On the Safety of Conversational Models: Taxonomy, Dataset, and Benchmark
Not on the map. Why?
Abstract (arXiv)
Dialogue safety problems severely limit the real-world deployment of neural conversational models and have attracted great research interests recently. However, dialogue safety problems remain under-defined and the corresponding dataset is scarce. We propose a taxonomy for dialogue safety specifically designed to capture unsafe behaviors in human-bot dialogue settings, with focuses on context-sensitive unsafety, which is under-explored in prior works. To spur research in this direction, we compile DiaSafety, a dataset with rich context-sensitive unsafe examples. Experiments show that existing safety guarding tools fail severely on our dataset. As a remedy, we train a dialogue safety classifier to provide a strong baseline for context-sensitive dialogue unsafety detection. With our classifier, we perform safety evaluations on popular conversational models and show that existing dialogue systems still exhibit concerning context-sensitive safety problems.
Key facts. Cited by 73 papers in the map (data through 7 Oct 2026). Builds on 41 of its 83 references that are in the map. First posted on arXiv 16 Oct 2021.
Builds on
41 of 83 references.
References · 41
- 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,266
- 2019The Curious Case of Neural Text Degenerationcited by 2,881
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,235
- 2020Language (Technology) is Power: A Critical Survey of "Bias" in NLPcited by 951
- 2020StereoSet: Measuring stereotypical bias in pretrained language modelscited by 911
- 2019DialoGPT: Large-Scale Generative Pre-training for Conversational Response Generationcited by 842
- 2017Automated Hate Speech Detection and the Problem of Offensive Languagecited by 724
- 2020Recipes for building an open-domain chatbotcited by 593
- 2020Towards a Human-like Open-Domain Chatbotcited by 467
- 2018Gender Bias in Coreference Resolutioncited by 438
- 2021DExperts: Decoding-Time Controlled Text Generation with Experts and Anti-Expertscited by 434
- 2021BOLD: Dataset and Metrics for Measuring Biases in Open-Ended Language Generationcited by 410
29 more
- 2020The Pushshift Reddit Datasetcited by 289
- 2019Predicting the Type and Target of Offensive Posts in Social Mediacited by 268
- 2016Ex Machina: Personal Attacks Seen at Scalecited by 208
- 2019Racial Bias in Hate Speech and Abusive Language Detection Datasetscited by 208
- 2020A Computational Approach to Understanding Empathy Expressed in Text-Based Mental Health Supportcited by 182
- 2019Build it Break it Fix it for Dialogue Safety: Robustness from Adversarial Human Attackcited by 176
- 2018Learning Gender-Neutral Word Embeddingscited by 169
- 2020Recipes for Safety in Open-domain Chatbotscited by 168
- 2020MedDialog: Two Large-scale Medical Dialogue Datasetscited by 157
- 2021RedditBias: A Real-World Resource for Bias Evaluation and Debiasing of Conversational Language Modelscited by 149
- 2017ParlAI: A Dialog Research Software Platformcited by 139
- 2020Can You Put it All Together: Evaluating Conversational Agents' Ability to Blend Skillscited by 130
- 2020Toxicity Detection: Does Context Really Matter?cited by 93
- 2021PsyQA: A Chinese Dataset for Generating Long Counseling Text for Mental Health Supportcited by 92
- 2017Ethical Challenges in Data-Driven Dialogue Systemscited by 86
- 2018From Eliza to XiaoIce: Challenges and Opportunities with Social Chatbotscited by 85
- 2019Dreaddit: A Reddit Dataset for Stress Analysis in Social Mediacited by 81
- 2020PLATO-2: Towards Building an Open-Domain Chatbot via Curriculum Learningcited by 79
- 2020A Large-Scale Chinese Short-Text Conversation Datasetcited by 77
- 2021Anticipating Safety Issues in E2E Conversational AI: Framework and Toolingcited by 77
- 2021Mitigating Political Bias in Language Models Through Reinforced Calibrationcited by 73
- 2017Detecting Online Hate Speech Using Context Aware Modelscited by 72
- 2018Thou shalt not hate: Countering Online Hate Speechcited by 64
- 2021Just Say No: Analyzing the Stance of Neural Dialogue Generation in Offensive Contextscited by 56
- 2020Controlling Style in Generated Dialoguecited by 38
- 2021A systematic review of Hate Speech automatic detection using Natural Language Processingcited by 26
- 2019TalkDown: A Corpus for Condescension Detection in Contextcited by 21
- 2021Assessing Political Prudence of Open-domain Chatbotscited by 20
- 2021Abuse is Contextual, What about NLP? The Role of Context in Abusive Language Annotation and Detectioncited by 19
Built on by
Citing papers per year: 2022: 18; 2023: 20; 2024: 21; 2025: 10; 2026: 4.
73 papers.
Sort:
By area:
- 2022ProsocialDialog: A Prosocial Backbone for Conversational Agentscited by 109
- 2024On Prompt-Driven Safeguarding for Large Language Modelscited by 109
- 2024O1 Replication Journey -- Part 2: Surpassing O1-preview through Simple Distillation, Big Progress or Bitter Lesson?cited by 90
- 2023Safety Assessment of Chinese Large Language Modelscited by 82
- 2023CValues: Measuring the Values of Chinese Large Language Models from Safety to Responsibilitycited by 80
- 2022AugESC: Dialogue Augmentation with Large Language Models for Emotional Support Conversationcited by 79
- 2022COLD: A Benchmark for Chinese Offensive Language Detectioncited by 74
- 2023Jais and Jais-chat: Arabic-Centric Foundation and Instruction-Tuned Open Generative Large Language Modelscited by 68
- 2023BiasAsker: Measuring the Bias in Conversational AI Systemcited by 52
- 2024ShieldLM: Empowering LLMs as Aligned, Customizable and Explainable Safety Detectorscited by 48
- 2024Surgical, Cheap, and Flexible: Mitigating False Refusal in Language Models via Single Vector Ablationcited by 48
- 2024Evaluating Cultural and Social Awareness of LLM Web Agentscited by 43
38 more
- 2022SafeText: A Benchmark for Exploring Physical Safety in Language Modelscited by 41
- 2023Using In-Context Learning to Improve Dialogue Safetycited by 41
- 2023Click: Controllable Text Generation with Sequence Likelihood Contrastive Learningcited by 41
- 2022Towards Identifying Social Bias in Dialog Systems: Frame, Datasets, and Benchmarkscited by 36
- 2023Inference-Time Policy Adapters (IPA): Tailoring Extreme-Scale LMs without Fine-tuningcited by 33
- 2022EVA2.0: Investigating Open-Domain Chinese Dialogue Systems with Large-Scale Pre-Trainingcited by 31
- 2022Why So Toxic? Measuring and Triggering Toxic Behavior in Open-Domain Chatbotscited by 31
- 2023Mirages: On Anthropomorphism in Dialogue Systemscited by 30
- 2025Toward Generalizable Evaluation in the LLM Era: A Survey Beyond Benchmarkscited by 26
- 2023KoSBi: A Dataset for Mitigating Social Bias Risks Towards Safer Large Language Model Applicationcited by 24
- 2025Steering MoE LLMs via Expert (De)Activationcited by 23
- 2023FFT: Towards Harmlessness Evaluation and Analysis for LLMs with Factuality, Fairness, Toxicitycited by 22
- 2022MoralDial: A Framework to Train and Evaluate Moral Dialogue Systems via Moral Discussionscited by 17
- 2023Bring Your Own Data! Self-Supervised Evaluation for Large Language Modelscited by 17
- 2023Towards Safer Generative Language Models: A Survey on Safety Risks, Evaluations, and Improvementscited by 14
- 2022Report from the NSF Future Directions Workshop on Automatic Evaluation of Dialog: Research Directions and Challengescited by 13
- 2023A Benchmark for Understanding Dialogue Safety in Mental Health Supportcited by 13
- 2023Through the Lens of Core Competency: Survey on Evaluation of Large Language Modelscited by 12
- 2023ASSERT: Automated Safety Scenario Red Teaming for Evaluating the Robustness of Large Language Modelscited by 12
- 2022Risk-graded Safety for Handling Medical Queries in Conversational AIcited by 11
- 2022Language Detoxification with Attribute-Discriminative Latent Spacecited by 11
- 2024Soda-Eval: Open-Domain Dialogue Evaluation in the age of LLMscited by 10
- 2024Active Learning for Robust and Representative LLM Generation in Safety-Critical Scenarioscited by 10
- 2024SafeWorld: Geo-Diverse Safety Alignmentcited by 10
- 2022PanGu-Bot: Efficient Generative Dialogue Pre-training from Pre-trained Language Modelcited by 9
- 2022Don't Forget Your ABC's: Evaluating the State-of-the-Art in Chat-Oriented Dialogue Systemscited by 9
- 2025SafeLawBench: Towards Safe Alignment of Large Language Modelscited by 9
- 2022Target-Guided Dialogue Response Generation Using Commonsense and Data Augmentationcited by 8
- 2022Constructing Highly Inductive Contexts for Dialogue Safety through Controllable Reverse Generationcited by 8
- 2024NewsBench: A Systematic Evaluation Framework for Assessing Editorial Capabilities of Large Language Models in Chinese Journalismcited by 8
- 2022Towards Robust NLG Bias Evaluation with Syntactically-diverse Promptscited by 7
- 2024Coherence-Driven Multimodal Safety Dialogue with Active Learning for Embodied Agentscited by 7
- 2024Building a Domain-specific Guardrail Model in Productioncited by 6
- 2024Conversational Complexity for Assessing Risk in Large Language Modelscited by 6
- 2022Foveate, Attribute, and Rationalize: Towards Physically Safe and Trustworthy AIcited by 5
- 2024Evaluating Implicit Bias in Large Language Models by Attacking From a Psychometric Perspectivecited by 5
- 2024"Yes, My LoRD." Guiding Language Model Extraction with Locality Reinforced Distillationcited by 5
- 2024Responsible Retrieval Augmented Generation for Climate Decision Making from Documentscited by 4
50 most cited of 73 All 73 (JSON)
- 2026AERIC: Anticipatory Hidden-State Monitoring for Implicit Harmful Dialogue13 May 2026
- 2026RoTRAG: Rule of Thumb Reasoning for Conversation Harm Detection with Retrieval-Augmented Generation19 Apr 2026
- 2026A Methodology for Identifying Evaluation Items for Practical Dialogue Systems Based on Business-Dialogue System Alignment Models10 Jan 2026
- 2026RedBench: A Universal Dataset for Comprehensive Red Teaming of Large Language Models7 Jan 2026
- 2025Do You Feel Comfortable? Detecting Hidden Conversational Escalation in AI Chatbots5 Dec 2025
- 2025HALF: Harm-Aware LLM Fairness Evaluation Aligned with Deployment14 Oct 2025
- 2025Mitigating Over-Refusal in Aligned Large Language Models via Inference-Time Activation Energy9 Oct 2025
- 2025RADAR: A Risk-Aware Dynamic Multi-Agent Framework for LLM Safety Evaluation via Role-Specialized Collaboration28 Sep 2025
- 2025Steering MoE LLMs via Expert (De)Activation11 Sep 2025
- 2025SafeLawBench: Towards Safe Alignment of Large Language Models7 Jun 2025
- 2025Retrieval Augmented Generation-based Large Language Models for Bridging Transportation Cybersecurity Legal Knowledge Gaps23 May 2025
- 2025Toward Generalizable Evaluation in the LLM Era: A Survey Beyond Benchmarks26 Apr 2025
38 more
- 2025Supervision policies can shape long-term risk management in general-purpose AI models10 Jan 2025
- 2025PANDA -- Paired Anti-hate Narratives Dataset from Asia: Using an LLM-as-a-Judge to Create the First Chinese Counterspeech Dataset1 Jan 2025
- 2024Beyond Discrete Personas: Personality Modeling Through Journal Intensive Conversations15 Dec 2024
- 2024SafeWorld: Geo-Diverse Safety Alignment9 Dec 2024
- 2024O1 Replication Journey -- Part 2: Surpassing O1-preview through Simple Distillation, Big Progress or Bitter Lesson?25 Nov 2024
- 2024Responsible Retrieval Augmented Generation for Climate Decision Making from Documents31 Oct 2024
- 2024Evaluating Cultural and Social Awareness of LLM Web Agents30 Oct 2024
- 2024Coherence-Driven Multimodal Safety Dialogue with Active Learning for Embodied Agents18 Oct 2024
- 2024Active Learning for Robust and Representative LLM Generation in Safety-Critical Scenarios14 Oct 2024
- 2024Surgical, Cheap, and Flexible: Mitigating False Refusal in Language Models via Single Vector Ablation4 Oct 2024
- 2024CHBench: A Chinese Dataset for Evaluating Health in Large Language Models24 Sep 2024
- 2024"Yes, My LoRD." Guiding Language Model Extraction with Locality Reinforced Distillation4 Sep 2024
- 2024Conversational Complexity for Assessing Risk in Large Language Models2 Sep 2024
- 2024Soda-Eval: Open-Domain Dialogue Evaluation in the age of LLMs20 Aug 2024
- 2024Building a Domain-specific Guardrail Model in Production24 Jul 2024
- 2024SAFETY-J: Evaluating Safety with Critique24 Jul 2024
- 2024Evaluating Implicit Bias in Large Language Models by Attacking From a Psychometric Perspective20 Jun 2024
- 2024Revealing Trends in Datasets from the 2022 ACL and EMNLP Conferences31 Mar 2024
- 2024NewsBench: A Systematic Evaluation Framework for Assessing Editorial Capabilities of Large Language Models in Chinese Journalism29 Feb 2024
- 2024ShieldLM: Empowering LLMs as Aligned, Customizable and Explainable Safety Detectors26 Feb 2024
- 2024Fine-Grained Detoxification via Instance-Level Prefixes for Large Language Models23 Feb 2024
- 2024Improving Dialog Safety using Socially Aware Contrastive Learning1 Feb 2024
- 2024On Prompt-Driven Safeguarding for Large Language Models31 Jan 2024
- 2023FFT: Towards Harmlessness Evaluation and Analysis for LLMs with Factuality, Fairness, Toxicity30 Nov 2023
- 2023CESAR: Automatic Induction of Compositional Instructions for Multi-turn Dialogs29 Nov 2023
- 2023Alquist 5.0: Dialogue Trees Meet Generative Models. A Novel Approach for Enhancing SocialBot Conversations24 Oct 2023
- 2023ASSERT: Automated Safety Scenario Red Teaming for Evaluating the Robustness of Large Language Models14 Oct 2023
- 2023Jais and Jais-chat: Arabic-Centric Foundation and Instruction-Tuned Open Generative Large Language Models30 Aug 2023
- 2023Challenges of GPT-3-based Conversational Agents for Healthcare28 Aug 2023
- 2023Through the Lens of Core Competency: Survey on Evaluation of Large Language Models15 Aug 2023
- 2023AutoConv: Automatically Generating Information-seeking Conversations with Large Language Models12 Aug 2023
- 2023A Benchmark for Understanding Dialogue Safety in Mental Health Support31 Jul 2023
- 2023CValues: Measuring the Values of Chinese Large Language Models from Safety to Responsibility19 Jul 2023
- 2023Bring Your Own Data! Self-Supervised Evaluation for Large Language Models23 Jun 2023
- 2023Click: Controllable Text Generation with Sequence Likelihood Contrastive Learning6 Jun 2023
- 2023KoSBi: A Dataset for Mitigating Social Bias Risks Towards Safer Large Language Model Application28 May 2023
- 2023Healing Unsafe Dialogue Responses with Weak Supervision Signals25 May 2023
- 2023Inference-Time Policy Adapters (IPA): Tailoring Extreme-Scale LMs without Fine-tuning24 May 2023
50 newest of 73 All 73 (JSON)
- 2024On Prompt-Driven Safeguarding for Large Language Modelscited by 109
- 2023ASSERT: Automated Safety Scenario Red Teaming for Evaluating the Robustness of Large Language Modelscited by 12
- 2024Building a Domain-specific Guardrail Model in Productioncited by 6
- 2024Conversational Complexity for Assessing Risk in Large Language Modelscited by 6
- 2026RedBench: A Universal Dataset for Comprehensive Red Teaming of Large Language Modelscited by 3
- 2026RedBench: A Universal Dataset for Comprehensive Red Teaming of Large Language Models7 Jan 2026
- 2024Conversational Complexity for Assessing Risk in Large Language Models2 Sep 2024
- 2024Building a Domain-specific Guardrail Model in Production24 Jul 2024
- 2024On Prompt-Driven Safeguarding for Large Language Models31 Jan 2024
- 2023ASSERT: Automated Safety Scenario Red Teaming for Evaluating the Robustness of Large Language Models14 Oct 2023
- 2022ProsocialDialog: A Prosocial Backbone for Conversational Agentscited by 109
- 2024Evaluating Cultural and Social Awareness of LLM Web Agentscited by 43
- 2024Coherence-Driven Multimodal Safety Dialogue with Active Learning for Embodied Agentscited by 7
- 2025RADAR: A Risk-Aware Dynamic Multi-Agent Framework for LLM Safety Evaluation via Role-Specialized Collaborationcited by 3
- 2025RADAR: A Risk-Aware Dynamic Multi-Agent Framework for LLM Safety Evaluation via Role-Specialized Collaboration28 Sep 2025
- 2024Evaluating Cultural and Social Awareness of LLM Web Agents30 Oct 2024
- 2024Coherence-Driven Multimodal Safety Dialogue with Active Learning for Embodied Agents18 Oct 2024
- 2022ProsocialDialog: A Prosocial Backbone for Conversational Agents25 May 2022
- 2025Steering MoE LLMs via Expert (De)Activationcited by 23
- 2025Steering MoE LLMs via Expert (De)Activation11 Sep 2025
- 2024SafeWorld: Geo-Diverse Safety Alignmentcited by 10
- 2024SafeWorld: Geo-Diverse Safety Alignment9 Dec 2024
- 2023Safety Assessment of Chinese Large Language Modelscited by 82
- 2023CValues: Measuring the Values of Chinese Large Language Models from Safety to Responsibilitycited by 80
- 2022AugESC: Dialogue Augmentation with Large Language Models for Emotional Support Conversationcited by 79
- 2022COLD: A Benchmark for Chinese Offensive Language Detectioncited by 74
- 2023Jais and Jais-chat: Arabic-Centric Foundation and Instruction-Tuned Open Generative Large Language Modelscited by 68
- 2023BiasAsker: Measuring the Bias in Conversational AI Systemcited by 52
- 2024ShieldLM: Empowering LLMs as Aligned, Customizable and Explainable Safety Detectorscited by 48
- 2024Surgical, Cheap, and Flexible: Mitigating False Refusal in Language Models via Single Vector Ablationcited by 48
- 2022SafeText: A Benchmark for Exploring Physical Safety in Language Modelscited by 41
- 2023Using In-Context Learning to Improve Dialogue Safetycited by 41
- 2023Click: Controllable Text Generation with Sequence Likelihood Contrastive Learningcited by 41
- 2022Towards Identifying Social Bias in Dialog Systems: Frame, Datasets, and Benchmarkscited by 36
12 most cited of 56 All 56 (JSON)
- 2026AERIC: Anticipatory Hidden-State Monitoring for Implicit Harmful Dialogue13 May 2026
- 2026A Methodology for Identifying Evaluation Items for Practical Dialogue Systems Based on Business-Dialogue System Alignment Models10 Jan 2026
- 2025Do You Feel Comfortable? Detecting Hidden Conversational Escalation in AI Chatbots5 Dec 2025
- 2025HALF: Harm-Aware LLM Fairness Evaluation Aligned with Deployment14 Oct 2025
- 2025Toward Generalizable Evaluation in the LLM Era: A Survey Beyond Benchmarks26 Apr 2025
- 2025Supervision policies can shape long-term risk management in general-purpose AI models10 Jan 2025
- 2025PANDA -- Paired Anti-hate Narratives Dataset from Asia: Using an LLM-as-a-Judge to Create the First Chinese Counterspeech Dataset1 Jan 2025
- 2024Beyond Discrete Personas: Personality Modeling Through Journal Intensive Conversations15 Dec 2024
- 2024Active Learning for Robust and Representative LLM Generation in Safety-Critical Scenarios14 Oct 2024
- 2024Surgical, Cheap, and Flexible: Mitigating False Refusal in Language Models via Single Vector Ablation4 Oct 2024
- 2024CHBench: A Chinese Dataset for Evaluating Health in Large Language Models24 Sep 2024
- 2024"Yes, My LoRD." Guiding Language Model Extraction with Locality Reinforced Distillation4 Sep 2024
12 newest of 56 All 56 (JSON)