mlsanityData to 14 Oct 2026

EduZone: A Framework for Evaluating LLM Safety for K-12 Students and Teachers

arXiv 2608.02024 ↗First posted 3 Aug 2026cs.AI cs.CYcited by 1

On the map: LLM safety and security → Safety alignment, refusal and guardrails

Abstract (arXiv)

Large language models (LLMs) are increasingly used across diverse tasks in K-12 education, yet existing safety evaluations rarely examine how harmful or inappropriate content appears in interactions between LLMs and students or teachers. To address this, we present EduZone, an evaluation framework for LLM safety across diverse educational scenarios. Our framework systematically combines (1) student- and teacher-facing LLM usage contexts, (2) fine-grained curriculum concepts, and (3) 6 risk categories and 28 subcategories spanning both conventional and education-specific harms to generate contextually grounded adversarial interactions. We construct these interactions in three settings: single-turn requests, static multi-turn conversations, and dynamic multi-turn conversations. Using these interactions, we evaluate ten LLMs using four safety levels: refusal, safe assistance, risky assistance with safety guidance, and fully risky assistance. Our results reveal greater vulnerability to education-specific risks and dynamic multi-turn interactions, while existing safety guardrails fail to adequately address these risks. EduZone advances LLM safety in education by providing an automated, scalable evaluation framework that supports the development and deployment of safer LLMs in K-12 education.

Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 16 of its 30 references that are in the map. First posted on arXiv 3 Aug 2026.

Builds on

16 of 30 references.

Closest ancestors · 2

Same direction, newest first

  1. 2026CodeGuard: Improving LLM Guardrails in CS Education22 Jan
  2. 2025EduGuardBench: A Holistic Benchmark for Evaluating the Pedagogical Fidelity and Adversarial Safety of LLMs as Simulated Teachers10 Nov

Other references · 14

  1. 2024The Llama 3 Herd of Modelscited by 14,715
  2. 2021Training Verifiers to Solve Math Word Problemscited by 10,109
  3. 2021Measuring Mathematical Problem Solving With the MATH Datasetcited by 5,371
  4. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
  5. 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,429
  6. 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,420
  7. 2025gpt-oss-120b & gpt-oss-20b Model Cardcited by 1,386
  8. 2023Baseline Defenses for Adversarial Attacks Against Aligned Language Modelscited by 651
  9. 2023Detecting Language Model Attacks with Perplexitycited by 431
  10. 2024Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attackcited by 390
  11. 2024ShieldGemma: Generative AI Content Moderation Based on Gemmacited by 243
  12. 2023Large Language Models in Education: Vision and Opportunitiescited by 54
2 more
  1. 2025Large Reasoning Models Are Autonomous Jailbreak Agentscited by 13
  2. 2024Children's Overtrust and Shifting Perspectives of Generative AIcited by 5

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 1.

1 paper.

Similar, not cited

Close in wording, no citation either way

  1. 2025Safe-Child-LLM: A Developmental Benchmark for Evaluating LLM Safety in Child-LLM Interactions
  2. 2025LLMs and Childhood Safety: Identifying Risks and Proposing a Protection Framework for Safe Child-LLM Interaction
  3. 2025SproutBench: A Benchmark for Safe and Ethical Large Language Models for Youth
  4. 2026CR4T: Rewrite-Based Guardrails for Adolescent LLM Safety
  5. 2024ALERT: A Comprehensive Benchmark for Assessing Large Language Models' Safety through Red Teaming
  6. 2026SHAPE: Unifying Safety, Helpfulness and Pedagogy for Educational LLMs
  7. 2025Securing Educational LLMs: A Generalised Taxonomy of Attacks on LLMs and DREAD Risk Assessment
  8. 2025Policy-Grounded Safety Evaluation of 20 Large Language Models