mlsanityData to 14 Oct 2026

SAGE-RT: Synthetic Alignment data Generation for Safety Evaluation and Red Teaming

arXiv 2408.11851 ↗First posted 14 Aug 2024cs.AI cs.CL cs.CRcited by 10

On the map: LLM safety and security → Prompt injection and agent security

Abstract (arXiv)

We introduce Synthetic Alignment data Generation for Safety Evaluation and Red Teaming (SAGE-RT or SAGE) a novel pipeline for generating synthetic alignment and red-teaming data. Existing methods fall short in creating nuanced and diverse datasets, providing necessary control over the data generation and validation processes, or require large amount of manually generated seed data. SAGE addresses these limitations by using a detailed taxonomy to produce safety-alignment and red-teaming data across a wide range of topics. We generated 51,000 diverse and in-depth prompt-response pairs, encompassing over 1,500 topics of harmfulness and covering variations of the most frequent types of jailbreaking prompts faced by large language models (LLMs). We show that the red-teaming data generated through SAGE jailbreaks state-of-the-art LLMs in more than 27 out of 32 sub-categories, and in more than 58 out of 279 leaf-categories (sub-sub categories). The attack success rate for GPT-4o, GPT-3.5-turbo is 100% over the sub-categories of harmfulness. Our approach avoids the pitfalls of synthetic safety-training data generation such as mode collapse and lack of nuance in the generation pipeline by ensuring a detailed coverage of harmful topics using iterative expansion of the topics and conditioning the outputs on the generated raw-text. This method can be used to generate red-teaming and alignment data for LLM Safety completely synthetically to make LLMs safer or for red-teaming the models over a diverse range of topics.

Key facts. Cited by 10 papers in the map (data through 14 Oct 2026). Placed in Prompt injection and agent security, one of 12 directions in LLM safety and security. Builds on 14 of its 18 references that are in the map. First posted on arXiv 14 Aug 2024.

Builds on

14 of 18 references.

Closest ancestors · 2

Same direction, newest first

  1. 2023AART: AI-Assisted Red-Teaming with Diverse Data Generation for New LLM-powered Applications14 Nov
  2. 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection23 Feb

Other references · 12

  1. 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
  2. 2020Scaling Laws for Neural Language Modelscited by 6,586
  3. 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,720
  4. 2020MiniLM: Deep Self-Attention Distillation for Task-Agnostic Compression of Pre-Trained Transformerscited by 1,463
  5. 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,420
  6. 2023Jailbreaking ChatGPT via Prompt Engineering: An Empirical Studycited by 498
  7. 2024WildTeaming at Scale: From In-the-Wild Jailbreaks to (Adversarially) Safer Language Modelscited by 223
  8. 2022Will we run out of data? Limits of LLM scaling based on human-generated datacited by 195
  9. 2023Do-Not-Answer: A Dataset for Evaluating Safeguards in LLMscited by 184
  10. 2024AEGIS: Online Adaptive AI Content Safety Moderation with Ensemble of LLM Expertscited by 136
  11. 2020MALCOM: Generating Malicious Comments to Attack Neural Fake News Detection Modelscited by 25
  12. 2021PETGEN: Personalized Text Generation Attack on Deep Sequence Embedding-based Classification Modelscited by 17

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2024: 1; 2025: 5; 2026: 4.

10 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025TRIDENT: Enhancing Large Language Model Safety with Tri-Dimensional Diversified Red-Teaming Data Synthesis
  2. 2026RedBench: A Universal Dataset for Comprehensive Red Teaming of Large Language Models
  3. 2025Building Safe GenAI Applications: An End-to-End Overview of Red Teaming for Large Language Models
  4. 2023Red-Teaming Large Language Models using Chain of Utterances for Safety-Alignment
  5. 2025LLM-Safety Evaluations Lack Robustness
  6. 2024SciSafeEval: A Comprehensive Benchmark for Safety Alignment of Large Language Models in Scientific Tasks
  7. 2024DiveR-CT: Diversity-enhanced Red Teaming Large Language Model Assistants with Relaxing Constraints
  8. 2023Language Model Unalignment: Parametric Red-Teaming to Expose Hidden Harms and Biases