mlsanityData to 7 Oct 2026

On the Societal Impact of Open Foundation Models

arXiv 2403.07918 ↗First posted 27 Feb 2024cs.CY cs.AI cs.LGcited by 64

Not on the map. Why?

Abstract (arXiv)

Foundation models are powerful technologies: how they are released publicly directly shapes their societal impact. In this position paper, we focus on open foundation models, defined here as those with broadly available model weights (e.g. Llama 2, Stable Diffusion XL). We identify five distinctive properties (e.g. greater customizability, poor monitoring) of open foundation models that lead to both their benefits and risks. Open foundation models present significant benefits, with some caveats, that span innovation, competition, the distribution of decision-making power, and transparency. To understand their risks of misuse, we design a risk assessment framework for analyzing their marginal risk. Across several misuse vectors (e.g. cyberattacks, bioweapons), we find that current research is insufficient to effectively characterize the marginal risk of open foundation models relative to pre-existing technologies. The framework helps explain why the marginal risk is low in some cases, clarifies disagreements about misuse risks by revealing that past work has focused on different subsets of the framework with different assumptions, and articulates a way forward for more constructive debate. Overall, our work helps support a more grounded assessment of the societal impact of open foundation models by outlining what research is needed to empirically validate their theoretical benefits and risks.

Key facts. Cited by 64 papers in the map (data through 7 Oct 2026). Builds on 48 of its 138 references that are in the map. First posted on arXiv 27 Feb 2024.

Builds on

48 of 138 references.

References · 48

  1. 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
  2. 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
  3. 2022OPT: Open Pre-trained Transformer Language Modelscited by 3,464
  4. 2023QLoRA: Efficient Finetuning of Quantized LLMscited by 3,355
  5. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 2,914
  6. 2022BLOOM: A 176B-Parameter Open-Access Multilingual Language Modelcited by 1,968
  7. 2023Pythia: A Suite for Analyzing Large Language Models Across Training and Scalingcited by 1,734
  8. 2022Interpretability in the Wild: a Circuit for Indirect Object Identification in GPT-2 smallcited by 1,130
  9. 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!cited by 1,106
  10. 2023LLaMA-Adapter: Efficient Fine-tuning of Language Models with Zero-init Attentioncited by 776
  11. 2022GPT-NeoX-20B: An Open-Source Autoregressive Language Modelcited by 711
  12. 2023A Watermark for Large Language Modelscited by 667
36 more
  1. 2019Defending Against Neural Fake Newscited by 553
  2. 2019Release Strategies and the Social Impacts of Language Modelscited by 505
  3. 2023Sheared LLaMA: Accelerating Language Model Pre-training via Structured Pruningcited by 408
  4. 2022Social Simulacra: Creating Populated Prototypes for Social Computing Systemscited by 300
  5. 2023Shadow Alignment: The Ease of Subverting Safely-Aligned Language Modelscited by 284
  6. 2023MedAlpaca -- An Open-Source Collection of Medical Conversational AI Models and Training Datacited by 282
  7. 2023A Pretrainer's Guide to Training Data: Measuring the Effects of Data Age, Domain Coverage, Quality, & Toxicitycited by 180
  8. 2018The Malicious Use of Artificial Intelligence: Forecasting, Prevention, and Mitigationcited by 159
  9. 2023Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attackscited by 156
  10. 2023Foundation Models and Fair Usecited by 112
  11. 2021Algorithmic Monoculture and Social Welfarecited by 98
  12. 2022Preventing Verbatim Memorization in Language Models Gives a False Sense of Privacycited by 97
  13. 2023Frontier AI Regulation: Managing Emerging Risks to Public Safetycited by 95
  14. 2013Discrimination in Online Ad Deliverycited by 93
  15. 2023Identifying and Mitigating the Security Risks of Generative AIcited by 90
  16. 2022Picking on the Same Person: Does Algorithmic Monoculture lead to Outcome Homogenization?cited by 89
  17. 2022Machine Generated Text: A Comprehensive Survey of Threat Models and Detection Methodscited by 75
  18. 2023The Data Provenance Initiative: A Large Scale Audit of Dataset Licensing & Attribution in AIcited by 73
  19. 2022Do Language Models Plagiarize?cited by 72
  20. 2023The Gradient of Generative AI Release: Methods and Considerationscited by 63
  21. 2021Directional Bias Amplificationcited by 54
  22. 2023JoMA: Demystifying Multilayer Transformers via JOint Dynamics of MLP and Attentioncited by 52
  23. 2018Spectre Attacks: Exploiting Speculative Executioncited by 47
  24. 2023Talkin' 'Bout AI Generation: Copyright and the Generative-AI Supply Chaincited by 45
  25. 2022Structured access: an emerging paradigm for safe AI deploymentcited by 40
  26. 2023Ecosystem Graphs: The Social Footprint of Foundation Modelscited by 31
  27. 2023Open-Sourcing Highly Capable Foundation Models: An evaluation of risks, benefits, and alternative methods for pursuing open-source objectivescited by 31
  28. 2023Typhoon: Thai Large Language Modelscited by 28
  29. 2023Will releasing the weights of future large language models grant widespread access to pandemic agents?cited by 25
  30. 2023Tools for Verifying Neural Models' Training Datacited by 21
  31. 2023A Cost Analysis of Generative Language Models and Influence Operationscited by 17
  32. 2023Market Concentration Implications of Foundation Modelscited by 15
  33. 2024Promises and pitfalls of artificial intelligence for legal applicationscited by 14
  34. 2019Reducing malicious use of synthetic media research: Considerations and potential release practices for machine learningcited by 12
  35. 2019The Offense-Defense Balance of Scientific Knowledge: Does Publishing AI Research Reduce Misuse?cited by 12
  36. 2023Structural Similarities Between Language Models and Neural Response Measurementscited by 6

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2024: 29; 2025: 23; 2026: 12.

64 papers.

Sort:

By area:

  1. 2024Introducing v0.5 of the AI Safety Benchmark from MLCommonscited by 60
  2. 2024Collapse or Thrive? Perils and Promises of Synthetic Data in a Self-Generating Worldcited by 49
  3. 2024A Safe Harbor for AI Evaluation and Red Teamingcited by 46
  4. 2024LLMs as Research Tools: A Large Scale Survey of Researchers' Usage and Perceptionscited by 45
  5. 2024Adversaries Can Misuse Combinations of Safe Modelscited by 31
  6. 2025The Jailbreak Tax: How Useful are Your Jailbreak Outputs?cited by 26
  7. 2024COMPL-AI Framework: A Technical Interpretation and LLM Benchmarking Suite for the EU Artificial Intelligence Actcited by 23
  8. 2024Can Editing LLMs Inject Harm?cited by 22
  9. 2024The Model Openness Framework: Promoting Completeness and Openness for Reproducibility, Transparency, and Usability in Artificial Intelligencecited by 21
  10. 2025Frontier AI's Impact on the Cybersecurity Landscapecited by 21
  11. 2024Aloe: A Family of Fine-tuned Open Healthcare LLMscited by 20
  12. 2024The AI Community Building the Future? A Quantitative Analysis of Development Activity on Hugging Face Hubcited by 18
38 more
  1. 2024Breach By A Thousand Leaks: Unsafe Information Leakage in `Safe' AI Responsescited by 18
  2. 2024HiddenGuard: Fine-Grained Safe Generation with Specialized Representation Routercited by 16
  3. 2024Machine Unlearning Doesn't Do What You Think: Lessons for Generative AI Policy and Researchcited by 14
  4. 2024Training Compute Thresholds: Features and Functions in AI Regulationcited by 13
  5. 2024Acceptable Use Policies for Foundation Modelscited by 12
  6. 2024The Responsible Foundation Model Development Cheatsheet: A Review of Tools & Resourcescited by 11
  7. 2024Responsible Reporting for Frontier AI Developmentcited by 10
  8. 2024Societal Adaptation to Advanced AIcited by 10
  9. 2024Prioritizing High-Consequence Biological Capabilities in Evaluations of Artificial Intelligence Modelscited by 10
  10. 2025Independence Tests for Language Modelscited by 10
  11. 2025STREAM (ChemBio): A Standard for Transparently Reporting Evaluations in AI Model Reportscited by 9
  12. 2024Mapping LLM Security Landscapes: A Comprehensive Stakeholder Risk Assessment Proposalcited by 8
  13. 2024The Reality of AI and Bioriskcited by 8
  14. 2025Build Agent Advocates, Not Platform Agentscited by 8
  15. 2024Towards a Framework for Openness in Foundation Models: Proceedings from the Columbia Convening on Openness in Artificial Intelligencecited by 7
  16. 2025In-House Evaluation Is Not Enough: Towards Robust Third-Party Flaw Disclosure for General-Purpose AIcited by 7
  17. 2025Dynamic Risk Assessments for Offensive Cybersecurity Agentscited by 7
  18. 2024Sociotechnical Implications of Generative Artificial Intelligence for Information Accesscited by 6
  19. 2024To Err is AI : A Case Study Informing LLM Flaw Reporting Practicescited by 5
  20. 20247B Fully Open Source Moxin-LLM/VLM -- From Pretraining to GRPO-based Reinforcement Learning Enhancementcited by 5
  21. 2025Science Is Falling Behind the Frontier: Foundation Model Adoption Across Half a Million Paperscited by 5
  22. 2025Who Evaluates AI's Social Impacts? Mapping Coverage and Gaps in First and Third Party Evaluationscited by 4
  23. 2025Open-Source Multimodal Moxin Models with Moxin-VLM and Moxin-VLAcited by 4
  24. 2025The Economics of AI Foundation Models: Openness, Competition, and Governancecited by 3
  25. 2026"Unlimited Realm of Exploration and Experimentation": Methods and Motivations of AI-Generated Sexual Content Creatorscited by 3
  26. 2024Prompto: An open source library for asynchronous querying of LLM endpointscited by 2
  27. 2024Zero-Shot Pupil Segmentation with SAM 2: A Case Study of Over 14 Million Imagescited by 2
  28. 2025Model Risk Management for Generative AI In Financial Institutionscited by 2
  29. 2025Distributed and Decentralised Training: Technical Governance Challenges in a Shifting AI Landscapecited by 2
  30. 2025Strong but Brittle: Simple Attacks Subvert Reasoning-based Safety Guardrailscited by 2
  31. 2025HackWorld: Evaluating Computer-Use Agents on Exploiting Web Application Vulnerabilitiescited by 2
  32. 2024PRISM: A Design Framework for Open-Source Foundation Model Safetycited by 1
  33. 2025Beyond Release: Access Considerations for Generative AI Systemscited by 1
  34. 2025Membership Inference Attacks for Unseen Classescited by 1
  35. 2025The Role of Computing Resources in Publishing Foundation Model Researchcited by 1
  36. 2024Mitigating Downstream Model Risks via Model Provenancecited by 0
  37. 2025AI for Scaling Legal Reform: Mapping and Redacting Racial Covenants in Santa Clara Countycited by 0
  38. 2025Personalized Federated Training of Diffusion Models with Privacy Guaranteescited by 0

50 most cited of 64 All 64 (JSON)

Similar, not cited

Close in wording, no citation either way

  1. 2026Why Memory Components Fail: Eight Years of License and Sustainability Events in Open-Source Data Infrastructure
  2. 2026Benchmark-Based Comparative Assessment of Publicly Benchmarked Indian Foundation Models: A Capability and Evaluation-Maturity Framework
  3. 2026The End of the Foundation Model Era: Open-Weight Models, Sovereign AI, and Inference as Infrastructure
  4. 2026Adoption and Ecosystem Health: A Longitudinal Analysis of Open-Source Multi-Agent Frameworks
  5. 2025A Different Approach to AI Safety: Proceedings from the Columbia Convening on Openness in Artificial Intelligence and AI Safety
  6. 2026Reliable and Responsible Foundation Models: A Comprehensive Survey
  7. 2025Estimating Worst-Case Frontier Risks of Open-Weight LLMs
  8. 2026Taxonomy-Driven Analysis of Open-Source AI Risk Mitigation Tools