mlsanityData to 14 Oct 2026

The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMs

arXiv 2506.11094 ↗First posted 6 Jun 2025cs.CL cs.AI cs.CRcited by 26

Not on the map. Why?

Abstract (arXiv)

With the rapid advancement of artificial intelligence, Large Language Models (LLMs) have shown remarkable capabilities in Natural Language Processing (NLP), including content generation, human-computer interaction, machine translation, and code generation. However, their widespread deployment has also raised significant safety concerns. In particular, LLM-generated content can exhibit unsafe behaviors such as toxicity, bias, or misinformation, especially in adversarial contexts, which has attracted increasing attention from both academia and industry. Although numerous studies have attempted to evaluate these risks, a comprehensive and systematic survey on safety evaluation of LLMs is still lacking. This work aims to fill this gap by presenting a structured overview of recent advances in safety evaluation of LLMs. Specifically, we propose a four-dimensional taxonomy: (i) Why to evaluate, which explores the background of safety evaluation of LLMs, how they differ from general LLMs evaluation, and the significance of such evaluation; (ii) What to evaluate, which examines and categorizes existing safety evaluation tasks based on key capabilities, including dimensions such as toxicity, robustness, ethics, bias and fairness, truthfulness, and related aspects; (iii) Where to evaluate, which summarizes the evaluation metrics, datasets and benchmarks currently used in safety evaluations; (iv) How to evaluate, which reviews existing mainstream evaluation methods based on the roles of the evaluators and some evaluation frameworks that integrate the entire evaluation pipeline. Finally, we identify the challenges in safety evaluation of LLMs and propose promising research directions to promote further advancement in this field. We emphasize the necessity of prioritizing safety evaluation to ensure the reliable and responsible deployment of LLMs in real-world applications.

Key facts. Cited by 26 papers in the map (data through 14 Oct 2026). Builds on 233 of its 291 references that are in the map. First posted on arXiv 6 Jun 2025.

Builds on

233 of 291 references.

References · 233

  1. 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
  2. 2023GPT-4 Technical Reportcited by 18,396
  3. 2022Training language models to follow instructions with human feedbackcited by 15,971
  4. 2024The Llama 3 Herd of Modelscited by 14,715
  5. 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,380
  6. 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,372
  7. 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,459
  8. 2020Retrieval-Augmented Generation for Knowledge-Intensive NLP Taskscited by 9,297
  9. 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,626
  10. 2014Explaining and Harnessing Adversarial Examplescited by 7,364
  11. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
  12. 2019BERTScore: Evaluating Text Generation with BERTcited by 5,512
38 more
  1. 2022Large Language Models are Zero-Shot Reasonerscited by 4,374
  2. 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,720
  3. 2020Longformer: The Long-Document Transformercited by 3,413
  4. 2023Qwen Technical Reportcited by 3,344
  5. 2023Tree of Thoughts: Deliberate Problem Solving with Large Language Modelscited by 3,211
  6. 2023Mistral 7Bcited by 3,164
  7. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
  8. 2022Locating and Editing Factual Associations in GPTcited by 2,691
  9. 2023A Survey of Large Language Modelscited by 2,576
  10. 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
  11. 2023A Survey on Large Language Model based Autonomous Agentscited by 2,242
  12. 2022Survey of Hallucination in Natural Language Generationcited by 2,075
  13. 2023A Survey on Hallucination in Large Language Models: Principles, Taxonomy, Challenges, and Open Questionscited by 1,601
  14. 2023The Rise and Potential of Large Language Model Based Agents: A Surveycited by 1,439
  15. 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,429
  16. 2024A Survey on LLM-as-a-Judgecited by 1,423
  17. 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,420
  18. 2023FActScore: Fine-grained Atomic Evaluation of Factual Precision in Long Form Text Generationcited by 1,282
  19. 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,255
  20. 2023A Survey on Evaluation of Large Language Modelscited by 1,242
  21. 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,207
  22. 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!cited by 1,154
  23. 2023Large Language Models are not Fair Evaluatorscited by 1,085
  24. 2023A Survey on Multimodal Large Language Modelscited by 909
  25. 2023A Multitask, Multilingual, Multimodal Evaluation of ChatGPT on Reasoning, Hallucination, and Interactivitycited by 894
  26. 2023REPLUG: Retrieval-Augmented Black-Box Language Modelscited by 792
  27. 2023AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Modelscited by 785
  28. 2023Can Large Language Models Be an Alternative to Human Evaluations?cited by 734
  29. 2022Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learnedcited by 729
  30. 2020Aligning AI With Shared Human Valuescited by 723
  31. 2023Siren's Song in the AI Ocean: A Survey on Hallucination in Large Language Modelscited by 698
  32. 2024LLM Evaluators Recognize and Favor Their Own Generationscited by 686
  33. 2020SummEval: Re-evaluating Summarization Evaluationcited by 674
  34. 2024A Survey on Large Language Models for Code Generationcited by 658
  35. 2023GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Promptscited by 560
  36. 2024JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Modelscited by 536
  37. 2023DecodingTrust: A Comprehensive Assessment of Trustworthiness in GPT Modelscited by 518
  38. 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 505

50 most cited of 233 All 233 (JSON)

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 8; 2026: 18.

26 papers.

Sort:

By area:

  1. 2026Safe Language Generation in the Limitcited by 9
  2. 2026Privacy Collapse: Benign Fine-Tuning Can Break Contextual Privacy in Language Modelscited by 6
  3. 2026Steering at the Source: Style Modulation Heads for Robust Persona Controlcited by 5
  4. 2025From "Aha Moments" to Controllable Thinking: Toward Meta-Cognitive Reasoning in Large Reasoning Models via Decoupled Reasoning and Controlcited by 4
  5. 2026When Safety Becomes a Vulnerability: Exploiting LLM Alignment Homogeneity for Transferable Blocking in RAGcited by 4
  6. 2026How Real is Your Jailbreak? Fine-grained Jailbreak Evaluation with Anchored Referencecited by 3
  7. 2026IndicSafe: A Benchmark for Evaluating Multilingual LLM Safety in South Asiacited by 3
  8. 2026MHSafeEval: Role-Aware Interaction-Level Evaluation of Mental Health Safety in Large Language Modelscited by 3
  9. 2026Evo-Attacker: Memory-Augmented Reinforcement Learning for Long-Horizon Tool Attacks on LLM-MAScited by 3
  10. 2026Safety is Contextual, LLM-Judges Are Not: Navigating the Rigid Priors of Evaluatorscited by 3
  11. 2025PRISON: Unmasking the Criminal Potential of Large Language Modelscited by 2
  12. 2025LLMEval-Fair: A Large-Scale Longitudinal Study on Robust and Fair Evaluation of Large Language Modelscited by 2
14 more
  1. 2025A Hierarchical Imprecise Probability Approach to Reliability Assessment of Large Language Modelscited by 2
  2. 2025Safe for Whom? Rethinking How We Evaluate the Safety of LLMs for Real Userscited by 2
  3. 2026A Systematic Evaluation of Black-Box Uncertainty Estimation Methods for Large Language Modelscited by 2
  4. 2026Testing Retrieval-Augmented Generation Systems with Chunk Coveragecited by 2
  5. 2025SafetyFlow: An Agent-Flow System for Automated LLM Safety Benchmarkingcited by 1
  6. 2025Do You Feel Comfortable? Detecting Hidden Conversational Escalation in AI Chatbotscited by 1
  7. 2026JUBAKU: An Adversarial Benchmark for Exposing Culturally Grounded Stereotypes in Japanese LLMscited by 1
  8. 2025Constrained Language Model Policy Optimization via Risk-aware Stepwise Alignmentcited by 0
  9. 2026Taiwan Safety Benchmark and Breeze Guard: Toward Trustworthy AI for Taiwanese Mandarincited by 0
  10. 2026Magic, Madness, Heaven, Sin: LLM Output Diversity is Everything, Everywhere, All at Oncecited by 0
  11. 2026Efficient Safety Benchmarking via Item Response Theorycited by 0
  12. 2026EvalSafetyGap: A Hybrid Survey and Conceptual Framework for LLM Evaluation-Safety Failurescited by 0
  13. 2026No One Model Catches Every Harm: Benchmarking Content Moderation Across Safety Scenarioscited by 0
  14. 2026AlcaTRAz - Anchored Tree-Rule Defense Against Jailbreakscited by 0