Translation in progress Some entries still include text in the original language.
Oct 13 · Tuesday
Another 216 papers do not have category tags yet and are not included in filtered results.
“
About this collection Collection in progress We are building a large AI safety paper collection to help researchers find work related to their interests. Papers are collected automatically andfiltered only for relevance to AI safety , without judging quality, novelty or reading value. The default “Annotated first” shows papers with tags or published paper analyses first. Each group is ordered by original publication date, newest first, with undated papers last. “Newest first” uses publication dates only. This order is not a quality ranking.
One-line summaries, tags and paper analyses are prepared by AI from the papers. Language models may have systematic biases and produce hallucinations.We plan to carry out human annotation and review to reduce errors in this content.
在 CWEval 上跟踪代码生成的功能-安全差距
Published Oct 6
Evaluated models Gemini 1.5 Pro , Gemini 2.5 Pro , Gemini 3.1 Pro and others20 Abstract 绝对安全性上升且差距仍在,开放权重并不分开各家族的轨迹。
提出 VERA,审计 LLM 漏洞解释里的虚构推理
Published Oct 5
Evaluated models sonnet-5 , gemma-4-26b , llama-4-maverick and others8 用 J-lens 检测辩论中屈从多数的智能体是否仍内部表征原前提
Published Oct 2
Evaluated models Qwen3.5-4B , Qwen3.6-27B , Gemma-4-E4B-it and others4 Abstract 揭示 LLM 智能体屈从多数时内部仍表征原推理前提,指出辩论表态共识可能夸大真实认同。
构建编码 RL 奖励作弊测试台 CATCH 并检验 CoT 监控失效
Published Sep 30
Evaluated models Qwen3-4B , Qwen3.5-27B Abstract CATCH 用双运行金标签研究编码 RL 的奖励黑客,并观察到监控会被注释适应削弱。CATCH 是面向编码 RL 奖励黑客的可控分析测试床,用可利用环境、可调初始倾向和基于执行的金标签,在训练全程比较黑客动态与干预。
提出 CGMIA,检测代码生成基准样本是否泄漏进训练集
Published Sep 9
Evaluated models Qwen2.5-Coder (3B) , CodeGemma (2B) , DeepSeek-Coder (1.3B) and others5 Abstract CGMIA 融合相似度、通过率、困惑度与 CodeBERT,在模拟泄漏上优于八个 MIA 基线。CGMIA 用成员推断检测代码生成基准是否泄入 LLM 训练集,使评测不依赖对训练语料的直接访问。
用 abliteration 消融代码 LLM 拒答方向,分离拒答与漏洞注入能力
Published Jun 4
Evaluated models Qwen2.5-Coder-Instruct 3B , Qwen2.5-Coder-Instruct 7B , Qwen2.5-Coder-Instruct 14B Abstract 拒答可用低秩编辑去掉,CWE-89 注入是否成功仍由模型规模决定。这项初步可行性研究用 abliteration 把代码 LLM 的拒答和 CWE 注入能力拆开:意愿可以被低秩编辑解锁,注入是否成功仍看参数规模。
复评前沿模型代码生成中的包名幻觉与抢注攻击面
Published May 17
Evaluated models Claude Sonnet 4.6 , Claude Haiku 4.5 , GPT-5.4-mini and others5 Abstract 评估显示前沿模型包幻觉率收窄但威胁仍在,作者识别出跨模型通用攻击面并呼吁联合防御。
You have reached the end