SoSBench: Benchmarking Safety Alignment on Six Scientific Domains

Fuente: arXiv
Enregistré dans:
Détails bibliographiques
Auteurs principaux: Jiang, Fengqing, Ma, Fengbo, Xu, Zhangchen, Li, Yuetai, Rao, Zixin, Ramasubramanian, Bhaskar, Niu, Luyao, Li, Bo, Chen, Xianyan, Xiang, Zhen, Poovendran, Radha
Format: Preprint
Publié: 2025
Sujets:
Accès en ligne:
Tags: Ajouter un tag
Pas de tags, Soyez le premier à ajouter un tag!
_version_ 1866918426868449280
author Jiang, Fengqing
Ma, Fengbo
Xu, Zhangchen
Li, Yuetai
Rao, Zixin
Ramasubramanian, Bhaskar
Niu, Luyao
Li, Bo
Chen, Xianyan
Xiang, Zhen
Poovendran, Radha
author_facet Jiang, Fengqing
Ma, Fengbo
Xu, Zhangchen
Li, Yuetai
Rao, Zixin
Ramasubramanian, Bhaskar
Niu, Luyao
Li, Bo
Chen, Xianyan
Xiang, Zhen
Poovendran, Radha
contents Large language models (LLMs) exhibit advancing capabilities in complex tasks, such as reasoning and graduate-level question answering, yet their resilience against misuse, particularly involving scientifically sophisticated risks, remains underexplored. Existing safety benchmarks typically focus either on instructions requiring minimal knowledge comprehension (e.g., ``tell me how to build a bomb") or utilize prompts that are relatively low-risk (e.g., multiple-choice or classification tasks about hazardous content). Consequently, they fail to adequately assess model safety when handling knowledge-intensive, hazardous scenarios. To address this critical gap, we introduce SoSBench, a regulation-grounded, hazard-focused benchmark encompassing six high-risk scientific domains: chemistry, biology, medicine, pharmacology, physics, and psychology. The benchmark comprises 3,000 prompts derived from real-world regulations and laws, systematically expanded via an LLM-assisted evolutionary pipeline that introduces diverse, realistic misuse scenarios (e.g., detailed explosive synthesis instructions involving advanced chemical formulas). We evaluate frontier models within a unified evaluation framework using our SoSBench. Despite their alignment claims, advanced models consistently disclose policy-violating content across all domains, demonstrating alarmingly high rates of harmful responses (e.g., 84.9% for Deepseek-R1 and 50.3% for GPT-4.1). These results highlight significant safety alignment deficiencies and underscore urgent concerns regarding the responsible deployment of powerful LLMs.
format Preprint
id arxiv_https___arxiv_org_abs_2505_21605
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle SoSBench: Benchmarking Safety Alignment on Six Scientific Domains
Jiang, Fengqing
Ma, Fengbo
Xu, Zhangchen
Li, Yuetai
Rao, Zixin
Ramasubramanian, Bhaskar
Niu, Luyao
Li, Bo
Chen, Xianyan
Xiang, Zhen
Poovendran, Radha
Machine Learning
Artificial Intelligence
Cryptography and Security
Large language models (LLMs) exhibit advancing capabilities in complex tasks, such as reasoning and graduate-level question answering, yet their resilience against misuse, particularly involving scientifically sophisticated risks, remains underexplored. Existing safety benchmarks typically focus either on instructions requiring minimal knowledge comprehension (e.g., ``tell me how to build a bomb") or utilize prompts that are relatively low-risk (e.g., multiple-choice or classification tasks about hazardous content). Consequently, they fail to adequately assess model safety when handling knowledge-intensive, hazardous scenarios. To address this critical gap, we introduce SoSBench, a regulation-grounded, hazard-focused benchmark encompassing six high-risk scientific domains: chemistry, biology, medicine, pharmacology, physics, and psychology. The benchmark comprises 3,000 prompts derived from real-world regulations and laws, systematically expanded via an LLM-assisted evolutionary pipeline that introduces diverse, realistic misuse scenarios (e.g., detailed explosive synthesis instructions involving advanced chemical formulas). We evaluate frontier models within a unified evaluation framework using our SoSBench. Despite their alignment claims, advanced models consistently disclose policy-violating content across all domains, demonstrating alarmingly high rates of harmful responses (e.g., 84.9% for Deepseek-R1 and 50.3% for GPT-4.1). These results highlight significant safety alignment deficiencies and underscore urgent concerns regarding the responsible deployment of powerful LLMs.
title SoSBench: Benchmarking Safety Alignment on Six Scientific Domains
topic Machine Learning
Artificial Intelligence
Cryptography and Security
url https://arxiv.org/abs/2505.21605