Efficient Safety Benchmarking via Item Response Theory
Not on the map. Why?
Abstract (arXiv)
Safety benchmarks for language models are typically evaluated using static paradigms that treat all items as equally informative for all models, an assumption that is particularly problematic for adversarial, highly heterogeneous safety items. Applied in full to modern benchmark suites, current evaluation procedures would require on the order of 105 responses, most of which provide little ranking signal. We analyze six widely used safety benchmarks and make three contributions toward more efficient safety evaluation. First, we show that Item Response Theory (IRT) recovers interpretable structure on safety benchmarks, with ability estimates resolving differences among models that cluster at the ceiling of raw safety metrics. Second, we show that adaptive item selection, which dynamically chooses informative items for each model based on its responses, approximates full-benchmark rankings (Spearman's ρ > 0.90), reducing evaluation cost by at least 80% on every benchmark where this threshold is attainable, and by up to 99.9%, achieved on AIR-Bench 2024. Third, we introduce a practical procedure for extracting a fixed, informative subset of items reusable across models, a static alternative to adaptive selection with savings of 80--99.8% across benchmarks. Together, these results establish that psychometric methods enable benchmark-aware reductions in evaluation costs across the safety evaluation pipeline.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 23 of its 41 references that are in the map. First posted on arXiv 26 May 2026.
Builds on
23 of 41 references.
References · 23
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
- 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,429
- 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Datasetcited by 860
- 2022Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learnedcited by 729
- 2024JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Modelscited by 536
- 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 505
- 2024WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMscited by 496
- 2024AgentHarm: A Benchmark for Measuring Harmfulness of LLM Agentscited by 437
- 2024A StrongREJECT for Empty Jailbreakscited by 385
- 2024tinyBenchmarks: evaluating LLMs with fewer examplescited by 310
- 2024TrustLLM: Trustworthiness in Large Language Modelscited by 285
- 2024SORRY-Bench: Systematically Evaluating Large Language Model Safety Refusalcited by 240
11 more
- 2023ToxicChat: Unveiling Hidden Challenges of Toxicity Detection in Real-World User-AI Conversationcited by 231
- 2023Do-Not-Answer: A Dataset for Evaluating Safeguards in LLMscited by 184
- 2023Anchor Points: Benchmarking Models with Much Fewer Examplescited by 86
- 2023SimpleSafetyTests: a Test Suite for Identifying Critical Safety Risks in Large Language Modelscited by 76
- 2024AIR-Bench 2024: A Safety Benchmark Based on Risk Categories from Regulations and Policiescited by 74
- 2019Learning Latent Parameters without Human Response Patterns: Item Response Theory with Artificial Crowdscited by 40
- 2025Fluid Language Model Benchmarkingcited by 35
- 2025The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMscited by 26
- 2022py-irt: A Scalable Item Response Theory Library for Pythoncited by 19
- 2016Maximum a Posteriori Estimators as a Limit of Bayes Estimatorscited by 12
- 2025DISCO: Diversifying Sample Condensation for Efficient Model Evaluationcited by 5
Built on by
Not cited yet.