Safety Evaluation of DeepSeek Models in Chinese Contexts

Fuente: arXiv
Salvato in:
Dettagli Bibliografici
Autori principali: Zhang, Wenjing, Lei, Xuejiao, Liu, Zhaoxiang, Wang, Ning, Long, Zhenhong, Yang, Peijun, Zhao, Jiaojiao, Hua, Minjie, Ma, Chaoyang, Wang, Kai, Lian, Shiguo
Natura: Preprint
Pubblicazione: 2025
Soggetti:
Accesso online:
Tags: Aggiungi Tag
Nessun Tag, puoi essere il primo ad aggiungerne!!
_version_ 1866915276952436736
author Zhang, Wenjing
Lei, Xuejiao
Liu, Zhaoxiang
Wang, Ning
Long, Zhenhong
Yang, Peijun
Zhao, Jiaojiao
Hua, Minjie
Ma, Chaoyang
Wang, Kai
Lian, Shiguo
author_facet Zhang, Wenjing
Lei, Xuejiao
Liu, Zhaoxiang
Wang, Ning
Long, Zhenhong
Yang, Peijun
Zhao, Jiaojiao
Hua, Minjie
Ma, Chaoyang
Wang, Kai
Lian, Shiguo
contents Recently, the DeepSeek series of models, leveraging their exceptional reasoning capabilities and open-source strategy, is reshaping the global AI landscape. Despite these advantages, they exhibit significant safety deficiencies. Research conducted by Robust Intelligence, a subsidiary of Cisco, in collaboration with the University of Pennsylvania, revealed that DeepSeek-R1 has a 100\% attack success rate when processing harmful prompts. Additionally, multiple safety companies and research institutions have confirmed critical safety vulnerabilities in this model. As models demonstrating robust performance in Chinese and English, DeepSeek models require equally crucial safety assessments in both language contexts. However, current research has predominantly focused on safety evaluations in English environments, leaving a gap in comprehensive assessments of their safety performance in Chinese contexts. In response to this gap, this study introduces CHiSafetyBench, a Chinese-specific safety evaluation benchmark. This benchmark systematically evaluates the safety of DeepSeek-R1 and DeepSeek-V3 in Chinese contexts, revealing their performance across safety categories. The experimental results quantify the deficiencies of these two models in Chinese contexts, providing key insights for subsequent improvements. It should be noted that, despite our efforts to establish a comprehensive, objective, and authoritative evaluation benchmark, the selection of test samples, characteristics of data distribution, and the setting of evaluation criteria may inevitably introduce certain biases into the evaluation results. We will continuously optimize the evaluation benchmark and periodically update this report to provide more comprehensive and accurate assessment outcomes. Please refer to the latest version of the paper for the most recent evaluation results and conclusions.
format Preprint
id arxiv_https___arxiv_org_abs_2502_11137
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle Safety Evaluation of DeepSeek Models in Chinese Contexts
Zhang, Wenjing
Lei, Xuejiao
Liu, Zhaoxiang
Wang, Ning
Long, Zhenhong
Yang, Peijun
Zhao, Jiaojiao
Hua, Minjie
Ma, Chaoyang
Wang, Kai
Lian, Shiguo
Computation and Language
Artificial Intelligence
Recently, the DeepSeek series of models, leveraging their exceptional reasoning capabilities and open-source strategy, is reshaping the global AI landscape. Despite these advantages, they exhibit significant safety deficiencies. Research conducted by Robust Intelligence, a subsidiary of Cisco, in collaboration with the University of Pennsylvania, revealed that DeepSeek-R1 has a 100\% attack success rate when processing harmful prompts. Additionally, multiple safety companies and research institutions have confirmed critical safety vulnerabilities in this model. As models demonstrating robust performance in Chinese and English, DeepSeek models require equally crucial safety assessments in both language contexts. However, current research has predominantly focused on safety evaluations in English environments, leaving a gap in comprehensive assessments of their safety performance in Chinese contexts. In response to this gap, this study introduces CHiSafetyBench, a Chinese-specific safety evaluation benchmark. This benchmark systematically evaluates the safety of DeepSeek-R1 and DeepSeek-V3 in Chinese contexts, revealing their performance across safety categories. The experimental results quantify the deficiencies of these two models in Chinese contexts, providing key insights for subsequent improvements. It should be noted that, despite our efforts to establish a comprehensive, objective, and authoritative evaluation benchmark, the selection of test samples, characteristics of data distribution, and the setting of evaluation criteria may inevitably introduce certain biases into the evaluation results. We will continuously optimize the evaluation benchmark and periodically update this report to provide more comprehensive and accurate assessment outcomes. Please refer to the latest version of the paper for the most recent evaluation results and conclusions.
title Safety Evaluation of DeepSeek Models in Chinese Contexts
topic Computation and Language
Artificial Intelligence
url https://arxiv.org/abs/2502.11137