Risk and Response in Large Language Models: Evaluating Key Threat Categories
On the map: LLM safety and security → Safety alignment, refusal and guardrails
Abstract (arXiv)
This paper explores the pressing issue of risk assessment in Large Language Models (LLMs) as they become increasingly prevalent in various applications. Focusing on how reward models, which are designed to fine-tune pretrained LLMs to align with human values, perceive and categorize different types of risks, we delve into the challenges posed by the subjective nature of preference-based training data. By utilizing the Anthropic Red-team dataset, we analyze major risk categories, including Information Hazards, Malicious Uses, and Discrimination/Hateful content. Our findings indicate that LLMs tend to consider Information Hazards less harmful, a finding confirmed by a specially developed regression model. Additionally, our analysis shows that LLMs respond less stringently to Information Hazards compared to other risks. The study further reveals a significant vulnerability of LLMs to jailbreaking attacks in Information Hazard scenarios, highlighting a critical security concern in LLM risk assessment and emphasizing the need for improved AI safety measures.
Key facts. Cited by 10 papers in the map (data through 7 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 24 of its 38 references that are in the map. First posted on arXiv 22 Mar 2024.
Builds on
24 of 38 references.
Closest ancestors · 1
Same direction, newest first
Other references · 23
- 2017Attention Is All You Needcited by 59,932
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2020Scaling Laws for Neural Language Modelscited by 6,411
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,634
- 2020Longformer: The Long-Document Transformercited by 3,362
- 2020Learning to summarize from human feedbackcited by 2,562
- 2019Fine-Tuning Language Models from Human Preferencescited by 2,124
- 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,565
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,235
- 2022LaMDA: Language Models for Dialog Applicationscited by 1,218
11 more
- 2021GLM: General Language Model Pretraining with Autoregressive Blank Infillingcited by 1,026
- 2021Ethical and social risks of harm from Language Modelscited by 957
- 2022BERTopic: Neural topic modeling with a class-based TF-IDF procedurecited by 779
- 2022Ignore Previous Prompt: Attack Techniques For Language Modelscited by 760
- 2019Release Strategies and the Social Impacts of Language Modelscited by 505
- 2023Jailbreaking ChatGPT via Prompt Engineering: An Empirical Studycited by 478
- 2023Trustworthy LLMs: a Survey and Guideline for Evaluating Large Language Models' Alignmentcited by 394
- 2023Multi-step Jailbreaking Privacy Attacks on ChatGPTcited by 320
- 2023Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attackscited by 189
- 2023Do-Not-Answer: A Dataset for Evaluating Safeguards in LLMscited by 176
- 2023Beyond the Safeguards: Exploring the Security Risks of ChatGPTcited by 36
Built on by
Citing papers per year: 2024: 4; 2025: 4; 2026: 2.
10 papers.
- 2024Large Language Model Unlearning via Embedding-Corrupted Promptscited by 112
- 2025Mind the Value-Action Gap: Do LLMs Act in Alignment with Their Values?cited by 49
- 2024Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)cited by 44
- 2024AI Safety in Generative AI Large Language Models: A Surveycited by 31
- 2025GUARD: Generation-time LLM Unlearning via Adaptive Restriction and Detectioncited by 17
- 2025Agents Are All You Need for LLM Unlearningcited by 9
- 2025DRAGON: Guard LLM Unlearning in Context via Negative Detection and Reasoningcited by 7
- 2024Metaheuristics and Large Language Models Join Forces: Toward an Integrated Optimization Approachcited by 6
- 2026Agent-Supported Foresight for AI Systemic Risks: AI Agents for Breadth, Experts for Judgmentcited by 2
- 2026Beyond Confidence: The Rhythms of Reasoning in Generative Modelscited by 0
- 2026Beyond Confidence: The Rhythms of Reasoning in Generative Models11 Feb 2026
- 2026Agent-Supported Foresight for AI Systemic Risks: AI Agents for Breadth, Experts for Judgment9 Feb 2026
- 2025DRAGON: Guard LLM Unlearning in Context via Negative Detection and Reasoning8 Nov 2025
- 2025GUARD: Generation-time LLM Unlearning via Adaptive Restriction and Detection19 May 2025
- 2025Agents Are All You Need for LLM Unlearning1 Feb 2025
- 2025Mind the Value-Action Gap: Do LLMs Act in Alignment with Their Values?26 Jan 2025
- 2024Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)20 Jul 2024
- 2024AI Safety in Generative AI Large Language Models: A Survey6 Jul 2024
- 2024Large Language Model Unlearning via Embedding-Corrupted Prompts12 Jun 2024
- 2024Metaheuristics and Large Language Models Join Forces: Toward an Integrated Optimization Approach28 May 2024
Similar, not cited
Close in wording, no citation either way
- 2025Data Security in Large Language Models: Risks, Defense, and Directions
- 2025LLM-Safety Evaluations Lack Robustness
- 2024Large Language Model Safety: A Holistic Survey
- 2024Unique Security and Privacy Threats of Large Language Models: A Comprehensive Survey
- 2025Exploring the Secondary Risks of Large Language Models
- 2025A Survey of Attacks on Large Language Models
- 2024The Language Barrier: Dissecting Safety Challenges of LLMs in Multilingual Contexts
- 2024Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agents