Are Large Language Models Really Bias-Free? Jailbreak Prompts for Assessing Adversarial Robustness to Bias Elicitation
On the map: LLM safety and security → Safety alignment, refusal and guardrails
Abstract (arXiv)
Large Language Models (LLMs) have revolutionized artificial intelligence, demonstrating remarkable computational power and linguistic capabilities. However, these models are inherently prone to various biases stemming from their training data. These include selection, linguistic, and confirmation biases, along with common stereotypes related to gender, ethnicity, sexual orientation, religion, socioeconomic status, disability, and age. This study explores the presence of these biases within the responses given by the most recent LLMs, analyzing the impact on their fairness and reliability. We also investigate how known prompt engineering techniques can be exploited to effectively reveal hidden biases of LLMs, testing their adversarial robustness against jailbreak prompts specially crafted for bias elicitation. Extensive experiments are conducted using the most widespread LLMs at different scales, confirming that LLMs can still be manipulated to produce biased or inappropriate responses, despite their advanced capabilities and sophisticated alignment processes. Our findings underscore the importance of enhancing mitigation techniques to address these safety issues, toward a more sustainable and inclusive artificial intelligence.
Key facts. Cited by 9 papers in the map (data through 13 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 39 of its 49 references that are in the map. First posted on arXiv 11 Jul 2024.
Builds on
39 of 49 references.
Closest ancestors · 1
Same direction, newest first
- 2024ALERT: A Comprehensive Benchmark for Assessing Large Language Models' Safety through Red Teaming6 Apr
Other references · 38
- 2020Language Models are Few-Shot Learnerscited by 32,320
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,986
- 2023Mistral 7Bcited by 3,123
- 2023Sparks of Artificial General Intelligence: Early experiments with GPT-4cited by 2,586
- 2022Beyond the Imitation Game: Quantifying and extrapolating the capabilities of language modelscited by 1,985
- 2024Phi-3 Technical Report: A Highly Capable Language Model Locally on Your Phonecited by 1,908
- 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,404
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,249
- 2023A Survey on Evaluation of Large Language Modelscited by 1,236
- 2021Ethical and social risks of harm from Language Modelscited by 964
- 2020StereoSet: Measuring stereotypical bias in pretrained language modelscited by 918
- 2022Ignore Previous Prompt: Attack Techniques For Language Modelscited by 817
26 more
- 2023AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Modelscited by 777
- 2023Tree of Attacks: Jailbreaking Black-Box LLMs Automaticallycited by 664
- 2018Mitigating Unwanted Biases with Adversarial Learningcited by 663
- 2023Bias and Fairness in Large Language Models: A Surveycited by 636
- 2019The Woman Worked as a Babysitter: On Biases in Language Generationcited by 540
- 2023"Do Anything Now": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Modelscited by 485
- 2022ToxiGen: A Large-Scale Machine-Generated Dataset for Adversarial and Implicit Hate Speech Detectioncited by 421
- 2021BOLD: Dataset and Metrics for Measuring Biases in Open-Ended Language Generationcited by 411
- 2021Persistent Anti-Muslim Bias in Large Language Modelscited by 377
- 2021Self-Diagnosis and Self-Debiasing: A Proposal for Reducing Corpus-Based Bias in NLPcited by 337
- 2019Mitigating Gender Bias in Natural Language Processing: Literature Reviewcited by 287
- 2021Adversarial GLUE: A Multi-Task Benchmark for Robustness Evaluation of Language Modelscited by 230
- 2023On the Robustness of ChatGPT: An Adversarial and Out-of-distribution Perspectivecited by 211
- 2019Counterfactual Data Augmentation for Mitigating Gender Stereotypes in Languages with Rich Morphologycited by 200
- 2018The Malicious Use of Artificial Intelligence: Forecasting, Prevention, and Mitigationcited by 165
- 2023Benchmarking Cognitive Biases in Large Language Models as Evaluatorscited by 148
- 2023Should ChatGPT be Biased? Challenges and Risks of Bias in Large Language Modelscited by 146
- 2023Open Sesame! Universal Black Box Jailbreaking of Large Language Modelscited by 133
- 2021Neural Machine Translation for Low-Resource Languages: A Surveycited by 109
- 2024Stable LM 2 1.6B Technical Reportcited by 88
- 2020Contextualizing Hate Speech Classifiers with Post-hoc Explanationcited by 84
- 2019Reducing Gender Bias in Word-Level Language Models with a Gender-Equalizing Loss Functioncited by 57
- 2023ROBBIE: Robust Bias Evaluation of Large Generative Language Modelscited by 53
- 2024Bias in Language Models: Beyond Trick Tests and Toward RUTEd Evaluationcited by 41
- 2023Social Bias Probing: Fairness Benchmarking for Language Modelscited by 29
- 2023CALM : A Multi-task Benchmark for Comprehensive Assessment of Language Model Biascited by 13
Built on by
Citing papers per year: 2024: 3; 2025: 6.
9 papers.
- 2024Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)cited by 46
- 2025The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMscited by 25
- 2025Benchmarking Adversarial Robustness to Bias Elicitation in Large Language Models: Scalable Automated Assessment with LLM-as-a-Judgecited by 23
- 2025Anyone Can Jailbreak: Prompt-Based Attacks on LLMs and T2Iscited by 7
- 2024Biased AI can Influence Political Decision-Makingcited by 6
- 2024Hey GPT, Can You be More Racist? Analysis from Crowdsourced Attempts to Elicit Biased Content from Generative AIcited by 6
- 2025Benchmarking Educational LLMs with Analytics: A Case Study on Gender Bias in Feedbackcited by 5
- 2025LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systemscited by 1
- 2025JustEva: A Toolkit to Evaluate LLM Fairness in Legal Knowledge Inferencecited by 1
- 2025Benchmarking Educational LLMs with Analytics: A Case Study on Gender Bias in Feedback11 Nov 2025
- 2025JustEva: A Toolkit to Evaluate LLM Fairness in Legal Knowledge Inference15 Sep 2025
- 2025LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems12 Sep 2025
- 2025Anyone Can Jailbreak: Prompt-Based Attacks on LLMs and T2Is29 Jul 2025
- 2025The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMs6 Jun 2025
- 2025Benchmarking Adversarial Robustness to Bias Elicitation in Large Language Models: Scalable Automated Assessment with LLM-as-a-Judge10 Apr 2025
- 2024Hey GPT, Can You be More Racist? Analysis from Crowdsourced Attempts to Elicit Biased Content from Generative AI20 Oct 2024
- 2024Biased AI can Influence Political Decision-Making8 Oct 2024
- 2024Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)20 Jul 2024
Similar, not cited
Close in wording, no citation either way
- 2024Decoding Biases: Automated Methods and LLM Judges for Gender Bias Detection in Language Models
- 2025Bias Testing and Mitigation in Black Box LLMs using Metamorphic Relations
- 2025Rethinking Prompt-based Debiasing in Large Language Models
- 2024Securing Large Language Models: Addressing Bias, Misinformation, and Prompt Attacks
- 2025LLMs are Vulnerable to Malicious Prompts Disguised as Scientific Language
- 2024Interpreting Bias in Large Language Models: A Feature-Based Approach
- 2024Evaluating Nuanced Bias in Large Language Model Free Response Answers
- 2024Towards Resource Efficient and Interpretable Bias Mitigation in Large Language Models