mlsanityData to 7 Oct 2026

Red teaming ChatGPT via Jailbreaking: Bias, Robustness, Reliability and Toxicity

arXiv 2301.12867 ↗First posted 30 Jan 2023cs.CL cs.SEcited by 86

On the map: LLM safety and security → Prompt injection and agent security

Abstract (arXiv)

Recent breakthroughs in natural language processing (NLP) have permitted the synthesis and comprehension of coherent text in an open-ended way, therefore translating the theoretical algorithms into practical applications. The large language models (LLMs) have significantly impacted businesses such as report summarization software and copywriters. Observations indicate, however, that LLMs may exhibit social prejudice and toxicity, posing ethical and societal dangers of consequences resulting from irresponsibility. Large-scale benchmarks for accountable LLMs should consequently be developed. Although several empirical investigations reveal the existence of a few ethical difficulties in advanced LLMs, there is little systematic examination and user study of the risks and harmful behaviors of current LLM usage. To further educate future efforts on constructing ethical LLMs responsibly, we perform a qualitative research method called ``red teaming'' on OpenAI's ChatGPTfootnoteIn this paper, ChatGPT refers to the version released on Dec 15th. to better understand the practical features of ethical dangers in recent LLMs. We analyze ChatGPT comprehensively from four perspectives: 1) textitBias 2) textitReliability 3) textitRobustness 4) textitToxicity. In accordance with our stated viewpoints, we empirically benchmark ChatGPT on multiple sample datasets. We find that a significant number of ethical risks cannot be addressed by existing benchmarks, and hence illustrate them via additional case studies. In addition, we examine the implications of our findings on AI ethics and harmal behaviors of ChatGPT, as well as future problems and practical design considerations for responsible LLMs. We believe that our findings may give light on future efforts to determine and mitigate the ethical hazards posed by machines in LLM applications.

Key facts. Cited by 86 papers in the map (data through 7 Oct 2026). Placed in Prompt injection and agent security, one of 12 directions in LLM safety and security. Builds on 66 of its 97 references that are in the map. First posted on arXiv 30 Jan 2023.

Builds on

66 of 97 references.

Closest ancestors · 1

Same direction, newest first

  1. 2022Red Teaming Language Models with Language Models7 Feb

Other references · 65

  1. 2020Language Models are Few-Shot Learnerscited by 32,199
  2. 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,491
  3. 2020Scaling Laws for Neural Language Modelscited by 6,411
  4. 2022PaLM: Scaling Language Modeling with Pathwayscited by 5,304
  5. 2021On the Opportunities and Risks of Foundation Modelscited by 3,961
  6. 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,919
  7. 2022Emergent Abilities of Large Language Modelscited by 2,483
  8. 2021Learning to Prompt for Vision-Language Modelscited by 2,269
  9. 2020Extracting Training Data from Large Language Modelscited by 2,144
  10. 2019BoolQ: Exploring the Surprising Difficulty of Natural Yes/No Questionscited by 2,140
  11. 2018Can a Suit of Armor Conduct Electricity? A New Dataset for Open Book Question Answeringcited by 2,114
  12. 2022Survey of Hallucination in Natural Language Generationcited by 2,056
38 more
  1. 2022BLOOM: A 176B-Parameter Open-Access Multilingual Language Modelcited by 1,968
  2. 2018A Call for Clarity in Reporting BLEU Scorescited by 1,790
  3. 2022No Language Left Behind: Scaling Human-Centered Machine Translationcited by 1,290
  4. 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,235
  5. 2021Scaling Language Models: Methods, Analysis & Insights from Training Gophercited by 1,199
  6. 2021Ethical and social risks of harm from Language Modelscited by 957
  7. 2020StereoSet: Measuring stereotypical bias in pretrained language modelscited by 911
  8. 2022GLM-130B: An Open Bilingual Pre-trained Modelcited by 837
  9. 2021Deduplicating Training Data Makes Language Models Bettercited by 705
  10. 2021BBQ: A Hand-Built Bias Benchmark for Question Answeringcited by 683
  11. 2023A Watermark for Large Language Modelscited by 667
  12. 2022AudioLM: a Language Modeling Approach to Audio Generationcited by 611
  13. 2020Recipes for building an open-domain chatbotcited by 593
  14. 2021The FLORES-101 Evaluation Benchmark for Low-Resource and Multilingual Machine Translationcited by 556
  15. 2021Editing Factual Knowledge in Language Modelscited by 548
  16. 2020A Survey of Deep Active Learningcited by 547
  17. 2021Fast Model Editing at Scalecited by 491
  18. 2020BERT-ATTACK: Adversarial Attack Against BERT Using BERTcited by 488
  19. 2018Generating Natural Language Adversarial Examplescited by 422
  20. 2019Confident Learning: Estimating Uncertainty in Dataset Labelscited by 411
  21. 2021BOLD: Dataset and Metrics for Measuring Biases in Open-Ended Language Generationcited by 410
  22. 2021Persistent Anti-Muslim Bias in Large Language Modelscited by 376
  23. 2022Deduplicating Training Data Mitigates Privacy Risks in Language Modelscited by 309
  24. 2021Towards Understanding and Mitigating Social Biases in Language Modelscited by 294
  25. 2022AudioGen: Textually Guided Audio Generationcited by 292
  26. 2022Diffsound: Discrete Diffusion Model for Text-to-sound Generationcited by 256
  27. 2022CoAuthor: Designing a Human-AI Collaborative Writing Dataset for Exploring Language Model Capabilitiescited by 245
  28. 2021Sustainable AI: Environmental Implications, Challenges and Opportunitiescited by 242
  29. 2020Modifying Memories in Transformer Modelscited by 222
  30. 2020The Computational Limits of Deep Learningcited by 188
  31. 2021Process for Adapting Language Models to Society (PALMS) with Values-Targeted Datasetscited by 179
  32. 2021Towards Continual Knowledge Learning of Language Modelscited by 172
  33. 2023SantaCoder: don't reach for the stars!cited by 169
  34. 2023Generative Language Models and Automated Influence Operations: Emerging Threats and Potential Mitigationscited by 157
  35. 2021Bias Out-of-the-Box: An Empirical Analysis of Intersectional Occupational Biases in Popular Generative Language Modelscited by 141
  36. 2017ParlAI: A Dialog Research Software Platformcited by 139
  37. 2018Deep Learning for Sentiment Analysis : A Surveycited by 139
  38. 2023Scaling Laws for Generative Mixed-Modal Language Modelscited by 131

50 most cited of 65 All 65 (JSON)

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2023: 24; 2024: 39; 2025: 17; 2026: 6.

86 papers.

Sort:

By area:

  1. 2023AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Modelscited by 738
  2. 2023Trustworthy LLMs: a Survey and Guideline for Evaluating Large Language Models' Alignmentcited by 394
  3. 2023Low-Resource Languages Jailbreak GPT-4cited by 290
  4. 2024PKU-SafeRLHF: Towards Multi-Level Safety Alignment for LLMs with Human Preferencecited by 252
  5. 2023A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easilycited by 242
  6. 2023Automatically Correcting Large Language Models: Surveying the landscape of diverse self-correction strategiescited by 236
  7. 2023DetectLLM: Leveraging Log Rank Information for Zero-Shot Detection of Machine-Generated Textcited by 207
  8. 2024Large Language Models for Education: A Survey and Outlookcited by 185
  9. 2023A Survey of Large Language Models for Healthcare: from Data, Technology, and Applications to Accountability and Ethicscited by 162
  10. 2024PrivacyLens: Evaluating Privacy Norm Awareness of Language Models in Actioncited by 161
  11. 2023From Word Models to World Models: Translating from Natural Language to the Probabilistic Language of Thoughtcited by 118
  12. 2023A Survey on Fairness in Large Language Modelscited by 91
38 more
  1. 2024A Systematic Survey and Critical Review on Evaluating Large Language Models: Challenges, Limitations, and Recommendationscited by 84
  2. 2024Red-Teaming for Generative AI: Silver Bullet or Security Theater?cited by 81
  3. 2024Breaking Agents: Compromising Autonomous LLM Agents Through Malfunction Amplificationcited by 80
  4. 2023Cognitive Overload: Jailbreaking Large Language Models with Overloaded Logical Thinkingcited by 78
  5. 2023GPTEval: A Survey on Assessments of ChatGPT and GPT-4cited by 73
  6. 2024PAPILLON: Privacy Preservation from Internet-based and Local Language Model Ensemblescited by 54
  7. 2024From Pixels to Prose: A Large Dataset of Dense Image Captionscited by 52
  8. 2024Instruction Backdoor Attacks Against Customized LLMscited by 50
  9. 2023Value FULCRA: Mapping Large Language Models to the Multidimensional Spectrum of Basic Human Valuescited by 49
  10. 2023From Instructions to Intrinsic Human Values -- A Survey of Alignment Goals for Big Modelscited by 45
  11. 2024Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)cited by 44
  12. 2025SaLoRA: Safety-Alignment Preserved Low-Rank Adaptationcited by 39
  13. 2024Securing Large Language Models: Threats, Vulnerabilities and Responsible Practicescited by 36
  14. 2023BLESS: Benchmarking Large Language Models on Sentence Simplificationcited by 34
  15. 2024Jailbreaking and Mitigation of Vulnerabilities in Large Language Modelscited by 33
  16. 2024Unmasking and Quantifying Racial Bias of Large Language Models in Medical Report Generationcited by 31
  17. 2024A Chain-of-Thought Prompting Approach with LLMs for Evaluating Students' Formative Assessment Responses in Sciencecited by 31
  18. 2024The Ethics of Interaction: Mitigating Security Threats in LLMscited by 30
  19. 2023Unveiling Gender Bias in Terms of Profession Across LLMs: Analyzing and Addressing Sociological Implicationscited by 29
  20. 2024Learning to Refine with Fine-Grained Natural Language Feedbackcited by 27
  21. 2024Security of AI Agentscited by 24
  22. 2025The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMscited by 24
  23. 2024Astraios: Parameter-Efficient Instruction Tuning Code Large Language Modelscited by 23
  24. 2024Faster-GCG: Efficient Discrete Optimization Jailbreak Attacks against Aligned Large Language Modelscited by 23
  25. 2023Weakly Supervised Detection of Hallucinations in LLM Activationscited by 20
  26. 2024Mapping the Ethics of Generative AI: A Comprehensive Scoping Reviewcited by 19
  27. 2024SciSafeEval: A Comprehensive Benchmark for Safety Alignment of Large Language Models in Scientific Taskscited by 17
  28. 2023ALLURE: Auditing and Improving LLM-based Evaluation of Text using Iterative In-Context-Learningcited by 15
  29. 2024STAR: SocioTechnical Approach to Red Teaming Language Modelscited by 13
  30. 2024Course-Correction: Safety Alignment Using Synthetic Preferencescited by 13
  31. 2023Through the Lens of Core Competency: Survey on Evaluation of Large Language Modelscited by 12
  32. 2023A Security Risk Taxonomy for Prompt-Based Interaction With Large Language Modelscited by 12
  33. 2024Efficient Detection of Toxic Prompts in Large Language Modelscited by 11
  34. 2023Detecting ChatGPT: A Survey of the State of Detecting ChatGPT-Generated Textcited by 10
  35. 2024AI Alignment through Reinforcement Learning from Human Feedback? Contradictions and Limitationscited by 10
  36. 2024Fairness Definitions in Language Models Explainedcited by 10
  37. 2025BBQ-V: Benchmarking Visual Stereotype Bias in Large Multimodal Modelscited by 10
  38. 2025Is Safety Standard Same for Everyone? User-Specific Safety Evaluation of Large Language Modelscited by 10

50 most cited of 86 All 86 (JSON)