Learning from the Worst: Dynamically Generated Datasets to Improve Online Hate Detection
Not on the map. Why?
Cited by 23 in LLM safety and security, but placed by its own abstract, which didn’t fit.
Abstract (arXiv)
We present a human-and-model-in-the-loop process for dynamically generating datasets and training better performing and more robust hate detection models. We provide a new dataset of ~40,000 entries, generated and labelled by trained annotators over four rounds of dynamic data creation. It includes ~15,000 challenging perturbations and each hateful entry has fine-grained labels for the type and target of hate. Hateful entries make up 54% of the dataset, which is substantially higher than comparable datasets. We show that model performance is substantially improved using this approach. Models trained on later rounds of data collection perform better on test sets and are harder for annotators to trick. They also perform better on HateCheck, a suite of functional tests for online hate detection. We provide the code, dataset and annotation guidelines for other researchers to use. Accepted at ACL 2021.
Key facts. Cited by 217 papers in the map (data through 7 Oct 2026). First posted on arXiv 31 Dec 2020.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 15; 2022: 28; 2023: 37; 2024: 62; 2025: 47; 2026: 28.
217 papers.
Sort:
By area:
- 2023StarCoder: may the source be with you!cited by 790
- 2021BBQ: A Hand-Built Bias Benchmark for Question Answeringcited by 683
- 2023RAFT: Reward rAnked FineTuning for Generative Foundation Model Alignmentcited by 672
- 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 477
- 2021Dynabench: Rethinking Benchmarking in NLPcited by 447
- 2022ToxiGen: A Large-Scale Machine-Generated Dataset for Adversarial and Implicit Hate Speech Detectioncited by 419
- 2022A Holistic Approach to Undesired Content Detection in the Real Worldcited by 337
- 2021Dealing with Disagreements: Looking Beyond the Majority Vote in Subjective Annotationscited by 306
- 2021Annotators with Attitudes: How Annotator Beliefs And Identities Bias Toxic Language Detectioncited by 258
- 2023Large Language Model Alignment: A Surveycited by 241
- 2023A Pretrainer's Guide to Training Data: Measuring the Effects of Data Age, Domain Coverage, Quality, & Toxicitycited by 180
- 2021Can Machines Learn Morality? The Delphi Experimentcited by 140
38 more
- 2023NLPositionality: Characterizing Design Biases of Datasets and Modelscited by 91
- 2025Findings of the BabyLM Challenge: Sample-Efficient Pretraining on Developmentally Plausible Corporacited by 86
- 2024Curiosity-driven Red-teaming for Large Language Modelscited by 83
- 2021Human-in-the-Loop for Data Collection: a Multi-Target Counter Narrative Dataset to Fight Online Hate Speechcited by 81
- 2021Improving Question Answering Model Robustness with Synthetic Adversarial Data Generationcited by 77
- 2021Anticipating Safety Issues in E2E Conversational AI: Framework and Toolingcited by 77
- 2021Human-Adversarial Visual Question Answeringcited by 57
- 2022Entropy-based Attention Regularization Frees Unintended Bias Mitigation from Listscited by 54
- 2024Learning diverse attacks on large language models for robust red-teaming and safety tuningcited by 54
- 2021Dynaboard: An Evaluation-As-A-Service Platform for Holistic Next-Generation Benchmarkingcited by 53
- 2022Multilingual HateCheck: Functional Tests for Multilingual Hate Speech Detection Modelscited by 51
- 2021Hatemoji: A Test Suite and Adversarially-Generated Dataset for Benchmarking and Detecting Emoji-based Hatecited by 50
- 2023SemEval-2023 Task 10: Explainable Detection of Online Sexismcited by 48
- 2024ShieldLM: Empowering LLMs as Aligned, Customizable and Explainable Safety Detectorscited by 48
- 2023Using In-Context Learning to Improve Dialogue Safetycited by 41
- 2022Human-Machine Collaboration Approaches to Build a Dialogue Dataset for Hate Speech Counteringcited by 40
- 2022Detoxifying Text with MaRCo: Controllable Revision with Experts and Anti-Expertscited by 36
- 2023COBRA Frames: Contextual Reasoning about Effects and Harms of Offensive Statementscited by 34
- 2024KorNAT: LLM Alignment Benchmark for Korean Social Values and Common Knowledgecited by 33
- 2022Using Pre-Trained Language Models for Producing Counter Narratives Against Hate Speech: a Comparative Studycited by 30
- 2023Assessing Language Model Deployment with Risk Cardscited by 30
- 2023HARE: Explainable Hate Speech Detection with Step-by-Step Reasoningcited by 30
- 2024LLMs for Generating and Evaluating Counterfactuals: A Comprehensive Studycited by 30
- 2021Does Putting a Linguist in the Loop Improve NLU Data Collection?cited by 29
- 2023Social Bias Probing: Fairness Benchmarking for Language Modelscited by 29
- 2025Trajectory Balance with Asynchrony: Decoupling Exploration and Learning for Fast, Scalable LLM Post-Trainingcited by 27
- 2022Evaluating Psychological Safety of Large Language Modelscited by 26
- 2024Recent Advances in Hate Speech Moderation: Multimodality and the Role of Large Modelscited by 26
- 2023People Make Better Edits: Measuring the Efficacy of LLM-Generated Counterfactually Augmented Data for Harmful Language Detectioncited by 25
- 2024From Languages to Geographies: Towards Evaluating Cultural Bias in Hate Speech Datasetscited by 23
- 2024Diverse and Effective Red Teaming with Auto-generated Rewards and Multi-step Reinforcement Learningcited by 23
- 2023How Far Can We Extract Diverse Perspectives from Large Language Models?cited by 22
- 2023Efficient Toxic Content Detection by Bootstrapping and Distilling Large Language Modelscited by 21
- 2024Personas with Attitudes: Controlling LLMs for Diverse Data Annotationcited by 21
- 2024An Investigation of Large Language Models for Real-World Hate Speech Detectioncited by 20
- 2024SAIL: Self-Improving Efficient Online Alignment of Large Language Modelscited by 20
- 2024NLP Systems That Can't Tell Use from Mention Censor Counterspeech, but Teaching the Distinction Helpscited by 19
- 2024From One to Many: Expanding the Scope of Toxicity Mitigation in Language Modelscited by 18
50 most cited of 217 All 217 (JSON)
- 2026CollageAttack: Exploiting Cross-Modal Alignment Flaws in T2I Models through Spatial Text Composition29 Sep 2026
- 2026EvoHarmBench: Breaking Content Moderation with Iterative Human-Like Evasion28 Aug 2026
- 2026Do Social Patterns Hold in Synthetic Data? Analyzing Cyberbullying Dynamics in LLM-Generated and Authentic Dialogues15 Jul 2026
- 2026New Terms, New Toxicity: Consensus-based Chinese Neologism Toxicity Detection via Search-Augmented LLMs5 Jul 2026
- 2026DriftGuard: Safety-Aware Multi-Monitor Detection and Selective Adaptation for Evolving Toxicity Moderation27 Jun 2026
- 2026BetXplain: An Explanation-Annotated Dataset for Detecting Manipulative Betting Advertisements on Social Media25 Jun 2026
- 2026Aligning Implied Statements for Implicit Hate Speech Generalizability with Context-Bounded Semi-hard Negative Mining17 Jun 2026
- 2026Evaluating Second-Order Bias of LLMs Through Epistemic Entitlement16 Jun 2026
- 2026BiasGRPO: Stabilizing Bias Mitigation in High-Variance Reward Landscapes via Group-Relative Policy Optimization3 Jun 2026
- 2026Harder to Defend: Towards Chinese Toxicity Attacks via Implicit Enhancement and Obfuscation Rewriting21 May 2026
- 2026Robotics-Inspired Guardrails for Foundation Models in Socially Sensitive Domains19 May 2026
- 2026DisaBench: A Participatory Evaluation Framework for Disability Harms in Language Models12 May 2026
38 more
- 2026TopoGuard: Graph Theory Based Defenses Against Split-Knowledge Attacks on RAG11 May 2026
- 2026DeconDTN-Toolkit: A Library for Evaluation and Enhancement of Robustness to Provenance Shift11 May 2026
- 2026ThreatCore: A Benchmark for Explicit and Implicit Threat Detection11 May 2026
- 2026The Proxy Presumption: From Semantic Embeddings to Valid Social Measures8 May 2026
- 2026When Prompts Interact: Assessing Prompt Arithmetic for Deconfounding under Distribution Shift4 May 2026
- 2026Detoxification for LLM: From Dataset Itself21 Apr 2026
- 2026Beyond Static Benchmarks: Synthesizing Harmful Content via Persona-based Simulation for Robust Evaluation18 Apr 2026
- 2026IYKYK (But AI Doesn't): Automated Content Moderation Does Not Capture Communities' Heterogeneous Attitudes Towards Reclaimed Language17 Apr 2026
- 2026Do We Still Need Humans in the Loop? Human vs. LLM Annotation in Active Learning for TikTok Hate Speech Detection15 Apr 2026
- 2026When Hate Meets Facts: LLMs-in-the-Loop for Check-worthiness Detection in Hate Speech26 Mar 2026
- 2026EchoGuard: An Agentic Framework with Knowledge-Graph Memory for Detecting Manipulative Communication in Longitudinal Dialogue5 Mar 2026
- 2026PEACE 2.0: Grounded Explanations and Counter-Speech for Combating Hate Expressions19 Feb 2026
- 2026Curriculum Learning and Pseudo-Labeling Improve the Generalization of Multi-Label Arabic Dialect Identification Models12 Feb 2026
- 2026Do Prompts Guarantee Safety? Mitigating Toxicity from LLM Generations through Subspace Intervention6 Feb 2026
- 2026LLMs-Integrated Automatic Hate Speech Recognition Using Controllable Text Generation Models8 Jan 2026
- 2026Query-Document Dense Vectors for LLM Relevance Judgment Bias Analysis5 Jan 2026
- 2025System Report for CCL25-Eval Task 10: Prompt-Driven Large Language Model Merge for Fine-Grained Chinese Hate Speech Detection10 Dec 2025
- 2025Technical Report on Text Dataset Distillation3 Dec 2025
- 2025TEAR: Temporal-aware Automated Red-teaming for Text-to-Video Models26 Nov 2025
- 2025How AI Fails: An Interactive Pedagogical Tool for Demonstrating Dialectal Bias in Automated Toxicity Models10 Nov 2025
- 2025Hope Speech Detection in Social Media English Corpora: Performance of Traditional and Transformer Models27 Oct 2025
- 2025Bridging Gaps in Hate Speech Detection: Meta-Collections and Benchmarks for Low-Resource Iberian Languages13 Oct 2025
- 2025RV-HATE: Reinforced Multi-Module Voting for Implicit Hate Speech Detection13 Oct 2025
- 2025Causality Guided Representation Learning for Cross-Style Hate Speech Detection9 Oct 2025
- 2025LLaVAShield: Safeguarding Multimodal Multi-Turn Dialogues in Vision-Language Models30 Sep 2025
- 2025Toxicity in Online Platforms and AI Systems: A Survey of Needs, Challenges, Mitigations, and Future Directions29 Sep 2025
- 2025Are you sure? Measuring models bias in content moderation through uncertainty21 Sep 2025
- 2025Specializing General-purpose LLM Embeddings for Implicit Hate Speech Detection across Datasets28 Aug 2025
- 2025Dialogues of Dissent: Thematic and Rhetorical Dimensions of Hate and Counter-Hate Speech in Social Media Conversations28 Jul 2025
- 2025From Seed to Harvest: Augmenting Human Creativity with AI for Red-teaming Text-to-Image Models23 Jul 2025
- 2025Detoxify: A framework for abusive text transformation using LLMs14 Jul 2025
- 2025A Modular Taxonomy for Hate Speech Definitions and Its Impact on Zero-Shot LLM Classification Performance23 Jun 2025
- 2025Towards Generalizable Generic Harmful Speech Datasets for Implicit Hate Speech Detection19 Jun 2025
- 2025Web(er) of Hate: A Survey on How Hate Speech Is Typed19 Jun 2025
- 2025QGuard:Question-based Zero-shot Guard for Multi-modal LLM Safety14 Jun 2025
- 2025Hatevolution: What Static Benchmarks Don't Tell Us13 Jun 2025
- 2025FASCIST-O-METER: Classifier for Neo-fascist Discourse Online12 Jun 2025
- 2025Large Language Models for Detection of Life-Threatening Texts12 Jun 2025
50 newest of 217 All 217 (JSON)
- 2024Curiosity-driven Red-teaming for Large Language Modelscited by 83
- 2024Learning diverse attacks on large language models for robust red-teaming and safety tuningcited by 54
- 2024Diverse and Effective Red Teaming with Auto-generated Rewards and Multi-step Reinforcement Learningcited by 23
- 2024Target Span Detection for Implicit Harmful Contentcited by 8
- 2024Tiny Refinements Elicit Resilience: Toward Efficient Prefix-Model Against LLM Red-Teamingcited by 6
- 2025A Modular Taxonomy for Hate Speech Definitions and Its Impact on Zero-Shot LLM Classification Performancecited by 6
- 2024Towards Transfer Unlearning: Empirical Evidence of Cross-Domain Bias Mitigationcited by 4
- 2025QGuard:Question-based Zero-shot Guard for Multi-modal LLM Safetycited by 4
- 2024Analyzing Toxicity in Deep Conversations: A Reddit Case Studycited by 3
- 2025SafeRoute: Adaptive Model Selection for Efficient and Accurate Safety Guardrails in Large Language Modelscited by 3
- 2025Unified Multi-Task Learning & Model Fusion for Efficient Language Model Guardrailingcited by 3
- 2025TEAR: Temporal-aware Automated Red-teaming for Text-to-Video Modelscited by 3
12 most cited of 21 All 21 (JSON)
- 2026CollageAttack: Exploiting Cross-Modal Alignment Flaws in T2I Models through Spatial Text Composition29 Sep 2026
- 2026EvoHarmBench: Breaking Content Moderation with Iterative Human-Like Evasion28 Aug 2026
- 2026Harder to Defend: Towards Chinese Toxicity Attacks via Implicit Enhancement and Obfuscation Rewriting21 May 2026
- 2026Robotics-Inspired Guardrails for Foundation Models in Socially Sensitive Domains19 May 2026
- 2026DisaBench: A Participatory Evaluation Framework for Disability Harms in Language Models12 May 2026
- 2026Beyond Static Benchmarks: Synthesizing Harmful Content via Persona-based Simulation for Robust Evaluation18 Apr 2026
- 2026Do Prompts Guarantee Safety? Mitigating Toxicity from LLM Generations through Subspace Intervention6 Feb 2026
- 2025TEAR: Temporal-aware Automated Red-teaming for Text-to-Video Models26 Nov 2025
- 2025From Seed to Harvest: Augmenting Human Creativity with AI for Red-teaming Text-to-Image Models23 Jul 2025
- 2025A Modular Taxonomy for Hate Speech Definitions and Its Impact on Zero-Shot LLM Classification Performance23 Jun 2025
- 2025QGuard:Question-based Zero-shot Guard for Multi-modal LLM Safety14 Jun 2025
- 2025Helping Large Language Models Protect Themselves: An Enhanced Filtering and Summarization System2 May 2025
12 newest of 21 All 21 (JSON)
- 2023Large Language Model Alignment: A Surveycited by 241
- 2024KorNAT: LLM Alignment Benchmark for Korean Social Values and Common Knowledgecited by 33
- 2024SAIL: Self-Improving Efficient Online Alignment of Large Language Modelscited by 20
- 2024The Dark Side of Human Feedback: Poisoning Large Language Models via User Inputscited by 10
- 2024Dynamic Normativity: Necessary and Sufficient Conditions for Value Alignmentcited by 3
- 2026BiasGRPO: Stabilizing Bias Mitigation in High-Variance Reward Landscapes via Group-Relative Policy Optimizationcited by 1
- 2024BiasJailbreak:Analyzing Ethical Biases and Jailbreak Vulnerabilities in Large Language Modelscited by 0
- 2026BiasGRPO: Stabilizing Bias Mitigation in High-Variance Reward Landscapes via Group-Relative Policy Optimization3 Jun 2026
- 2024BiasJailbreak:Analyzing Ethical Biases and Jailbreak Vulnerabilities in Large Language Models17 Oct 2024
- 2024The Dark Side of Human Feedback: Poisoning Large Language Models via User Inputs1 Sep 2024
- 2024SAIL: Self-Improving Efficient Online Alignment of Large Language Models21 Jun 2024
- 2024Dynamic Normativity: Necessary and Sufficient Conditions for Value Alignment16 Jun 2024
- 2024KorNAT: LLM Alignment Benchmark for Korean Social Values and Common Knowledge21 Feb 2024
- 2023Large Language Model Alignment: A Survey26 Sep 2023
- 2023RAFT: Reward rAnked FineTuning for Generative Foundation Model Alignmentcited by 672
- 2025Trajectory Balance with Asynchrony: Decoupling Exploration and Learning for Fast, Scalable LLM Post-Trainingcited by 27
- 2023Moderating New Waves of Online Hate with Chain-of-Thought Reasoning in Large Language Modelscited by 17
- 2024Rethinking KenLM: Good and Bad Model Ensembles for Efficient Text Quality Filtering in Large Web Corporacited by 1
- 2025Trajectory Balance with Asynchrony: Decoupling Exploration and Learning for Fast, Scalable LLM Post-Training24 Mar 2025
- 2024Rethinking KenLM: Good and Bad Model Ensembles for Efficient Text Quality Filtering in Large Web Corpora15 Sep 2024
- 2023Moderating New Waves of Online Hate with Chain-of-Thought Reasoning in Large Language Models22 Dec 2023
- 2023RAFT: Reward rAnked FineTuning for Generative Foundation Model Alignment13 Apr 2023
- 2023StarCoder: may the source be with you!cited by 790
- 2021BBQ: A Hand-Built Bias Benchmark for Question Answeringcited by 683
- 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 477
- 2021Dynabench: Rethinking Benchmarking in NLPcited by 447
- 2022ToxiGen: A Large-Scale Machine-Generated Dataset for Adversarial and Implicit Hate Speech Detectioncited by 419
- 2022A Holistic Approach to Undesired Content Detection in the Real Worldcited by 337
- 2021Dealing with Disagreements: Looking Beyond the Majority Vote in Subjective Annotationscited by 306
- 2021Annotators with Attitudes: How Annotator Beliefs And Identities Bias Toxic Language Detectioncited by 258
- 2023A Pretrainer's Guide to Training Data: Measuring the Effects of Data Age, Domain Coverage, Quality, & Toxicitycited by 180
- 2021Can Machines Learn Morality? The Delphi Experimentcited by 140
- 2023NLPositionality: Characterizing Design Biases of Datasets and Modelscited by 91
- 2025Findings of the BabyLM Challenge: Sample-Efficient Pretraining on Developmentally Plausible Corporacited by 86
12 most cited of 178 All 178 (JSON)
- 2026New Terms, New Toxicity: Consensus-based Chinese Neologism Toxicity Detection via Search-Augmented LLMs5 Jul 2026
- 2026DriftGuard: Safety-Aware Multi-Monitor Detection and Selective Adaptation for Evolving Toxicity Moderation27 Jun 2026
- 2026BetXplain: An Explanation-Annotated Dataset for Detecting Manipulative Betting Advertisements on Social Media25 Jun 2026
- 2026Aligning Implied Statements for Implicit Hate Speech Generalizability with Context-Bounded Semi-hard Negative Mining17 Jun 2026
- 2026Evaluating Second-Order Bias of LLMs Through Epistemic Entitlement16 Jun 2026
- 2026DeconDTN-Toolkit: A Library for Evaluation and Enhancement of Robustness to Provenance Shift11 May 2026
- 2026ThreatCore: A Benchmark for Explicit and Implicit Threat Detection11 May 2026
- 2026The Proxy Presumption: From Semantic Embeddings to Valid Social Measures8 May 2026
- 2026When Prompts Interact: Assessing Prompt Arithmetic for Deconfounding under Distribution Shift4 May 2026
- 2026Detoxification for LLM: From Dataset Itself21 Apr 2026
- 2026IYKYK (But AI Doesn't): Automated Content Moderation Does Not Capture Communities' Heterogeneous Attitudes Towards Reclaimed Language17 Apr 2026
- 2026Do We Still Need Humans in the Loop? Human vs. LLM Annotation in Active Learning for TikTok Hate Speech Detection15 Apr 2026
12 newest of 178 All 178 (JSON)