On the Societal Impact of Open Foundation Models
Not on the map. Why?
Abstract (arXiv)
Foundation models are powerful technologies: how they are released publicly directly shapes their societal impact. In this position paper, we focus on open foundation models, defined here as those with broadly available model weights (e.g. Llama 2, Stable Diffusion XL). We identify five distinctive properties (e.g. greater customizability, poor monitoring) of open foundation models that lead to both their benefits and risks. Open foundation models present significant benefits, with some caveats, that span innovation, competition, the distribution of decision-making power, and transparency. To understand their risks of misuse, we design a risk assessment framework for analyzing their marginal risk. Across several misuse vectors (e.g. cyberattacks, bioweapons), we find that current research is insufficient to effectively characterize the marginal risk of open foundation models relative to pre-existing technologies. The framework helps explain why the marginal risk is low in some cases, clarifies disagreements about misuse risks by revealing that past work has focused on different subsets of the framework with different assumptions, and articulates a way forward for more constructive debate. Overall, our work helps support a more grounded assessment of the societal impact of open foundation models by outlining what research is needed to empirically validate their theoretical benefits and risks.
Key facts. Cited by 64 papers in the map (data through 7 Oct 2026). Builds on 48 of its 138 references that are in the map. First posted on arXiv 27 Feb 2024.
Builds on
48 of 138 references.
References · 48
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2022OPT: Open Pre-trained Transformer Language Modelscited by 3,464
- 2023QLoRA: Efficient Finetuning of Quantized LLMscited by 3,355
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 2,914
- 2022BLOOM: A 176B-Parameter Open-Access Multilingual Language Modelcited by 1,968
- 2023Pythia: A Suite for Analyzing Large Language Models Across Training and Scalingcited by 1,734
- 2022Interpretability in the Wild: a Circuit for Indirect Object Identification in GPT-2 smallcited by 1,130
- 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!cited by 1,106
- 2023LLaMA-Adapter: Efficient Fine-tuning of Language Models with Zero-init Attentioncited by 776
- 2022GPT-NeoX-20B: An Open-Source Autoregressive Language Modelcited by 711
- 2023A Watermark for Large Language Modelscited by 667
36 more
- 2019Defending Against Neural Fake Newscited by 553
- 2019Release Strategies and the Social Impacts of Language Modelscited by 505
- 2023Sheared LLaMA: Accelerating Language Model Pre-training via Structured Pruningcited by 408
- 2022Social Simulacra: Creating Populated Prototypes for Social Computing Systemscited by 300
- 2023Shadow Alignment: The Ease of Subverting Safely-Aligned Language Modelscited by 284
- 2023MedAlpaca -- An Open-Source Collection of Medical Conversational AI Models and Training Datacited by 282
- 2023A Pretrainer's Guide to Training Data: Measuring the Effects of Data Age, Domain Coverage, Quality, & Toxicitycited by 180
- 2018The Malicious Use of Artificial Intelligence: Forecasting, Prevention, and Mitigationcited by 159
- 2023Can Sensitive Information Be Deleted From LLMs? Objectives for Defending Against Extraction Attackscited by 156
- 2023Foundation Models and Fair Usecited by 112
- 2021Algorithmic Monoculture and Social Welfarecited by 98
- 2022Preventing Verbatim Memorization in Language Models Gives a False Sense of Privacycited by 97
- 2023Frontier AI Regulation: Managing Emerging Risks to Public Safetycited by 95
- 2013Discrimination in Online Ad Deliverycited by 93
- 2023Identifying and Mitigating the Security Risks of Generative AIcited by 90
- 2022Picking on the Same Person: Does Algorithmic Monoculture lead to Outcome Homogenization?cited by 89
- 2022Machine Generated Text: A Comprehensive Survey of Threat Models and Detection Methodscited by 75
- 2023The Data Provenance Initiative: A Large Scale Audit of Dataset Licensing & Attribution in AIcited by 73
- 2022Do Language Models Plagiarize?cited by 72
- 2023The Gradient of Generative AI Release: Methods and Considerationscited by 63
- 2021Directional Bias Amplificationcited by 54
- 2023JoMA: Demystifying Multilayer Transformers via JOint Dynamics of MLP and Attentioncited by 52
- 2018Spectre Attacks: Exploiting Speculative Executioncited by 47
- 2023Talkin' 'Bout AI Generation: Copyright and the Generative-AI Supply Chaincited by 45
- 2022Structured access: an emerging paradigm for safe AI deploymentcited by 40
- 2023Ecosystem Graphs: The Social Footprint of Foundation Modelscited by 31
- 2023Open-Sourcing Highly Capable Foundation Models: An evaluation of risks, benefits, and alternative methods for pursuing open-source objectivescited by 31
- 2023Typhoon: Thai Large Language Modelscited by 28
- 2023Will releasing the weights of future large language models grant widespread access to pandemic agents?cited by 25
- 2023Tools for Verifying Neural Models' Training Datacited by 21
- 2023A Cost Analysis of Generative Language Models and Influence Operationscited by 17
- 2023Market Concentration Implications of Foundation Modelscited by 15
- 2024Promises and pitfalls of artificial intelligence for legal applicationscited by 14
- 2019Reducing malicious use of synthetic media research: Considerations and potential release practices for machine learningcited by 12
- 2019The Offense-Defense Balance of Scientific Knowledge: Does Publishing AI Research Reduce Misuse?cited by 12
- 2023Structural Similarities Between Language Models and Neural Response Measurementscited by 6
Built on by
Citing papers per year: 2024: 29; 2025: 23; 2026: 12.
64 papers.
Sort:
By area:
- 2024Introducing v0.5 of the AI Safety Benchmark from MLCommonscited by 60
- 2024Collapse or Thrive? Perils and Promises of Synthetic Data in a Self-Generating Worldcited by 49
- 2024A Safe Harbor for AI Evaluation and Red Teamingcited by 46
- 2024LLMs as Research Tools: A Large Scale Survey of Researchers' Usage and Perceptionscited by 45
- 2024Adversaries Can Misuse Combinations of Safe Modelscited by 31
- 2025The Jailbreak Tax: How Useful are Your Jailbreak Outputs?cited by 26
- 2024COMPL-AI Framework: A Technical Interpretation and LLM Benchmarking Suite for the EU Artificial Intelligence Actcited by 23
- 2024Can Editing LLMs Inject Harm?cited by 22
- 2024The Model Openness Framework: Promoting Completeness and Openness for Reproducibility, Transparency, and Usability in Artificial Intelligencecited by 21
- 2025Frontier AI's Impact on the Cybersecurity Landscapecited by 21
- 2024Aloe: A Family of Fine-tuned Open Healthcare LLMscited by 20
- 2024The AI Community Building the Future? A Quantitative Analysis of Development Activity on Hugging Face Hubcited by 18
38 more
- 2024Breach By A Thousand Leaks: Unsafe Information Leakage in `Safe' AI Responsescited by 18
- 2024HiddenGuard: Fine-Grained Safe Generation with Specialized Representation Routercited by 16
- 2024Machine Unlearning Doesn't Do What You Think: Lessons for Generative AI Policy and Researchcited by 14
- 2024Training Compute Thresholds: Features and Functions in AI Regulationcited by 13
- 2024Acceptable Use Policies for Foundation Modelscited by 12
- 2024The Responsible Foundation Model Development Cheatsheet: A Review of Tools & Resourcescited by 11
- 2024Responsible Reporting for Frontier AI Developmentcited by 10
- 2024Societal Adaptation to Advanced AIcited by 10
- 2024Prioritizing High-Consequence Biological Capabilities in Evaluations of Artificial Intelligence Modelscited by 10
- 2025Independence Tests for Language Modelscited by 10
- 2025STREAM (ChemBio): A Standard for Transparently Reporting Evaluations in AI Model Reportscited by 9
- 2024Mapping LLM Security Landscapes: A Comprehensive Stakeholder Risk Assessment Proposalcited by 8
- 2024The Reality of AI and Bioriskcited by 8
- 2025Build Agent Advocates, Not Platform Agentscited by 8
- 2024Towards a Framework for Openness in Foundation Models: Proceedings from the Columbia Convening on Openness in Artificial Intelligencecited by 7
- 2025In-House Evaluation Is Not Enough: Towards Robust Third-Party Flaw Disclosure for General-Purpose AIcited by 7
- 2025Dynamic Risk Assessments for Offensive Cybersecurity Agentscited by 7
- 2024Sociotechnical Implications of Generative Artificial Intelligence for Information Accesscited by 6
- 2024To Err is AI : A Case Study Informing LLM Flaw Reporting Practicescited by 5
- 20247B Fully Open Source Moxin-LLM/VLM -- From Pretraining to GRPO-based Reinforcement Learning Enhancementcited by 5
- 2025Science Is Falling Behind the Frontier: Foundation Model Adoption Across Half a Million Paperscited by 5
- 2025Who Evaluates AI's Social Impacts? Mapping Coverage and Gaps in First and Third Party Evaluationscited by 4
- 2025Open-Source Multimodal Moxin Models with Moxin-VLM and Moxin-VLAcited by 4
- 2025The Economics of AI Foundation Models: Openness, Competition, and Governancecited by 3
- 2026"Unlimited Realm of Exploration and Experimentation": Methods and Motivations of AI-Generated Sexual Content Creatorscited by 3
- 2024Prompto: An open source library for asynchronous querying of LLM endpointscited by 2
- 2024Zero-Shot Pupil Segmentation with SAM 2: A Case Study of Over 14 Million Imagescited by 2
- 2025Model Risk Management for Generative AI In Financial Institutionscited by 2
- 2025Distributed and Decentralised Training: Technical Governance Challenges in a Shifting AI Landscapecited by 2
- 2025Strong but Brittle: Simple Attacks Subvert Reasoning-based Safety Guardrailscited by 2
- 2025HackWorld: Evaluating Computer-Use Agents on Exploiting Web Application Vulnerabilitiescited by 2
- 2024PRISM: A Design Framework for Open-Source Foundation Model Safetycited by 1
- 2025Beyond Release: Access Considerations for Generative AI Systemscited by 1
- 2025Membership Inference Attacks for Unseen Classescited by 1
- 2025The Role of Computing Resources in Publishing Foundation Model Researchcited by 1
- 2024Mitigating Downstream Model Risks via Model Provenancecited by 0
- 2025AI for Scaling Legal Reform: Mapping and Redacting Racial Covenants in Santa Clara Countycited by 0
- 2025Personalized Federated Training of Diffusion Models with Privacy Guaranteescited by 0
50 most cited of 64 All 64 (JSON)
- 2026Preemptive LLM Unlearning against Forbidden Capability Acquisition via Gradient Sealing30 Sep 2026
- 2026How Fragile Is Safety Alignment at Frontier Scale? A Single-Direction Attack on a 320B MoE9 Sep 2026
- 2026Toward Open Weight Models Without Risks: Separating Public and Private Capabilities in LLMs19 Jun 2026
- 2026Beyond Safe Data: Pretraining-Stage Alignment with Regular Safety Reflection17 Jun 2026
- 2026RepSelect: Robust LLM Unlearning via Representation Selectivity15 Jun 2026
- 2026Position: Preventing AI-Generated CSAM Necessitates New Approaches to AI Safety9 Jun 2026
- 2026Is Decentralized AI Governable? From Regulative Policy to Constitutive Protocol23 May 2026
- 2026Locking Pretrained Weights via Deep Low-Rank Residual Distillation11 May 2026
- 2026Uncertainty-Aware Transformers: Conformal Prediction for Language Models10 Apr 2026
- 2026RCTs for Frontier AI Governance: Methodological Challenges and Solutions for Human Uplift Studies11 Mar 2026
- 2026"Unlimited Realm of Exploration and Experimentation": Methods and Motivations of AI-Generated Sexual Content Creators28 Jan 2026
- 2026PubMed-OCR: PMC Open Access OCR Annotations16 Jan 2026
38 more
- 2025Open-Source Multimodal Moxin Models with Moxin-VLM and Moxin-VLA22 Dec 2025
- 2025Adversarial Robustness of Vision in Open Foundation Models19 Dec 2025
- 2025Science Is Falling Behind the Frontier: Foundation Model Adoption Across Half a Million Papers21 Nov 2025
- 2025Reflexive Evidence-Based Multimodal Learning for Clean Energy Transitions: Causal Insights on Cooking Fuel Access, Urbanization, and Carbon Emissions19 Nov 2025
- 2025Why Open Small AI Models Matter for Interactive Art12 Nov 2025
- 2025Who Evaluates AI's Social Impacts? Mapping Coverage and Gaps in First and Third Party Evaluations6 Nov 2025
- 2025The Economics of AI Foundation Models: Openness, Competition, and Governance17 Oct 2025
- 2025The Role of Computing Resources in Publishing Foundation Model Research15 Oct 2025
- 2025HackWorld: Evaluating Computer-Use Agents on Exploiting Web Application Vulnerabilities14 Oct 2025
- 2025Strong but Brittle: Simple Attacks Subvert Reasoning-based Safety Guardrails13 Oct 2025
- 2025STREAM (ChemBio): A Standard for Transparently Reporting Evaluations in AI Model Reports13 Aug 2025
- 2025Distributed and Decentralised Training: Technical Governance Challenges in a Shifting AI Landscape10 Jul 2025
- 2025Membership Inference Attacks for Unseen Classes6 Jun 2025
- 2025Dynamic Risk Assessments for Offensive Cybersecurity Agents23 May 2025
- 2025Build Agent Advocates, Not Platform Agents7 May 2025
- 2025The Jailbreak Tax: How Useful are Your Jailbreak Outputs?14 Apr 2025
- 2025Frontier AI's Impact on the Cybersecurity Landscape7 Apr 2025
- 2025Personalized Federated Training of Diffusion Models with Privacy Guarantees1 Apr 2025
- 2025In-House Evaluation Is Not Enough: Towards Robust Third-Party Flaw Disclosure for General-Purpose AI21 Mar 2025
- 2025Model Risk Management for Generative AI In Financial Institutions19 Mar 2025
- 2025Beyond Release: Access Considerations for Generative AI Systems23 Feb 2025
- 2025Independence Tests for Language Models17 Feb 2025
- 2025AI for Scaling Legal Reform: Mapping and Redacting Racial Covenants in Santa Clara County12 Feb 2025
- 2024Machine Unlearning Doesn't Do What You Think: Lessons for Generative AI Policy and Research9 Dec 2024
- 20247B Fully Open Source Moxin-LLM/VLM -- From Pretraining to GRPO-based Reinforcement Learning Enhancement8 Dec 2024
- 2024The Reality of AI and Biorisk2 Dec 2024
- 2024LLMs as Research Tools: A Large Scale Survey of Researchers' Usage and Perceptions30 Oct 2024
- 2024Collapse or Thrive? Perils and Promises of Synthetic Data in a Self-Generating World22 Oct 2024
- 2024To Err is AI : A Case Study Informing LLM Flaw Reporting Practices15 Oct 2024
- 2024Zero-Shot Pupil Segmentation with SAM 2: A Case Study of Over 14 Million Images11 Oct 2024
- 2024COMPL-AI Framework: A Technical Interpretation and LLM Benchmarking Suite for the EU Artificial Intelligence Act10 Oct 2024
- 2024HiddenGuard: Fine-Grained Safe Generation with Specialized Representation Router3 Oct 2024
- 2024Mitigating Downstream Model Risks via Model Provenance3 Oct 2024
- 2024Acceptable Use Policies for Foundation Models29 Aug 2024
- 2024Prompto: An open source library for asynchronous querying of LLM endpoints12 Aug 2024
- 2024Can Editing LLMs Inject Harm?29 Jul 2024
- 2024Breach By A Thousand Leaks: Unsafe Information Leakage in `Safe' AI Responses2 Jul 2024
- 2024The Responsible Foundation Model Development Cheatsheet: A Review of Tools & Resources24 Jun 2024
50 newest of 64 All 64 (JSON)
- 2024A Safe Harbor for AI Evaluation and Red Teamingcited by 46
- 2025The Jailbreak Tax: How Useful are Your Jailbreak Outputs?cited by 26
- 2024Can Editing LLMs Inject Harm?cited by 22
- 2024Aloe: A Family of Fine-tuned Open Healthcare LLMscited by 20
- 2024Breach By A Thousand Leaks: Unsafe Information Leakage in `Safe' AI Responsescited by 18
- 2024HiddenGuard: Fine-Grained Safe Generation with Specialized Representation Routercited by 16
- 2024Machine Unlearning Doesn't Do What You Think: Lessons for Generative AI Policy and Researchcited by 14
- 2025Membership Inference Attacks for Unseen Classescited by 1
- 2026RepSelect: Robust LLM Unlearning via Representation Selectivitycited by 0
- 2026Preemptive LLM Unlearning against Forbidden Capability Acquisition via Gradient Sealingcited by 0
- 2026Preemptive LLM Unlearning against Forbidden Capability Acquisition via Gradient Sealing30 Sep 2026
- 2026RepSelect: Robust LLM Unlearning via Representation Selectivity15 Jun 2026
- 2025Membership Inference Attacks for Unseen Classes6 Jun 2025
- 2025The Jailbreak Tax: How Useful are Your Jailbreak Outputs?14 Apr 2025
- 2024Machine Unlearning Doesn't Do What You Think: Lessons for Generative AI Policy and Research9 Dec 2024
- 2024HiddenGuard: Fine-Grained Safe Generation with Specialized Representation Router3 Oct 2024
- 2024Can Editing LLMs Inject Harm?29 Jul 2024
- 2024Breach By A Thousand Leaks: Unsafe Information Leakage in `Safe' AI Responses2 Jul 2024
- 2024Aloe: A Family of Fine-tuned Open Healthcare LLMs3 May 2024
- 2024A Safe Harbor for AI Evaluation and Red Teaming7 Mar 2024
- 2024Introducing v0.5 of the AI Safety Benchmark from MLCommonscited by 60
- 2024Collapse or Thrive? Perils and Promises of Synthetic Data in a Self-Generating Worldcited by 49
- 2024LLMs as Research Tools: A Large Scale Survey of Researchers' Usage and Perceptionscited by 45
- 2024Adversaries Can Misuse Combinations of Safe Modelscited by 31
- 2024COMPL-AI Framework: A Technical Interpretation and LLM Benchmarking Suite for the EU Artificial Intelligence Actcited by 23
- 2024The Model Openness Framework: Promoting Completeness and Openness for Reproducibility, Transparency, and Usability in Artificial Intelligencecited by 21
- 2025Frontier AI's Impact on the Cybersecurity Landscapecited by 21
- 2024The AI Community Building the Future? A Quantitative Analysis of Development Activity on Hugging Face Hubcited by 18
- 2024Training Compute Thresholds: Features and Functions in AI Regulationcited by 13
- 2024Acceptable Use Policies for Foundation Modelscited by 12
- 2024The Responsible Foundation Model Development Cheatsheet: A Review of Tools & Resourcescited by 11
- 2024Responsible Reporting for Frontier AI Developmentcited by 10
12 most cited of 46 All 46 (JSON)
- 2026Toward Open Weight Models Without Risks: Separating Public and Private Capabilities in LLMs19 Jun 2026
- 2026Position: Preventing AI-Generated CSAM Necessitates New Approaches to AI Safety9 Jun 2026
- 2026Is Decentralized AI Governable? From Regulative Policy to Constitutive Protocol23 May 2026
- 2026Locking Pretrained Weights via Deep Low-Rank Residual Distillation11 May 2026
- 2026Uncertainty-Aware Transformers: Conformal Prediction for Language Models10 Apr 2026
- 2026RCTs for Frontier AI Governance: Methodological Challenges and Solutions for Human Uplift Studies11 Mar 2026
- 2026"Unlimited Realm of Exploration and Experimentation": Methods and Motivations of AI-Generated Sexual Content Creators28 Jan 2026
- 2026PubMed-OCR: PMC Open Access OCR Annotations16 Jan 2026
- 2025Open-Source Multimodal Moxin Models with Moxin-VLM and Moxin-VLA22 Dec 2025
- 2025Adversarial Robustness of Vision in Open Foundation Models19 Dec 2025
- 2025Science Is Falling Behind the Frontier: Foundation Model Adoption Across Half a Million Papers21 Nov 2025
- 2025Reflexive Evidence-Based Multimodal Learning for Clean Energy Transitions: Causal Insights on Cooking Fuel Access, Urbanization, and Carbon Emissions19 Nov 2025
12 newest of 46 All 46 (JSON)
Similar, not cited
Close in wording, no citation either way
- 2026Why Memory Components Fail: Eight Years of License and Sustainability Events in Open-Source Data Infrastructure
- 2026Benchmark-Based Comparative Assessment of Publicly Benchmarked Indian Foundation Models: A Capability and Evaluation-Maturity Framework
- 2026The End of the Foundation Model Era: Open-Weight Models, Sovereign AI, and Inference as Infrastructure
- 2026Adoption and Ecosystem Health: A Longitudinal Analysis of Open-Source Multi-Agent Frameworks
- 2025A Different Approach to AI Safety: Proceedings from the Columbia Convening on Openness in Artificial Intelligence and AI Safety
- 2026Reliable and Responsible Foundation Models: A Comprehensive Survey
- 2025Estimating Worst-Case Frontier Risks of Open-Weight LLMs
- 2026Taxonomy-Driven Analysis of Open-Source AI Risk Mitigation Tools