Towards Safer Generative Language Models: A Survey on Safety Risks, Evaluations, and Improvements
Not on the map. Why?
Abstract (arXiv)
As generative large model capabilities advance, safety concerns become more pronounced in their outputs. To ensure the sustainable growth of the AI ecosystem, it's imperative to undertake a holistic evaluation and refinement of associated safety risks. This survey presents a framework for safety research pertaining to large models, delineating the landscape of safety risks as well as safety evaluation and improvement methods. We begin by introducing safety issues of wide concern, then delve into safety evaluation methods for large models, encompassing preference-based testing, adversarial attack approaches, issues detection, and other advanced evaluation methods. Additionally, we explore the strategies for enhancing large model safety from training to deployment, highlighting cutting-edge safety approaches for each stage in building large models. Finally, we discuss the core challenges in advancing towards more responsible AI, including the interpretability of safety mechanisms, ongoing safety issues, and robustness against malicious attacks. Through this survey, we aim to provide clear technical guidance for safety researchers and encourage further study on the safety of large models.
Key facts. Cited by 14 papers in the map (data through 7 Oct 2026). Builds on 64 of its 109 references that are in the map. First posted on arXiv 18 Feb 2023.
Builds on
64 of 109 references.
References · 64
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,266
- 2021Prefix-Tuning: Optimizing Continuous Prompts for Generationcited by 3,878
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,634
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 2,950
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,235
- 2022Diffusion-LM Improves Controllable Text Generationcited by 1,006
- 2022Red Teaming Language Models with Language Modelscited by 983
- 2021Ethical and social risks of harm from Language Modelscited by 957
38 more
- 2020StereoSet: Measuring stereotypical bias in pretrained language modelscited by 911
- 2016Bag of Tricks for Efficient Text Classificationcited by 869
- 2018The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networkscited by 847
- 2019Plug and Play Language Models: A Simple Approach to Controlled Text Generationcited by 793
- 2022Ignore Previous Prompt: Attack Techniques For Language Modelscited by 760
- 2019CTRL: A Conditional Transformer Language Model for Controllable Generationcited by 754
- 2017Automated Hate Speech Detection and the Problem of Offensive Languagecited by 724
- 2020Aligning AI With Shared Human Valuescited by 706
- 2020CrowS-Pairs: A Challenge Dataset for Measuring Social Biases in Masked Language Modelscited by 703
- 2021BBQ: A Hand-Built Bias Benchmark for Question Answeringcited by 683
- 2019The Woman Worked as a Babysitter: On Biases in Language Generationcited by 540
- 2022Improving alignment of dialogue agents via targeted human judgementscited by 527
- 2021DExperts: Decoding-Time Controlled Text Generation with Experts and Anti-Expertscited by 434
- 2022ToxiGen: A Large-Scale Machine-Generated Dataset for Adversarial and Implicit Hate Speech Detectioncited by 419
- 2020HateXplain: A Benchmark Dataset for Explainable Hate Speech Detectioncited by 403
- 2019Social Bias Frames: Reasoning about Social and Power Implications of Languagecited by 377
- 2020GeDi: Generative Discriminator Guided Sequence Generationcited by 377
- 2021FUDGE: Controlled Text Generation With Future Discriminatorscited by 374
- 2021Self-Diagnosis and Self-Debiasing: A Proposal for Reducing Corpus-Based Bias in NLPcited by 336
- 2019Predicting the Type and Target of Offensive Posts in Social Mediacited by 268
- 2020Social Chemistry 101: Learning to Reason about Social and Moral Normscited by 253
- 2016Ex Machina: Personal Attacks Seen at Scalecited by 208
- 2020HateBERT: Retraining BERT for Abusive Language Detection in Englishcited by 206
- 2020Information Leakage in Embedding Modelscited by 199
- 2019Build it Break it Fix it for Dialogue Safety: Robustness from Adversarial Human Attackcited by 176
- 2021Challenges in Detoxifying Language Modelscited by 169
- 2020Recipes for Safety in Open-domain Chatbotscited by 168
- 2020Moral Stories: Situated Reasoning about Norms, Intents, Actions, and their Consequencescited by 133
- 2022ProsocialDialog: A Prosocial Backbone for Conversational Agentscited by 109
- 2020Scruples: A Corpus of Community Ethical Judgments on 32,000 Real-Life Anecdotescited by 100
- 2022The Moral Integrity Corpus: A Benchmark for Ethical Dialogue Systemscited by 92
- 2020A Large-Scale Chinese Short-Text Conversation Datasetcited by 77
- 2021Anticipating Safety Issues in E2E Conversational AI: Framework and Toolingcited by 77
- 2021On the Safety of Conversational Models: Taxonomy, Dataset, and Benchmarkcited by 73
- 2018Challenges for Toxic Comment Classification: An In-Depth Error Analysiscited by 55
- 2020SOLID: A Large-Scale Semi-Supervised Dataset for Offensive Language Identificationcited by 53
- 2021Text Detoxification using Large Pre-trained Neural Modelscited by 52
- 2019Offensive Language and Hate Speech Detection for Danishcited by 48
50 most cited of 64 All 64 (JSON)
Built on by
Citing papers per year: 2023: 6; 2024: 5; 2025: 2; 2026: 1.
14 papers.
Sort:
By area:
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2023Red-Teaming Large Language Models using Chain of Utterances for Safety-Alignmentcited by 213
- 2023Safety Assessment of Chinese Large Language Modelscited by 82
- 2023Beyond the Safeguards: Exploring the Security Risks of ChatGPTcited by 36
- 2024MentalManip: A Dataset For Fine-grained Analysis of Mental Manipulation in Conversationscited by 21
- 2023A Security Risk Taxonomy for Prompt-Based Interaction With Large Language Modelscited by 12
- 2023"Oops, Did I Just Say That?" Testing and Repairing Unethical Suggestions of Large Language Models with Suggest-Critique-Reflect Processcited by 9
- 2024AutoDetect: Towards a Unified Framework for Automated Weakness Detection in Large Language Modelscited by 9
- 2024Building a Domain-specific Guardrail Model in Productioncited by 6
- 2024Goal Hijacking Attack on Large Language Models via Pseudo-Conversation Injectioncited by 4
- 2025REVEAL: Multi-turn Evaluation of Image-Input Harms for Vision LLMcited by 4
- 2025Are Bias Evaluation Methods Biased ?cited by 4
- 2026The safety failures we are not instrumenting: a perspective on hidden safety-critical challenges in modern AI systems21 Jul 2026
- 2025Are Bias Evaluation Methods Biased ?20 Jun 2025
- 2025REVEAL: Multi-turn Evaluation of Image-Input Harms for Vision LLM7 May 2025
- 2024Goal Hijacking Attack on Large Language Models via Pseudo-Conversation Injection31 Oct 2024
- 2024Building a Domain-specific Guardrail Model in Production24 Jul 2024
- 2024AutoDetect: Towards a Unified Framework for Automated Weakness Detection in Large Language Models24 Jun 2024
- 2024MentalManip: A Dataset For Fine-grained Analysis of Mental Manipulation in Conversations26 May 2024
- 2024COBIAS: Assessing the Contextual Reliability of Bias Benchmarks for Language Models22 Feb 2024
- 2023A Security Risk Taxonomy for Prompt-Based Interaction With Large Language Models19 Nov 2023
- 2023Red-Teaming Large Language Models using Chain of Utterances for Safety-Alignment18 Aug 2023
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Models18 Jul 2023
- 2023Beyond the Safeguards: Exploring the Security Risks of ChatGPT13 May 2023
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2023Safety Assessment of Chinese Large Language Modelscited by 82
- 2023Beyond the Safeguards: Exploring the Security Risks of ChatGPTcited by 36
- 2024MentalManip: A Dataset For Fine-grained Analysis of Mental Manipulation in Conversationscited by 21
- 2023A Security Risk Taxonomy for Prompt-Based Interaction With Large Language Modelscited by 12
- 2023"Oops, Did I Just Say That?" Testing and Repairing Unethical Suggestions of Large Language Models with Suggest-Critique-Reflect Processcited by 9
- 2024AutoDetect: Towards a Unified Framework for Automated Weakness Detection in Large Language Modelscited by 9
- 2024Goal Hijacking Attack on Large Language Models via Pseudo-Conversation Injectioncited by 4
- 2025REVEAL: Multi-turn Evaluation of Image-Input Harms for Vision LLMcited by 4
- 2025Are Bias Evaluation Methods Biased ?cited by 4
- 2024COBIAS: Assessing the Contextual Reliability of Bias Benchmarks for Language Modelscited by 3
- 2026The safety failures we are not instrumenting: a perspective on hidden safety-critical challenges in modern AI systemscited by 0
- 2026The safety failures we are not instrumenting: a perspective on hidden safety-critical challenges in modern AI systems21 Jul 2026
- 2025Are Bias Evaluation Methods Biased ?20 Jun 2025
- 2025REVEAL: Multi-turn Evaluation of Image-Input Harms for Vision LLM7 May 2025
- 2024Goal Hijacking Attack on Large Language Models via Pseudo-Conversation Injection31 Oct 2024
- 2024AutoDetect: Towards a Unified Framework for Automated Weakness Detection in Large Language Models24 Jun 2024
- 2024MentalManip: A Dataset For Fine-grained Analysis of Mental Manipulation in Conversations26 May 2024
- 2024COBIAS: Assessing the Contextual Reliability of Bias Benchmarks for Language Models22 Feb 2024
- 2023A Security Risk Taxonomy for Prompt-Based Interaction With Large Language Models19 Nov 2023
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Models18 Jul 2023
- 2023Beyond the Safeguards: Exploring the Security Risks of ChatGPT13 May 2023
- 2023"Oops, Did I Just Say That?" Testing and Repairing Unethical Suggestions of Large Language Models with Suggest-Critique-Reflect Process4 May 2023
- 2023Safety Assessment of Chinese Large Language Models20 Apr 2023