mlsanityData to 7 Oct 2026

Open-Sourcing Highly Capable Foundation Models: An evaluation of risks, benefits, and alternative methods for pursuing open-source objectives

arXiv 2311.09227 ↗First posted 29 Sep 2023cs.CY cs.AI cs.SEcited by 31

Not on the map. Why?

Abstract (arXiv)

Recent decisions by leading AI labs to either open-source their models or to restrict access to their models has sparked debate about whether, and how, increasingly capable AI models should be shared. Open-sourcing in AI typically refers to making model architecture and weights freely and publicly accessible for anyone to modify, study, build on, and use. This offers advantages such as enabling external oversight, accelerating progress, and decentralizing control over AI development and use. However, it also presents a growing potential for misuse and unintended consequences. This paper offers an examination of the risks and benefits of open-sourcing highly capable foundation models. While open-sourcing has historically provided substantial net benefits for most software and AI development processes, we argue that for some highly capable foundation models likely to be developed in the near future, open-sourcing may pose sufficiently extreme risks to outweigh the benefits. In such a case, highly capable foundation models should not be open-sourced, at least not initially. Alternative strategies, including non-open-source model sharing options, are explored. The paper concludes with recommendations for developers, standard-setting bodies, and governments for establishing safe and responsible model sharing practices and preserving open-source benefits where safe.

Key facts. Cited by 31 papers in the map (data through 7 Oct 2026). Builds on 59 of its 218 references that are in the map. First posted on arXiv 29 Sep 2023.

Builds on

59 of 218 references.

References · 59

  1. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
  2. 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
  3. 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
  4. 2020Measuring Massive Multitask Language Understandingcited by 7,768
  5. 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,539
  6. 2021On the Opportunities and Risks of Foundation Modelscited by 3,961
  7. 2023QLoRA: Efficient Finetuning of Quantized LLMscited by 3,355
  8. 2022Training Compute-Optimal Large Language Modelscited by 2,927
  9. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 2,914
  10. 2022Emergent Abilities of Large Language Modelscited by 2,483
  11. 2019Energy and Policy Considerations for Deep Learning in NLPcited by 1,242
  12. 2022Red Teaming Language Models with Language Modelscited by 983
38 more
  1. 2023Self-Supervised Learning from Images with a Joint-Embedding Predictive Architecturecited by 982
  2. 2021Ethical and social risks of harm from Language Modelscited by 957
  3. 2023Distilling Step-by-Step! Outperforming Larger Language Models with Less Training Data and Smaller Model Sizescited by 710
  4. 2022Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learnedcited by 702
  5. 2023ChemCrow: Augmenting large-language models with chemistry toolscited by 609
  6. 2021Carbon Emissions and Large Neural Network Trainingcited by 561
  7. 2019Release Strategies and the Social Impacts of Language Modelscited by 505
  8. 2023Larger language models do in-context learning differentlycited by 386
  9. 2020Closing the AI Accountability Gap: Defining an End-to-End Framework for Internal Algorithmic Auditingcited by 380
  10. 2021Unsolved Problems in ML Safetycited by 291
  11. 2022Red-Teaming the Stable Diffusion Safety Filtercited by 257
  12. 2023The False Promise of Imitating Proprietary LLMscited by 254
  13. 2022Will we run out of data? Limits of LLM scaling based on human-generated datacited by 187
  14. 2023Model evaluation for extreme riskscited by 167
  15. 2020Toward Trustworthy AI Development: Mechanisms for Supporting Verifiable Claimscited by 163
  16. 2022Compute Trends Across Three Eras of Machine Learningcited by 161
  17. 2018The Malicious Use of Artificial Intelligence: Forecasting, Prevention, and Mitigationcited by 159
  18. 2023Generative Language Models and Automated Influence Operations: Emerging Threats and Potential Mitigationscited by 157
  19. 2023Should ChatGPT be Biased? Challenges and Risks of Bias in Large Language Modelscited by 144
  20. 2022Sociotechnical Harms of Algorithmic Systems: Scoping a Taxonomy for Harm Reductioncited by 137
  21. 2023Auditing large language models: a three-layered approachcited by 135
  22. 2023Emergent autonomous scientific research capabilities of large language modelscited by 127
  23. 2023Abusing Images and Sounds for Indirect Instruction Injection in Multi-Modal LLMscited by 117
  24. 2023Frontier AI Regulation: Managing Emerging Risks to Public Safetycited by 95
  25. 2023Evaluating the Social Impact of Generative AI Systems in Systems and Societycited by 91
  26. 2020Responsible Disclosure of Generative Models Using Scalable Fingerprintingcited by 90
  27. 2023Eight Things to Know about Large Language Modelscited by 73
  28. 2022Outsider Oversight: Designing a Third Party Audit Ecosystem for AI Governancecited by 67
  29. 2023The Gradient of Generative AI Release: Methods and Considerationscited by 63
  30. 2023Spear Phishing With Large Language Modelscited by 49
  31. 2023Making AI Less "Thirsty": Uncovering and Addressing the Secret Water Footprint of AI Modelscited by 44
  32. 2023Artificial intelligence and biological misuse: Differentiating risks of language models and biological design toolscited by 43
  33. 2022Structured access: an emerging paradigm for safe AI deploymentcited by 40
  34. 2021The Threat of Offensive AI to Organizationscited by 37
  35. 2023Can large language models democratize access to dual-use biotechnology?cited by 33
  36. 2023Democratising AI: Multiple Meanings, Goals, and Methodscited by 29
  37. 2023Towards best practices in AGI safety and governance: A survey of expert opinioncited by 27
  38. 2022A Hazard Analysis Framework for Code Synthesis Large Language Modelscited by 22

50 most cited of 59 All 59 (JSON)

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2023: 4; 2024: 14; 2025: 6; 2026: 7.

31 papers.

Sort:

By area:

  1. 2024Black-Box Access is Insufficient for Rigorous AI Auditscited by 123
  2. 2025A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deploymentcited by 110
  3. 2024On the Societal Impact of Open Foundation Modelscited by 64
  4. 2024Language Models Resist Alignment: Evidence From Data Compressioncited by 50
  5. 2023Will releasing the weights of future large language models grant widespread access to pandemic agents?cited by 25
  6. 2024Can Editing LLMs Inject Harm?cited by 22
  7. 2024The Model Openness Framework: Promoting Completeness and Openness for Reproducibility, Transparency, and Usability in Artificial Intelligencecited by 21
  8. 2024The AI Community Building the Future? A Quantitative Analysis of Development Activity on Hugging Face Hubcited by 18
  9. 2024The Open Source Advantage in Large Language Models (LLMs)cited by 18
  10. 2024Near to Mid-term Risks and Opportunities of Open-Source Generative AIcited by 13
  11. 2023Towards Publicly Accountable Frontier LLMs: Building an External Scrutiny Ecosystem under the ASPIRE Frameworkcited by 11
  12. 2024Risks and Opportunities of Open-Source Generative AIcited by 11
19 more
  1. 2023Hazards from Increasingly Accessible Fine-Tuning of Downloadable Foundation Modelscited by 7
  2. 2023Towards Responsible Governance of Biological Design Toolscited by 5
  3. 2024Why Companies "Democratise" Artificial Intelligence: The Case of Open Source Software Donationscited by 4
  4. 2024Risk Sources and Risk Management Measures in Support of Standards for General-Purpose AI Systemscited by 2
  5. 2025Technical Requirements for Halting Dangerous AI Activitiescited by 2
  6. 2025The Safety Gap Toolkit: Evaluating Hidden Dangers of Open-Source Modelscited by 2
  7. 2025From Firewalls to Frontiers: AI Red-Teaming is a Domain-Specific Evolution of Cyber Red-Teamingcited by 2
  8. 2024PRISM: A Design Framework for Open-Source Foundation Model Safetycited by 1
  9. 2025Beyond the Cloud: Assessing the Benefits and Drawbacks of Local LLM Deployment for Translatorscited by 1
  10. 2026Strategic commitments shape collective cybersecurity under AI inequalitycited by 1
  11. 2024A Social Outcomes and Priorities centered (SOP) Framework for AI policycited by 0
  12. 2024Considerations Influencing Offense-Defense Dynamics From Artificial Intelligencecited by 0
  13. 2025Opening the Scope of Openness in AIcited by 0
  14. 2026Unbounded Harms, Bounded Law: Liability in the Age of Borderless AIcited by 0
  15. 2026A governance horizon for ethical-use constraints in open-weight AI modelscited by 0
  16. 2026Is Decentralized AI Governable? From Regulative Policy to Constitutive Protocolcited by 0
  17. 2026Toward Open Weight Models Without Risks: Separating Public and Private Capabilities in LLMscited by 0
  18. 2026FLARE-AI: Flaw Reporting for AIcited by 0
  19. 2026Position: AI/ML Deepfake Research is Misaligned with AI-Generated Non-Consensual Intimate Imagery (AIG-NCII)cited by 0