Online Safety Analysis for LLMs: a Benchmark, an Assessment, and a Path Forward
Not on the map. Why?
Abstract (arXiv)
While Large Language Models (LLMs) have seen widespread applications across numerous fields, their limited interpretability poses concerns regarding their safe operations from multiple aspects, e.g., truthfulness, robustness, and fairness. Recent research has started developing quality assurance methods for LLMs, introducing techniques such as offline detector-based or uncertainty estimation methods. However, these approaches predominantly concentrate on post-generation analysis, leaving the online safety analysis for LLMs during the generation phase an unexplored area. To bridge this gap, we conduct in this work a comprehensive evaluation of the effectiveness of existing online safety analysis methods on LLMs. We begin with a pilot study that validates the feasibility of detecting unsafe outputs in the early generation process. Following this, we establish the first publicly available benchmark of online safety analysis for LLMs, including a broad spectrum of methods, models, tasks, datasets, and evaluation metrics. Utilizing this benchmark, we extensively analyze the performance of state-of-the-art online safety analysis methods on both open-source and closed-source LLMs. This analysis reveals the strengths and weaknesses of individual methods and offers valuable insights into selecting the most appropriate method based on specific application scenarios and task requirements. Furthermore, we also explore the potential of using hybridization methods, i.e., combining multiple methods to derive a collective safety conclusion, to enhance the efficacy of online safety analysis for LLMs. Our findings indicate a promising direction for the development of innovative and trustworthy quality assurance methodologies for LLMs, facilitating their reliable deployments across diverse domains.
Key facts. Cited by 6 papers in the map (data through 14 Oct 2026). Builds on 157 of its 225 references that are in the map. First posted on arXiv 12 Apr 2024.
Builds on
157 of 225 references.
References · 157
- 2017Attention Is All You Needcited by 60,361
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
- 2023GPT-4 Technical Reportcited by 18,396
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2021Evaluating Large Language Models Trained on Codecited by 8,320
- 2020Scaling Laws for Neural Language Modelscited by 6,586
38 more
- 2019BART: Denoising Sequence-to-Sequence Pre-training for Natural Language Generation, Translation, and Comprehensioncited by 5,893
- 2016Layer Normalizationcited by 5,669
- 2015Dropout as a Bayesian Approximation: Representing Model Uncertainty in Deep Learningcited by 4,448
- 2023Reflexion: Language Agents with Verbal Reinforcement Learningcited by 4,276
- 2021On the Opportunities and Risks of Foundation Modelscited by 4,033
- 2021Program Synthesis with Large Language Modelscited by 3,637
- 2023Self-Refine: Iterative Refinement with Self-Feedbackcited by 3,442
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
- 2017TriviaQA: A Large Scale Distantly Supervised Challenge Dataset for Reading Comprehensioncited by 2,955
- 2023Sparks of Artificial General Intelligence: Early experiments with GPT-4cited by 2,592
- 2023A Survey of Large Language Modelscited by 2,576
- 2020The Pile: An 800GB Dataset of Diverse Text for Language Modelingcited by 2,411
- 2016A Baseline for Detecting Misclassified and Out-of-Distribution Examples in Neural Networkscited by 2,385
- 2023Code Llama: Open Foundation Models for Codecited by 2,139
- 2022Survey of Hallucination in Natural Language Generationcited by 2,075
- 2018A Call for Clarity in Reporting BLEU Scorescited by 1,799
- 2018A Simple Unified Framework for Detecting Out-of-Distribution Samples and Adversarial Attackscited by 1,485
- 2023Is Your Code Generated by ChatGPT Really Correct? Rigorous Evaluation of Large Language Models for Code Generationcited by 1,391
- 2018FEVER: a large-scale dataset for Fact Extraction and VERificationcited by 1,375
- 2017Enhancing The Reliability of Out-of-distribution Image Detection in Neural Networkscited by 1,328
- 2016Man is to Computer Programmer as Woman is to Homemaker? Debiasing Word Embeddingscited by 1,312
- 2020Energy-based Out-of-distribution Detectioncited by 1,299
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,255
- 2023A Survey on Evaluation of Large Language Modelscited by 1,242
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,207
- 2023Large Language Models Cannot Self-Correct Reasoning Yetcited by 1,017
- 2023Teaching Large Language Models to Self-Debugcited by 988
- 2023Can LLMs Express Their Uncertainty? An Empirical Evaluation of Confidence Elicitation in LLMscited by 974
- 2018Deep Anomaly Detection with Outlier Exposurecited by 942
- 2023BloombergGPT: A Large Language Model for Financecited by 939
- 2017Selective Classification for Deep Neural Networkscited by 852
- 2023Semantic Uncertainty: Linguistic Invariances for Uncertainty Estimation in Natural Language Generationcited by 819
- 2023SelfCheckGPT: Zero-Resource Black-Box Hallucination Detection for Generative Large Language Modelscited by 810
- 2023CRITIC: Large Language Models Can Self-Correct with Tool-Interactive Critiquingcited by 783
- 2017Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networkscited by 744
- 2020Aligning AI With Shared Human Valuescited by 723
- 2023Siren's Song in the AI Ocean: A Survey on Hallucination in Large Language Modelscited by 698
- 2023The Internal State of an LLM Knows When It's Lyingcited by 659
50 most cited of 157 All 157 (JSON)
Built on by
Citing papers per year: 2024: 4; 2025: 2.
6 papers.
- 2024OR-Bench: An Over-Refusal Benchmark for Large Language Modelscited by 244
- 2024Multilingual Blending: LLM Safety Alignment Evaluation with Language Mixturecited by 22
- 2025Combining Cost-Constrained Runtime Monitors for AI Safetycited by 10
- 2024ASPIRER: Bypassing System Prompts With Permutation-based Backdoors in LLMscited by 1
- 2025Towards Safer Chatbots: Automated Policy Compliance Evaluation of Custom GPTscited by 1
- 2024LeCov: Multi-level Testing Criteria for Large Language Modelscited by 0
- 2025Combining Cost-Constrained Runtime Monitors for AI Safety19 Jul 2025
- 2025Towards Safer Chatbots: Automated Policy Compliance Evaluation of Custom GPTs3 Feb 2025
- 2024ASPIRER: Bypassing System Prompts With Permutation-based Backdoors in LLMs5 Oct 2024
- 2024LeCov: Multi-level Testing Criteria for Large Language Models20 Aug 2024
- 2024Multilingual Blending: LLM Safety Alignment Evaluation with Language Mixture10 Jul 2024
- 2024OR-Bench: An Over-Refusal Benchmark for Large Language Models31 May 2024