generated by DUO to retrain the two models we explored, which largely improves model robustness (2.5%∼5.7% EFR) while maintaining the accuracy on the original test set.
DOI 原文 · arXiv · PDF(开放获取) · DBLP
@inproceedings{abs-2305-13623,
title = {Validating Multimedia Content Moderation Software via Semantic Fusion},
author = {Wenxuan Wang and Jingyuan Huang and Chang Chen and Jiazhen Gu and Jianping Zhang and Weibin Wu and Pinjia He and Michael Lyu},
booktitle = {ISSTA},
year = {2023},
doi = {10.1145/3597926.3598079}
}