论文研究
全球精选 ·
@Saikat Mondal, Mamta, Deeksha Varshney, Oana Cocarascu, Asif Ekbal
IndicSafeEval:评估大语言模型在多语言说服性越狱攻击下的安全鲁棒性
该论文提出了一个名为IndicSafeEval的新基准,用于评估大语言模型在多种印度语言和英语等语境下的安全表现。研究发现,模型在面对多语言说服性越狱攻击时,安全对齐能力显著下降,尤其在低资源语言中更为明显。
AI推荐理由 该研究揭示大模型在多语言说服性攻击下安全对齐显著失效,尤其在低资源语言中,说明依赖英语安全评估不足以保障全球部署。实际意义:多语言产品需专门进行本地化安全测试,否则可能在非英语市场引发治理与信任风险。
85
正文
计算机科学 > 计算与语言
arXiv:2609.03781 (cs)
[提交于2026年9月3日(v1),最后修订于2026年9月4日(本版本,v2)]
标题:IndicSafeEval:多语言说服性越狱攻击下大型语言模型的安全鲁棒性
作者:Saikat Mondal, Mamta, Deeksha Varshney, Oana Cocarascu, Asif Ekbal
查看论文PDF,标题为“IndicSafeEval: Safety Robustness of Large Language Models under Multilingual Persuasive Jailbreak Attacks”,作者:Saikat Mondal等4人
查看PDF
HTML(实验性)
摘要:大型语言模型(LLM)越来越多地用于多语言环境,但其安全性仍主要用英语评估。这限制了我们对对齐失败如何在低资源和文化多样语言中表现的理解。我们引入了IndicSafeEval,一个针对印度语言的基于说服的越狱评估框架。我们的基准将十个安全关键内容类别与六种类似人类的劝说策略相结合,涵盖四种不同的印度语言,如印地语、孟加拉语、马拉地语和旁遮普语,产生了7,200个对抗性提示。我们对几个开源LLM进行了系统的黑盒评估,以检查其安全行为在不同语言、劝说策略和风险类别中的变化。我们的分析表明,模型在所有语言和提示风格下并非同样安全。相反,安全性能强烈依赖于所使用的语言以及使用劝说线索表达请求的方式。我们进一步观察到,不同的风险类别表现出不同程度的脆弱性,某些类型的有害内容比其他内容更容易受到基于说服的越狱攻击。这些发现揭示了当前安全评估的重要局限性,这些评估主要以英语为中心,并强调了需要多语言和说服感知的基准框架,以更准确地评估现实世界中的LLM安全性。我们的实现可在以下https URL获取。警告:本文包含可能具有冒犯性或有害的示例数据。
评论:
38页,7图,33表。被EMNLP 2026 Findings接收。包含有害模型输出示例
主题:
计算与语言(cs.CL);人工智能(cs.AI)
ACM类别:
I.2.7
引用为:
arXiv:2609.03781 [cs.CL]
(或
arXiv:2609.03781v2 [cs.CL] 用于此版本)
https://doi.org/10.48550/arXiv.2609.03781
了解更多
arXiv发布的DOI via DataCite
提交历史
来自:Saikat Mondal [查看电子邮件]
[v1]
2026年9月3日星期四 12:54:44 UTC(4,181 KB)
[v2]
2026年9月4日星期五 11:46:25 UTC(4,135 KB)
全文链接:
访问论文:
查看论文PDF,标题为“IndicSafeEval: Safety Robustness of Large Language Models under Multilingual Persuasive Jailbreak Attacks”,作者:Saikat Mondal等4人
查看PDF
HTML(实验性)
TeX源
查看许可证
当前浏览上下文:
cs.CL
新
|
最近
| 2026-09
更改为浏览:
cs
cs.AI
参考文献与引用
NASA ADS
Google Scholar
Semantic Scholar
导出BibTeX引用
加载中...
BibTeX格式引用
×
加载中...
数据提供者:
书签
书目工具
书目与引用工具
书目浏览器切换
书目浏览器(什么是浏览器?)
关联论文切换
关联论文(什么是关联论文?)
Litmaps切换
Litmaps(什么是Litmaps?)
scite.ai切换
scite智能引用(什么是智能引用?)
代码、数据、媒体
与本文相关的代码、数据和媒体
alphaXiv切换
alphaXiv(什么是alphaXiv?)
代码链接切换
CatalyzeX代码查找器(什么是CatalyzeX?)
DagsHub切换
DagsHub(什么是DagsHub?)
GotitPub切换
Gotit.pub(什么是GotitPub?)
Huggingface切换
Hugging Face(什么是Huggingface?)
ScienceCast切换
ScienceCast(什么是ScienceCast?)
演示
演示
Replicate切换
Replicate(什么是Replicate?)
Spaces切换
Hugging Face Spaces(什么是Spaces?)
Spaces切换
TXYZ.AI(什么是TXYZ.AI?)
相关论文
推荐与搜索工具
链接到Influence Flower
Influence Flower(什么是Influence Flowers?)
核心推荐器切换
CORE推荐器(什么是CORE?)
作者
会议
机构
主题
关于arXivLabs
arXivLabs:与社区合作者的实验项目
arXivLabs是一个框架,允许合作者直接在我们的网站上开发和分享新的arXiv功能。
与arXivLabs合作的个人和组织都接受并认可我们的价值观:开放性、社区、卓越和用户数据隐私。arXiv致力于这些价值观,并且只与遵守这些价值观的合作伙伴合作。
有一个能为arXiv社区增加价值的项目想法吗?了解更多关于arXivLabs的信息。
这篇论文的作者中哪些是背书人? |
禁用MathJax(什么是MathJax?)
查看原文(中文正文为 AI 翻译)
Computer Science > Computation and Language
arXiv:2609.03781 (cs)
[Submitted on 3 Sep 2026 (v1), last revised 4 Sep 2026 (this version, v2)]
Title:IndicSafeEval: Safety Robustness of Large Language Models under Multilingual Persuasive Jailbreak Attacks
Authors:Saikat Mondal, Mamta, Deeksha Varshney, Oana Cocarascu, Asif Ekbal
View a PDF of the paper titled IndicSafeEval: Safety Robustness of Large Language Models under Multilingual Persuasive Jailbreak Attacks, by Saikat Mondal and 4 other authors
View PDF
HTML (experimental)
Abstract:Large language models (LLMs) are increasingly used in multilingual settings, yet their safety is still evaluated primarily in English. This limits our understanding of how alignment failures manifest in low-resource and culturally diverse languages. We introduce IndicSafeEval, a persuasion-based jailbreak evaluation framework for Indian languages. Our benchmark combines ten safety critical content categories with six human-like persuasive strategies across four different Indian languages, such as Hindi, Bengali, Marathi and Punjabi, resulting in 7,200 adversarial prompts. We conduct a systematic black-box evaluation of several open-source LLMs to examine how their safety behaviour varies across languages, persuasion strategies, and risk categories. Our analysis shows that the model does not behave equally safely across all languages and prompt styles. Instead, safety performance depends strongly on both the languages used and the way a request is phrased using persuasive cues. We further observe that different risk categories exhibit different levels of vulnerability, with some types of harmful content being significantly more susceptible to persuasion-based jailbreaks than others. These findings reveal important limitations of current safety evaluations, which are largely English-centric, and underscore the need for multilingual and persuasion-aware benchmarking frameworks to more accurately assess real-world LLM safety. Our implementation is available at this https URL. Warning: this paper contains example data that may be offensive or harmful.
Comments:
38 pages, 7 figures, 33 tables. Accepted to Findings of EMNLP 2026. Contains examples of harmful model outputs
Subjects:
Computation and Language (cs.CL); Artificial Intelligence (cs.AI)
ACM classes:
I.2.7
Cite as:
arXiv:2609.03781 [cs.CL]
(or
arXiv:2609.03781v2 [cs.CL] for this version)
https://doi.org/10.48550/arXiv.2609.03781
Focus to learn more
arXiv-issued DOI via DataCite
Submission history
From: Saikat Mondal [view email]
[v1]
Thu, 3 Sep 2026 12:54:44 UTC (4,181 KB)
[v2]
Fri, 4 Sep 2026 11:46:25 UTC (4,135 KB)
Full-text links:
Access Paper:
View a PDF of the paper titled IndicSafeEval: Safety Robustness of Large Language Models under Multilingual Persuasive Jailbreak Attacks, by Saikat Mondal and 4 other authors
View PDF
HTML (experimental)
TeX Source
view license
Current browse context:
cs.CL
new
|
recent
| 2026-09
Change to browse by:
cs
cs.AI
References & Citations
NASA ADS
Google Scholar
Semantic Scholar
export BibTeX citation
Loading...
BibTeX formatted citation
×
loading...
Data provided by:
Bookmark
Bibliographic Tools
Bibliographic and Citation Tools
Bibliographic Explorer Toggle
Bibliographic Explorer (What is the Explorer?)
Connected Papers Toggle
Connected Papers (What is Connected Papers?)
Litmaps Toggle
Litmaps (What is Litmaps?)
scite.ai Toggle
scite Smart Citations (What are Smart Citations?)
Code, Data, Media
Code, Data and Media Associated with this Article
alphaXiv Toggle
alphaXiv (What is alphaXiv?)
Links to Code Toggle
CatalyzeX Code Finder for Papers (What is CatalyzeX?)
DagsHub Toggle
DagsHub (What is DagsHub?)
GotitPub Toggle
Gotit.pub (What is GotitPub?)
Huggingface Toggle
Hugging Face (What is Huggingface?)
ScienceCast Toggle
ScienceCast (What is ScienceCast?)
Demos
Demos
Replicate Toggle
Replicate (What is Replicate?)
Spaces Toggle
Hugging Face Spaces (What is Spaces?)
Spaces Toggle
TXYZ.AI (What is TXYZ.AI?)
Related Papers
Recommenders and Search Tools
Link to Influence Flower
Influence Flower (What are Influence Flowers?)
Core recommender toggle
CORE Recommender (What is CORE?)
Author
Venue
Institution
Topic
About arXivLabs
arXivLabs: experimental projects with community collaborators
arXivLabs is a framework that allows collaborators to develop and share new arXiv features directly on our website.
Both individuals and organizations that work with arXivLabs have embraced and accepted our values of openness, community, excellence, and user data privacy. arXiv is committed to these values and only works with partners that adhere to them.
Have an idea for a project that will add value for arXiv's community? Learn more about arXivLabs.
Which authors of this paper are endorsers? |
Disable MathJax (What is MathJax?)
来源报道 · 4 篇 · 以下链接均前往原始媒体
Saikat Mondal, Mamta, Deeksha Varshney, Oana Cocarascu, Asif Ekbal
IndicSafeEval:评估大语言模型在多语言说服性越狱攻击下的安全鲁棒性
09-07 · 原文发布
Saikat Mondal, Mamta, Deeksha Varshney, Oana Cocarascu, Asif Ekbal
IndicSafeEval:评估大语言模型在多语言说服性越狱攻击下的安全鲁棒性
09-07 · 原文发布