TeleAI-Safety: A comprehensive LLM jailbreaking benchmark towards attacks, defenses, and evaluations

Fuente: arXiv
Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: Chen, Xiuyuan, Zhao, Jian, He, Yuxiang, Xun, Yuan, Liu, Xinwei, Li, Yanshu, Zhou, Huilin, Cai, Wei, Shi, Ziyan, Yuan, Yuchen, Zhang, Tianle, Zhang, Chi, Li, Xuelong
Format: Preprint
Veröffentlicht: 2025
Schlagworte:
Online-Zugang:
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
_version_ 1866917130812784640
author Chen, Xiuyuan
Zhao, Jian
He, Yuxiang
Xun, Yuan
Liu, Xinwei
Li, Yanshu
Zhou, Huilin
Cai, Wei
Shi, Ziyan
Yuan, Yuchen
Zhang, Tianle
Zhang, Chi
Li, Xuelong
author_facet Chen, Xiuyuan
Zhao, Jian
He, Yuxiang
Xun, Yuan
Liu, Xinwei
Li, Yanshu
Zhou, Huilin
Cai, Wei
Shi, Ziyan
Yuan, Yuchen
Zhang, Tianle
Zhang, Chi
Li, Xuelong
contents While the deployment of large language models (LLMs) in high-value industries continues to expand, the systematic assessment of their safety against jailbreak and prompt-based attacks remains insufficient. Existing safety evaluation benchmarks and frameworks are often limited by an imbalanced integration of core components (attack, defense, and evaluation methods) and an isolation between flexible evaluation frameworks and standardized benchmarking capabilities. These limitations hinder reliable cross-study comparisons and create unnecessary overhead for comprehensive risk assessment. To address these gaps, we present TeleAI-Safety, a modular and reproducible framework coupled with a systematic benchmark for rigorous LLM safety evaluation. Our framework integrates a broad collection of 19 attack methods (including one self-developed method), 29 defense methods, and 19 evaluation methods (including one self-developed method). With a curated attack corpus of 342 samples spanning 12 distinct risk categories, the TeleAI-Safety benchmark conducts extensive evaluations across 14 target models. The results reveal systematic vulnerabilities and model-specific failure cases, highlighting critical trade-offs between safety and utility, and identifying potential defense patterns for future optimization. In practical scenarios, TeleAI-Safety can be flexibly adjusted with customized attack, defense, and evaluation combinations to meet specific demands. We release our complete code and evaluation results to facilitate reproducible research and establish unified safety baselines.
format Preprint
id arxiv_https___arxiv_org_abs_2512_05485
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle TeleAI-Safety: A comprehensive LLM jailbreaking benchmark towards attacks, defenses, and evaluations
Chen, Xiuyuan
Zhao, Jian
He, Yuxiang
Xun, Yuan
Liu, Xinwei
Li, Yanshu
Zhou, Huilin
Cai, Wei
Shi, Ziyan
Yuan, Yuchen
Zhang, Tianle
Zhang, Chi
Li, Xuelong
Cryptography and Security
While the deployment of large language models (LLMs) in high-value industries continues to expand, the systematic assessment of their safety against jailbreak and prompt-based attacks remains insufficient. Existing safety evaluation benchmarks and frameworks are often limited by an imbalanced integration of core components (attack, defense, and evaluation methods) and an isolation between flexible evaluation frameworks and standardized benchmarking capabilities. These limitations hinder reliable cross-study comparisons and create unnecessary overhead for comprehensive risk assessment. To address these gaps, we present TeleAI-Safety, a modular and reproducible framework coupled with a systematic benchmark for rigorous LLM safety evaluation. Our framework integrates a broad collection of 19 attack methods (including one self-developed method), 29 defense methods, and 19 evaluation methods (including one self-developed method). With a curated attack corpus of 342 samples spanning 12 distinct risk categories, the TeleAI-Safety benchmark conducts extensive evaluations across 14 target models. The results reveal systematic vulnerabilities and model-specific failure cases, highlighting critical trade-offs between safety and utility, and identifying potential defense patterns for future optimization. In practical scenarios, TeleAI-Safety can be flexibly adjusted with customized attack, defense, and evaluation combinations to meet specific demands. We release our complete code and evaluation results to facilitate reproducible research and establish unified safety baselines.
title TeleAI-Safety: A comprehensive LLM jailbreaking benchmark towards attacks, defenses, and evaluations
topic Cryptography and Security
url https://arxiv.org/abs/2512.05485