RICoTA: Red-teaming of In-the-wild Conversation with Test Attempts
On the map: LLM safety and security → Jailbreaking
Abstract (arXiv)
User interactions with conversational agents (CAs) evolve in the era of heavily guardrailed large language models (LLMs). As users push beyond programmed boundaries to explore and build relationships with these systems, there is a growing concern regarding the potential for unauthorized access or manipulation, commonly referred to as "jailbreaking." Moreover, with CAs that possess highly human-like qualities, users show a tendency toward initiating intimate sexual interactions or attempting to tame their chatbots. To capture and reflect these in-the-wild interactions into chatbot designs, we propose RICoTA, a Korean red teaming dataset that consists of 609 prompts challenging LLMs with in-the-wild user-made dialogues capturing jailbreak attempts. We utilize user-chatbot conversations that were self-posted on a Korean Reddit-like community, containing specific testing and gaming intentions with a social chatbot. With these prompts, we aim to evaluate LLMs' ability to identify the type of conversation and users' testing purposes to derive chatbot design implications for mitigating jailbreaking risks. Our dataset will be made publicly available via GitHub.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in Jailbreaking, one of 12 directions in LLM safety and security. Builds on 14 of its 24 references that are in the map. First posted on arXiv 29 Jan 2025.
Builds on
14 of 24 references.
Closest ancestors · 3
Same direction, newest first
- 2023MasterKey: Automated Jailbreak Across Multiple Large Language Model Chatbots16 Jul
- 2023Jailbroken: How Does LLM Safety Training Fail?5 Jul
- 2023Jailbreaking ChatGPT via Prompt Engineering: An Empirical Study23 May
Other references · 11
- 2023GPT-4 Technical Reportcited by 18,132
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2020Language (Technology) is Power: A Critical Survey of "Bias" in NLPcited by 951
- 2022Discovering Language Model Behaviors with Model-Written Evaluationscited by 805
- 2020The State and Fate of Linguistic Diversity and Inclusion in the NLP Worldcited by 789
- 2018MultiWOZ -- A Large-Scale Multi-Domain Wizard-of-Oz Dataset for Task-Oriented Dialogue Modellingcited by 760
- 2023Whose Opinions Do Language Models Reflect?cited by 759
- 2019Towards Scalable Multi-domain Conversational Agents: The Schema-Guided Dialogue Datasetcited by 426
- 2023Language Model Tokenizers Introduce Unfairness Between Languagescited by 207
- 2023Explore, Establish, Exploit: Red Teaming Language Models from Scratchcited by 111
- 2022Multi2WOZ: A Robust Multilingual Dataset and Conversational Pretraining for Task-Oriented Dialogcited by 30
Built on by
Citing papers per year: 2026: 1.
1 paper.