ChineseSafe: A Chinese Benchmark for Evaluating Safety in Large Language Models
Not on the map. Why?
Abstract (arXiv)
With the rapid development of Large language models (LLMs), understanding the capabilities of LLMs in identifying unsafe content has become increasingly important. While previous works have introduced several benchmarks to evaluate the safety risk of LLMs, the community still has a limited understanding of current LLMs' capability to recognize illegal and unsafe content in Chinese contexts. In this work, we present a Chinese safety benchmark (ChineseSafe) to facilitate research on the content safety of large language models. To align with the regulations for Chinese Internet content moderation, our ChineseSafe contains 205,034 examples across 4 classes and 10 sub-classes of safety issues. For Chinese contexts, we add several special types of illegal content: political sensitivity, pornography, and variant/homophonic words. Moreover, we employ two methods to evaluate the legal risks of popular LLMs, including open-sourced models and APIs. The results reveal that many LLMs exhibit vulnerability to certain types of safety issues, leading to legal risks in China. Our work provides a guideline for developers and researchers to facilitate the safety of LLMs. Our results are also available at https://huggingface.co/spaces/SUSTech/ChineseSafe-Benchmark. Additionally, we release a test set comprising 200,000 examples, which is publicly accessible at https://huggingface.co/datasets/SUSTech/ChineseSafe.
Key facts. Cited by 7 papers in the map (data through 14 Oct 2026). Builds on 33 of its 38 references that are in the map. First posted on arXiv 24 Oct 2024.
Builds on
33 of 38 references.
References · 33
- 2023GPT-4 Technical Reportcited by 18,396
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
- 2021On the Opportunities and Risks of Foundation Modelscited by 4,033
- 2023Qwen Technical Reportcited by 3,344
- 2023Mistral 7Bcited by 3,164
- 2023A Survey of Large Language Modelscited by 2,576
- 2022Emergent Abilities of Large Language Modelscited by 2,512
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,255
- 2023A Survey on Evaluation of Large Language Modelscited by 1,242
- 2024ChatGLM: A Family of Large Language Models from GLM-130B to GLM-4 All Toolscited by 1,121
- 2022GLM-130B: An Open Bilingual Pre-trained Modelcited by 843
- 2024Yi: Open Foundation Models by 01.AIcited by 719
21 more
- 2020CrowS-Pairs: A Challenge Dataset for Measuring Social Biases in Masked Language Modelscited by 710
- 2021BBQ: A Hand-Built Bias Benchmark for Question Answeringcited by 701
- 2023Baichuan 2: Open Large-scale Language Modelscited by 670
- 2024DeepSeek LLM: Scaling Open-Source Language Models with Longtermismcited by 642
- 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 505
- 2023Jailbreaking ChatGPT via Prompt Engineering: An Empirical Studycited by 498
- 2024InternLM2 Technical Reportcited by 397
- 2023Low-Resource Languages Jailbreak GPT-4cited by 309
- 2024TrustLLM: Trustworthiness in Large Language Modelscited by 285
- 2023Multilingual Jailbreak Challenges in Large Language Modelscited by 240
- 2023Red-Teaming Large Language Models using Chain of Utterances for Safety-Alignmentcited by 223
- 2023SafetyBench: Evaluating the Safety of Large Language Modelscited by 199
- 2023Do-Not-Answer: A Dataset for Evaluating Safeguards in LLMscited by 184
- 2024Attacks, Defenses and Evaluations for LLM Conversation Safety: A Surveycited by 130
- 2023A Survey of Safety and Trustworthiness of Large Language Models through the Lens of Verification and Validationcited by 93
- 2023Safety Assessment of Chinese Large Language Modelscited by 85
- 2022Fengshenbang 1.0: Being the Foundation of Chinese Cognitive Intelligencecited by 70
- 2023Latent Jailbreak: A Benchmark for Evaluating Text Safety and Output Robustness of Large Language Modelscited by 60
- 2024CHiSafetyBench: A Chinese Hierarchical Safety Benchmark for Large Language Modelscited by 15
- 2024A Chinese Dataset for Evaluating the Safeguards in Large Language Modelscited by 12
- 2024CHBench: A Chinese Dataset for Evaluating Health in Large Language Modelscited by 3
Built on by
Citing papers per year: 2025: 4; 2026: 3.
7 papers.
- 2025PolyGuard: A Multilingual Safety Moderation Tool for 17 Languagescited by 59
- 2025The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMscited by 26
- 2025Breaking the Cloak! Unveiling Chinese Cloaked Toxicity with Homophone Graph and Toxic Lexiconcited by 1
- 2025Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFTcited by 0
- 2026Calling the Bluff: Detecting Ever-Shifting Harmful Chat Dialogue via Ordered Reasoning Chain Regularizationcited by 0
- 2026Who Judges the Judges? A Chinese Safety QA Benchmark for Evaluating LLM Responses and Safety Judgescited by 0
- 2026PUBG Ally: A Conversational Embodied Agent as an AI Teammatecited by 0
- 2026PUBG Ally: A Conversational Embodied Agent as an AI Teammate24 Sep 2026
- 2026Who Judges the Judges? A Chinese Safety QA Benchmark for Evaluating LLM Responses and Safety Judges1 Sep 2026
- 2026Calling the Bluff: Detecting Ever-Shifting Harmful Chat Dialogue via Ordered Reasoning Chain Regularization9 Aug 2026
- 2025Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT27 Sep 2025
- 2025The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMs6 Jun 2025
- 2025Breaking the Cloak! Unveiling Chinese Cloaked Toxicity with Homophone Graph and Toxic Lexicon28 May 2025
- 2025PolyGuard: A Multilingual Safety Moderation Tool for 17 Languages6 Apr 2025