Safety at Scale: A Comprehensive Survey of Large Model Safety
Abstract—The rapid advancement of large models, driven by their exceptional abilities in learning and generalization through large-scale pre-training, has reshaped the landscape of Artificial Intelligence (AI). These models are now foundational to a wide range of applications, including conversational AI, recommendation systems, autonomous driving, content generation, medical diagnostics, and scientific discovery. However, their widespread deployment also exposes them to significant safety risks, raising concerns about robustness, reliability, and ethical implications. This survey provides a systematic review of current safety research on large models, covering Vision Foundation Models (VFMs), Large Language Models (LLMs), Vision-Language Pre-training (VLP) models, Vision-Language Models (VLMs), Diffusion Models (DMs), and large-model-based Agents. Our contributions are summarized as follows: (1) We present a comprehensive taxonomy of safety threats to these models, including adversarial attacks, data poisoning, backdoor attacks, jailbreak and prompt injection attacks, energy-latency attacks, data and model extraction attacks, and emerging agent-specific threats. (2) We review defense strategies proposed for each type of attacks if available and summarize the commonly used datasets and benchmarks for safety research. (3) Building on this, we identify and discuss the open challenges in large model safety, emphasizing the need for comprehensive safety evaluations, scalable and effective defense mechanisms, and sustainable data practices. More importantly, we highlight the necessity of collective efforts from the research community and international collaboration. Our work can serve as a useful reference for researchers and practitioners, fostering the ongoing development of comprehensive defense systems and platforms to safeguard AI models. GitHub: https://github.com/xingjunm/Awesome-Large-Model-Safety. Index Terms—Large Model Safety, AI Safety, Attacks and Defenses
Authors
- Chaowei Xiao (ORCID: https://orcid.org/0000-0002-7043-4926)
- Neil Zhenqiang Gong (ORCID: https://orcid.org/0000-0002-9900-9309)
- Yifan Ding (ORCID: https://orcid.org/0009-0005-7225-4725)
- Cihang Xie (ORCID: https://orcid.org/0000-0003-1243-8045)
- Shiqing Ma (ORCID: https://orcid.org/0000-0003-4741-7674)
- Tianyu Pang (ORCID: https://orcid.org/0000-0003-0639-6176)
- Ruoxi Jia (ORCID: https://orcid.org/0000-0001-9662-9556)
- Yixu Wang (ORCID: https://orcid.org/0000-0002-0549-9723)
- Xipeng Qiu (ORCID: https://orcid.org/0000-0001-7163-5247)
- Yunhao Chen (ORCID: https://orcid.org/0000-0001-7471-3271)
- Yu–Gang Jiang (ORCID: https://orcid.org/0000-0002-1907-8567)
- Hanxun Huang (ORCID: https://orcid.org/0000-0002-2793-6680)
- Jindong Gu (ORCID: https://orcid.org/0009-0000-0574-0129)
- Hengyuan Xu
- Xiang Zheng (ORCID: https://orcid.org/0000-0001-7933-2822)
- Tongliang Liu (ORCID: https://orcid.org/0000-0002-9640-6472)
- Siheng Chen (ORCID: https://orcid.org/0000-0002-9144-0583)
- Baoyuan Wu (ORCID: https://orcid.org/0000-0003-2183-5990)
- Yinpeng Dong (ORCID: https://orcid.org/0000-0003-1299-683X)
- Sarah Erfani (ORCID: https://orcid.org/0000-0003-0885-0643)
- Masashi Sugiyama (ORCID: https://orcid.org/0000-0001-6658-6743)
- Dacheng Tao (ORCID: https://orcid.org/0000-0001-7225-5449)
- Yige Li (ORCID: https://orcid.org/0000-0002-5097-4642)
- Xingjun Ma (ORCID: https://orcid.org/0000-0003-2099-4973)
- Xiangyu Zhang (ORCID: https://orcid.org/0000-0002-0869-0013)
- Bo Li (ORCID: https://orcid.org/0000-0003-2083-9105)
- Cong Wang (ORCID: https://orcid.org/0000-0003-0716-1280)
- Jiaming Zhang (ORCID: https://orcid.org/0000-0002-7611-3867)
- Ye Sun
- Ruofan Wang (ORCID: https://orcid.org/0000-0002-1593-6229)
- Yang Liu (ORCID: https://orcid.org/0000-0002-6194-5214)
- Jun Sun (ORCID: https://orcid.org/0000-0001-9127-088X)
- Jingfeng Zhang (ORCID: https://orcid.org/0000-0003-3491-8074)
- Yang Bai (ORCID: https://orcid.org/0000-0002-7175-2387)
- Yunhan Zhao (ORCID: https://orcid.org/0000-0002-3002-8296)
- Shirui Pan
- Yang Zhang (ORCID: https://orcid.org/0000-0003-3056-3069)
- Tianwei Zhang (ORCID: https://orcid.org/0000-0001-6595-6650)
- James Bailey (ORCID: https://orcid.org/0000-0002-3769-3811)
- Mingming Gong (ORCID: https://orcid.org/0000-0001-7147-5589)
- Xin Wang (ORCID: https://orcid.org/0009-0008-9080-1173)
- Yifeng Gao (ORCID: https://orcid.org/0000-0001-5034-1928)
- Yiming Yi
Publication Details
- Journal
- SuperIntelligence - Robotics - Safety & Alignment
- Published
- 2025-05-29
- DOI
- https://doi.org/10.70777/si.v2i2.14609
- Primary Topic
- Occupational Health and Safety Research
- Type
- article
- Field-Weighted Citation Impact
- 0.00