FFT: Towards Harmlessness Evaluation and Analysis for LLMs with Factuality, Fairness, Toxicity
Not on the map. Why?
Abstract (arXiv)
The widespread of generative artificial intelligence has heightened concerns about the potential harms posed by AI-generated texts, primarily stemming from factoid, unfair, and toxic content. Previous researchers have invested much effort in assessing the harmlessness of generative language models. However, existing benchmarks are struggling in the era of large language models (LLMs), due to the stronger language generation and instruction following capabilities, as well as wider applications. In this paper, we propose FFT, a new benchmark with 2116 elaborated-designed instances, for LLM harmlessness evaluation with factuality, fairness, and toxicity. To investigate the potential harms of LLMs, we evaluate 9 representative LLMs covering various parameter scales, training stages, and creators. Experiments show that the harmlessness of LLMs is still under-satisfactory, and extensive analysis derives some insightful findings that could inspire future research for harmless LLM research.
Key facts. Cited by 22 papers in the map (data through 7 Oct 2026). Builds on 42 of its 52 references that are in the map. First posted on arXiv 30 Nov 2023.
Builds on
42 of 52 references.
References · 42
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,491
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,634
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,919
- 2017TriviaQA: A Large Scale Distantly Supervised Challenge Dataset for Reading Comprehensioncited by 2,895
- 2022Beyond the Imitation Game: Quantifying and extrapolating the capabilities of language modelscited by 1,970
- 2018Know What You Don't Know: Unanswerable Questions for SQuADcited by 1,538
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,235
- 2023LIMA: Less Is More for Alignmentcited by 1,080
- 2020StereoSet: Measuring stereotypical bias in pretrained language modelscited by 911
30 more
- 2022GPT-NeoX-20B: An Open-Source Autoregressive Language Modelcited by 711
- 2020CrowS-Pairs: A Challenge Dataset for Measuring Social Biases in Masked Language Modelscited by 703
- 2021BBQ: A Hand-Built Bias Benchmark for Question Answeringcited by 683
- 2023Capabilities of GPT-4 on Medical Challenge Problemscited by 630
- 2023Jailbreaking ChatGPT via Prompt Engineering: An Empirical Studycited by 478
- 2021BOLD: Dataset and Metrics for Measuring Biases in Open-Ended Language Generationcited by 410
- 2023The Reversal Curse: LLMs trained on "A is B" fail to learn "B is A"cited by 399
- 2016NewsQA: A Machine Comprehension Datasetcited by 330
- 2023Sentiment Analysis in the Era of Large Language Models: A Reality Checkcited by 262
- 2023Reasoning or Reciting? Exploring the Capabilities and Limitations of Language Models Through Counterfactual Taskscited by 243
- 2023Do Large Language Models Know What They Don't Know?cited by 238
- 2022On Second Thought, Let's Not Think Step by Step! Bias and Toxicity in Zero-Shot Reasoningcited by 191
- 2023Can LLM-Generated Misinformation Be Detected?cited by 173
- 2022"I'm sorry to hear that": Finding New Biases in Language Models with a Holistic Descriptor Datasetcited by 160
- 2021A survey on datasets for fairness-aware machine learningcited by 157
- 2023The Troubling Emergence of Hallucination in Large Language Models -- An Extensive Definition, Quantification, and Prescriptive Remediationscited by 130
- 2023Generating Benchmarks for Factuality Evaluation of Language Modelscited by 103
- 2021Quantifying Social Biases in NLP: A Generalization and Empirical Comparison of Extrinsic Fairness Metricscited by 83
- 2022On the Intrinsic and Extrinsic Fairness Evaluation Metrics for Contextualized Language Representationscited by 75
- 2021On the Safety of Conversational Models: Taxonomy, Dataset, and Benchmarkcited by 73
- 2023Do LLMs Understand Social Knowledge? Evaluating the Sociability of Large Language Models with SocKET Benchmarkcited by 62
- 2023Evaluating and Improving Tool-Augmented Computation-Intensive Math Reasoningcited by 49
- 2023ChatGPT vs Human-authored Text: Insights into Controllable Text Summarization and Sentence Style Transfercited by 49
- 2023Position: AI Evaluation Should Learn from How We Test Humanscited by 36
- 2023ReEval: Automatic Hallucination Evaluation for Retrieval-Augmented Large Language Models via Transferable Adversarial Attackscited by 28
- 2023Multilingual Holistic Bias: Extending Descriptors and Patterns to Unveil Demographic Biases in Languages at Scalecited by 23
- 2023A Paradigm Shift: The Future of Machine Translation Lies with Large Language Modelscited by 19
- 2023Understanding Multi-Turn Toxic Behaviors in Open-Domain Chatbotscited by 14
- 2023Leveraging Large Language Models for Topic Classification in the Domain of Public Affairscited by 13
- 2023Monotonicity for AI ethics and society: An empirical study of the monotonic neural additive model in criminology, education, health care, and financecited by 4
Built on by
Citing papers per year: 2024: 13; 2025: 8; 2026: 1.
22 papers.
Sort:
By area:
- 2024Agent-SafetyBench: Evaluating the Safety of LLM Agentscited by 280
- 2024Attacks, Defenses and Evaluations for LLM Conversation Safety: A Surveycited by 124
- 2024SafetyPrompts: a Systematic Review of Open Datasets for Evaluating and Improving Large Language Model Safetycited by 75
- 2024A Comprehensive Survey of Large Language Models and Multimodal Large Language Models in Medicinecited by 45
- 2024Securing Large Language Models: Threats, Vulnerabilities and Responsible Practicescited by 36
- 2025The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMscited by 24
- 2024CLAVE: An Adaptive Framework for Evaluating Values of LLM Generated Responsescited by 23
- 2024From LLMs to MLLMs: Exploring the Landscape of Multimodal Jailbreakingcited by 22
- 2025CASE-Bench: Context-Aware SafEty Benchmark for Large Language Modelscited by 17
- 2024Decoding the AI Pen: Techniques and Challenges in Detecting AI-Generated Textcited by 14
- 2024GASP: Efficient Black-Box Generation of Adversarial Suffixes for Jailbreaking LLMscited by 12
- 2024Towards More Trustworthy and Interpretable LLMs for Code through Syntax-Grounded Explanationscited by 10
10 more
- 2024Your Large Language Model is Secretly a Fairness Proponent and You Should Prompt it Like Onecited by 9
- 2025Guardians and Offenders: A Survey on Harmful Content Generation and Safety Mitigation of LLMcited by 8
- 2025From ASR to ASP: Evaluating Prompt Attack Vulnerabilities Against Open-Source LLMscited by 6
- 2025ShieldVLM: Safeguarding the Multimodal Implicit Toxicity via Deliberative Reasoning with LVLMscited by 5
- 2024Weak-to-Strong Generalization beyond Accuracy: a Pilot Study in Safety, Toxicity, and Legal Reasoningcited by 4
- 2026Optimal Transport for LLM Reward Modeling from Noisy Preferencecited by 3
- 2025FAIRGAMER: Evaluating Social Biases in LLM-Based Video Game NPCscited by 1
- 2024Fine-Grained Detoxification via Instance-Level Prefixes for Large Language Modelscited by 0
- 2025Mapping the Trust Terrain: LLMs in Software Engineering -- Insights and Perspectivescited by 0
- 2025InvThink: Premortem Reasoning for Safer Language Modelscited by 0
- 2026Optimal Transport for LLM Reward Modeling from Noisy Preference7 May 2026
- 2025InvThink: Premortem Reasoning for Safer Language Models2 Oct 2025
- 2025FAIRGAMER: Evaluating Social Biases in LLM-Based Video Game NPCs25 Aug 2025
- 2025Guardians and Offenders: A Survey on Harmful Content Generation and Safety Mitigation of LLM7 Aug 2025
- 2025The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMs6 Jun 2025
- 2025From ASR to ASP: Evaluating Prompt Attack Vulnerabilities Against Open-Source LLMs20 May 2025
- 2025ShieldVLM: Safeguarding the Multimodal Implicit Toxicity via Deliberative Reasoning with LVLMs20 May 2025
- 2025Mapping the Trust Terrain: LLMs in Software Engineering -- Insights and Perspectives18 Mar 2025
- 2025CASE-Bench: Context-Aware SafEty Benchmark for Large Language Models24 Jan 2025
- 2024Agent-SafetyBench: Evaluating the Safety of LLM Agents19 Dec 2024
- 2024GASP: Efficient Black-Box Generation of Adversarial Suffixes for Jailbreaking LLMs21 Nov 2024
- 2024Weak-to-Strong Generalization beyond Accuracy: a Pilot Study in Safety, Toxicity, and Legal Reasoning16 Oct 2024
10 more
- 2024CLAVE: An Adaptive Framework for Evaluating Values of LLM Generated Responses15 Jul 2024
- 2024Towards More Trustworthy and Interpretable LLMs for Code through Syntax-Grounded Explanations12 Jul 2024
- 2024From LLMs to MLLMs: Exploring the Landscape of Multimodal Jailbreaking21 Jun 2024
- 2024A Comprehensive Survey of Large Language Models and Multimodal Large Language Models in Medicine14 May 2024
- 2024SafetyPrompts: a Systematic Review of Open Datasets for Evaluating and Improving Large Language Model Safety8 Apr 2024
- 2024Securing Large Language Models: Threats, Vulnerabilities and Responsible Practices19 Mar 2024
- 2024Decoding the AI Pen: Techniques and Challenges in Detecting AI-Generated Text9 Mar 2024
- 2024Fine-Grained Detoxification via Instance-Level Prefixes for Large Language Models23 Feb 2024
- 2024Your Large Language Model is Secretly a Fairness Proponent and You Should Prompt it Like One19 Feb 2024
- 2024Attacks, Defenses and Evaluations for LLM Conversation Safety: A Survey14 Feb 2024
- 2024SafetyPrompts: a Systematic Review of Open Datasets for Evaluating and Improving Large Language Model Safetycited by 75
- 2024GASP: Efficient Black-Box Generation of Adversarial Suffixes for Jailbreaking LLMscited by 12
- 2025From ASR to ASP: Evaluating Prompt Attack Vulnerabilities Against Open-Source LLMscited by 6
- 2025From ASR to ASP: Evaluating Prompt Attack Vulnerabilities Against Open-Source LLMs20 May 2025
- 2024GASP: Efficient Black-Box Generation of Adversarial Suffixes for Jailbreaking LLMs21 Nov 2024
- 2024SafetyPrompts: a Systematic Review of Open Datasets for Evaluating and Improving Large Language Model Safety8 Apr 2024
- 2024Agent-SafetyBench: Evaluating the Safety of LLM Agentscited by 280
- 2024Agent-SafetyBench: Evaluating the Safety of LLM Agents19 Dec 2024
- 2024Attacks, Defenses and Evaluations for LLM Conversation Safety: A Surveycited by 124
- 2024Securing Large Language Models: Threats, Vulnerabilities and Responsible Practicescited by 36
- 2025The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMscited by 24
- 2024CLAVE: An Adaptive Framework for Evaluating Values of LLM Generated Responsescited by 23
- 2024Decoding the AI Pen: Techniques and Challenges in Detecting AI-Generated Textcited by 14
- 2024Towards More Trustworthy and Interpretable LLMs for Code through Syntax-Grounded Explanationscited by 10
- 2024Your Large Language Model is Secretly a Fairness Proponent and You Should Prompt it Like Onecited by 9
- 2025FAIRGAMER: Evaluating Social Biases in LLM-Based Video Game NPCscited by 1
- 2024Fine-Grained Detoxification via Instance-Level Prefixes for Large Language Modelscited by 0
- 2025Mapping the Trust Terrain: LLMs in Software Engineering -- Insights and Perspectivescited by 0
- 2025FAIRGAMER: Evaluating Social Biases in LLM-Based Video Game NPCs25 Aug 2025
- 2025The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMs6 Jun 2025
- 2025Mapping the Trust Terrain: LLMs in Software Engineering -- Insights and Perspectives18 Mar 2025
- 2024CLAVE: An Adaptive Framework for Evaluating Values of LLM Generated Responses15 Jul 2024
- 2024Towards More Trustworthy and Interpretable LLMs for Code through Syntax-Grounded Explanations12 Jul 2024
- 2024Securing Large Language Models: Threats, Vulnerabilities and Responsible Practices19 Mar 2024
- 2024Decoding the AI Pen: Techniques and Challenges in Detecting AI-Generated Text9 Mar 2024
- 2024Fine-Grained Detoxification via Instance-Level Prefixes for Large Language Models23 Feb 2024
- 2024Your Large Language Model is Secretly a Fairness Proponent and You Should Prompt it Like One19 Feb 2024
- 2024Attacks, Defenses and Evaluations for LLM Conversation Safety: A Survey14 Feb 2024