SG-Bench: Evaluating LLM Safety Generalization Across Diverse Tasks and Prompt Types

Fuente: arXiv
Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: Mou, Yutao, Zhang, Shikun, Ye, Wei
Format: Preprint
Veröffentlicht: 2024
Schlagworte:
Online-Zugang:
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
_version_ 1866912093240819712
author Mou, Yutao
Zhang, Shikun
Ye, Wei
author_facet Mou, Yutao
Zhang, Shikun
Ye, Wei
contents Ensuring the safety of large language model (LLM) applications is essential for developing trustworthy artificial intelligence. Current LLM safety benchmarks have two limitations. First, they focus solely on either discriminative or generative evaluation paradigms while ignoring their interconnection. Second, they rely on standardized inputs, overlooking the effects of widespread prompting techniques, such as system prompts, few-shot demonstrations, and chain-of-thought prompting. To overcome these issues, we developed SG-Bench, a novel benchmark to assess the generalization of LLM safety across various tasks and prompt types. This benchmark integrates both generative and discriminative evaluation tasks and includes extended data to examine the impact of prompt engineering and jailbreak on LLM safety. Our assessment of 3 advanced proprietary LLMs and 10 open-source LLMs with the benchmark reveals that most LLMs perform worse on discriminative tasks than generative ones, and are highly susceptible to prompts, indicating poor generalization in safety alignment. We also explain these findings quantitatively and qualitatively to provide insights for future research.
format Preprint
id arxiv_https___arxiv_org_abs_2410_21965
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle SG-Bench: Evaluating LLM Safety Generalization Across Diverse Tasks and Prompt Types
Mou, Yutao
Zhang, Shikun
Ye, Wei
Computation and Language
Ensuring the safety of large language model (LLM) applications is essential for developing trustworthy artificial intelligence. Current LLM safety benchmarks have two limitations. First, they focus solely on either discriminative or generative evaluation paradigms while ignoring their interconnection. Second, they rely on standardized inputs, overlooking the effects of widespread prompting techniques, such as system prompts, few-shot demonstrations, and chain-of-thought prompting. To overcome these issues, we developed SG-Bench, a novel benchmark to assess the generalization of LLM safety across various tasks and prompt types. This benchmark integrates both generative and discriminative evaluation tasks and includes extended data to examine the impact of prompt engineering and jailbreak on LLM safety. Our assessment of 3 advanced proprietary LLMs and 10 open-source LLMs with the benchmark reveals that most LLMs perform worse on discriminative tasks than generative ones, and are highly susceptible to prompts, indicating poor generalization in safety alignment. We also explain these findings quantitatively and qualitatively to provide insights for future research.
title SG-Bench: Evaluating LLM Safety Generalization Across Diverse Tasks and Prompt Types
topic Computation and Language
url https://arxiv.org/abs/2410.21965