SciSafeEval: A Comprehensive Benchmark for Safety Alignment of Large Language Models in Scientific Tasks
On the map: LLM alignment / RLHF / preference optimisation → Safety alignment and jailbreak attacks
also in 1 more
Abstract (arXiv)
Large language models (LLMs) have a transformative impact on a variety of scientific tasks across disciplines including biology, chemistry, medicine, and physics. However, ensuring the safety alignment of these models in scientific research remains an underexplored area, with existing benchmarks primarily focusing on textual content and overlooking key scientific representations such as molecular, protein, and genomic languages. Moreover, the safety mechanisms of LLMs in scientific tasks are insufficiently studied. To address these limitations, we introduce SciSafeEval, a comprehensive benchmark designed to evaluate the safety alignment of LLMs across a range of scientific tasks. SciSafeEval spans multiple scientific languages-including textual, molecular, protein, and genomic-and covers a wide range of scientific domains. We evaluate LLMs in zero-shot, few-shot and chain-of-thought settings, and introduce a "jailbreak" enhancement feature that challenges LLMs equipped with safety guardrails, rigorously testing their defenses against malicious intention. Our benchmark surpasses existing safety datasets in both scale and scope, providing a robust platform for assessing the safety and performance of LLMs in scientific contexts. This work aims to facilitate the responsible development and deployment of LLMs, promoting alignment with safety and ethical standards in scientific research.
Key facts. Cited by 17 papers in the map (data through 7 Oct 2026). Placed in Safety alignment and jailbreak attacks, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 31 of its 78 references that are in the map. First posted on arXiv 2 Oct 2024.
Builds on
31 of 78 references.
References · 31
- 2024The Llama 3 Herd of Modelscited by 14,192
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,302
- 2020Don't Stop Pretraining: Adapt Language Models to Domains and Taskscited by 1,548
- 2023CAMEL: Communicative Agents for "Mind" Exploration of Large Language Model Societycited by 1,348
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,235
- 2023NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Railscited by 347
- 2024WildTeaming at Scale: From In-the-Wild Jailbreaks to (Adversarially) Safer Language Modelscited by 206
- 2023SafetyBench: Evaluating the Safety of Large Language Modelscited by 189
- 2023Mol-Instructions: A Large-Scale Biomolecular Instruction Dataset for Large Language Modelscited by 131
- 2023Zhongjing: Enhancing the Chinese Medical Capabilities of Large Language Model through Expert Feedback and Real-world Multi-turn Dialoguecited by 118
- 2024ChemLLM: A Chemical Large Language Modelcited by 100
- 2023DISC-MedLLM: Bridging General Large Language Models and Real-World Medical Consultationcited by 89
19 more
- 2023Red teaming ChatGPT via Jailbreaking: Bias, Robustness, Reliability and Toxicitycited by 86
- 2024Scientific Large Language Models: A Survey on Biological & Chemical Domainscited by 80
- 2022SELFIES and the future of molecular string representationscited by 76
- 2024ProLLaMA: A Protein Large Language Model for Multi-Task Protein Language Processingcited by 53
- 2024garak: A Framework for Security Probing Large Language Modelscited by 48
- 2023Artificial intelligence and biological misuse: Differentiating risks of language models and biological design toolscited by 43
- 2024AI Safety in Generative AI Large Language Models: A Surveycited by 31
- 2023Large Language Models as Master Key: Unlocking the Secrets of Materials Science with GPTcited by 29
- 2023BioInstruct: Instruction Tuning of Large Language Models for Biomedical Natural Language Processingcited by 25
- 2023Domain-Agnostic Molecular Generation with Chemical Feedbackcited by 21
- 2021Generative Chemical Transformer: Neural Machine Learning of Molecular Geometric Structures from Chemical Language via Attentioncited by 20
- 2021Pre-training Co-evolutionary Protein Representation via A Pairwise Masked Language Modelcited by 20
- 2023Summon a Demon and Bind it: A Grounded Theory of LLM Red Teamingcited by 20
- 2024Grounding and Evaluation for Large Language Models: Practical Challenges and Lessons Learned (Survey)cited by 20
- 2023Controlling risks of AI in chemical science with agentscited by 17
- 2023An Interdisciplinary Outlook on Large Language Models for Scientific Researchcited by 15
- 2024From Words to Molecules: A Survey of Large Language Models in Chemistrycited by 14
- 2024Building a Domain-specific Guardrail Model in Productioncited by 6
- 2024A system capable of verifiably and privately screening global DNA synthesiscited by 2
Built on by
Citing papers per year: 2025: 9; 2026: 8.
17 papers.
Sort:
By area:
- 2025Training a Scientific Reasoning Model for Chemistrycited by 54
- 2025Alignment and Safety in Large Language Models: Safety Mechanisms, Training Paradigms, and Emerging Challengescited by 14
- 2025SoSBench: Benchmarking Safety Alignment on Six Scientific Domainscited by 11
- 2025Focusing by Contrastive Attention: Enhancing VLMs' Visual Reasoningcited by 8
- 2026Autonomous Research Agents: A Survey of AI Scientists and the Verification Gapcited by 6
- 2025SAFER: Advancing Safety Alignment via Efficient Ex-Ante Reasoningcited by 4
- 2025Are All Prompt Components Value-Neutral? Understanding the Heterogeneous Adversarial Robustness of Dissected Prompt in Large Language Modelscited by 3
- 2026Boiling the Frog: A Multi-Turn Benchmark for Agentic Safetycited by 3
- 2025Deep Research Agents Brings Deeper Harmcited by 2
- 2026A Blind Spot in Alignment: Quantifying Biosecurity Risks in Large Language Modelscited by 2
- 2025Beyond Benchmarks: LLM Evaluation with an Anthropomorphic and Lifecycle-oriented Roadmapcited by 1
- 2026Triaging Threats to Specialized Guardrailscited by 1
5 more
- 2025MEUV: Achieving Fine-Grained Capability Activation in Large Language Models via Mutually Exclusive Unlock Vectorscited by 0
- 2026Beyond single-channel agentic benchmarkingcited by 0
- 2026Seamless Deception: Larger Language Models Are Better Knowledge Concealerscited by 0
- 2026You Snooze, You Lose: Automatic Safety Alignment Restoration through Neural Weight Translationcited by 0
- 2026SciHazard: A Benchmark for Measuring Scientific Safety Risks with Decomposed Harm Scoringcited by 0
- 2026A Blind Spot in Alignment: Quantifying Biosecurity Risks in Large Language Models3 Aug 2026
- 2026SciHazard: A Benchmark for Measuring Scientific Safety Risks with Decomposed Harm Scoring21 Jul 2026
- 2026Autonomous Research Agents: A Survey of AI Scientists and the Verification Gap29 Jun 2026
- 2026Triaging Threats to Specialized Guardrails29 May 2026
- 2026Boiling the Frog: A Multi-Turn Benchmark for Agentic Safety21 May 2026
- 2026You Snooze, You Lose: Automatic Safety Alignment Restoration through Neural Weight Translation6 May 2026
- 2026Seamless Deception: Larger Language Models Are Better Knowledge Concealers15 Mar 2026
- 2026Beyond single-channel agentic benchmarking5 Feb 2026
- 2025Deep Research Agents Brings Deeper Harm13 Oct 2025
- 2025Focusing by Contrastive Attention: Enhancing VLMs' Visual Reasoning8 Sep 2025
- 2025MEUV: Achieving Fine-Grained Capability Activation in Large Language Models via Mutually Exclusive Unlock Vectors4 Sep 2025
- 2025Beyond Benchmarks: LLM Evaluation with an Anthropomorphic and Lifecycle-oriented Roadmap26 Aug 2025
5 more
- 2025Are All Prompt Components Value-Neutral? Understanding the Heterogeneous Adversarial Robustness of Dissected Prompt in Large Language Models3 Aug 2025
- 2025Alignment and Safety in Large Language Models: Safety Mechanisms, Training Paradigms, and Emerging Challenges25 Jul 2025
- 2025Training a Scientific Reasoning Model for Chemistry4 Jun 2025
- 2025SoSBench: Benchmarking Safety Alignment on Six Scientific Domains27 May 2025
- 2025SAFER: Advancing Safety Alignment via Efficient Ex-Ante Reasoning3 Apr 2025
- 2026Autonomous Research Agents: A Survey of AI Scientists and the Verification Gapcited by 6
- 2026Boiling the Frog: A Multi-Turn Benchmark for Agentic Safetycited by 3
- 2025Deep Research Agents Brings Deeper Harmcited by 2
- 2026Beyond single-channel agentic benchmarkingcited by 0
- 2026Autonomous Research Agents: A Survey of AI Scientists and the Verification Gap29 Jun 2026
- 2026Boiling the Frog: A Multi-Turn Benchmark for Agentic Safety21 May 2026
- 2026Beyond single-channel agentic benchmarking5 Feb 2026
- 2025Deep Research Agents Brings Deeper Harm13 Oct 2025
- 2025Alignment and Safety in Large Language Models: Safety Mechanisms, Training Paradigms, and Emerging Challengescited by 14
- 2025SoSBench: Benchmarking Safety Alignment on Six Scientific Domainscited by 11
- 2025MEUV: Achieving Fine-Grained Capability Activation in Large Language Models via Mutually Exclusive Unlock Vectorscited by 0
- 2026You Snooze, You Lose: Automatic Safety Alignment Restoration through Neural Weight Translationcited by 0
- 2026You Snooze, You Lose: Automatic Safety Alignment Restoration through Neural Weight Translation6 May 2026
- 2025MEUV: Achieving Fine-Grained Capability Activation in Large Language Models via Mutually Exclusive Unlock Vectors4 Sep 2025
- 2025Alignment and Safety in Large Language Models: Safety Mechanisms, Training Paradigms, and Emerging Challenges25 Jul 2025
- 2025SoSBench: Benchmarking Safety Alignment on Six Scientific Domains27 May 2025
- 2026Triaging Threats to Specialized Guardrailscited by 1
- 2026Triaging Threats to Specialized Guardrails29 May 2026
- 2025Are All Prompt Components Value-Neutral? Understanding the Heterogeneous Adversarial Robustness of Dissected Prompt in Large Language Modelscited by 3
- 2026A Blind Spot in Alignment: Quantifying Biosecurity Risks in Large Language Modelscited by 2
- 2025Beyond Benchmarks: LLM Evaluation with an Anthropomorphic and Lifecycle-oriented Roadmapcited by 1
- 2026Seamless Deception: Larger Language Models Are Better Knowledge Concealerscited by 0
- 2026SciHazard: A Benchmark for Measuring Scientific Safety Risks with Decomposed Harm Scoringcited by 0
- 2026A Blind Spot in Alignment: Quantifying Biosecurity Risks in Large Language Models3 Aug 2026
- 2026SciHazard: A Benchmark for Measuring Scientific Safety Risks with Decomposed Harm Scoring21 Jul 2026
- 2026Seamless Deception: Larger Language Models Are Better Knowledge Concealers15 Mar 2026
- 2025Beyond Benchmarks: LLM Evaluation with an Anthropomorphic and Lifecycle-oriented Roadmap26 Aug 2025
- 2025Are All Prompt Components Value-Neutral? Understanding the Heterogeneous Adversarial Robustness of Dissected Prompt in Large Language Models3 Aug 2025
Similar, not cited
Close in wording, no citation either way
- 2026SafeSci: Safety Evaluation of Large Language Models in Science Domains and Beyond
- 2025Safety Alignment Depth in Large Language Models: A Markov Chain Perspective
- 2024SciKnowEval: Evaluating Multi-level Scientific Knowledge of Large Language Models
- 2026DNAlign: Dynamic Null-Space Safe Alignment for LLMs
- 2026LASA: Language-Agnostic Semantic Alignment at the Semantic Bottleneck for LLM Safety
- 2025TRIDENT: Enhancing Large Language Model Safety with Tri-Dimensional Diversified Red-Teaming Data Synthesis
- 2024Locking Down the Finetuned LLMs Safety
- 2025The Hidden Space of Safety: Understanding Preference-Tuned LLMs in Multilingual context