inference/research
verifiedhigh · 0.85updated 2026-10-04

Introducing v0.5 of the AI Safety Benchmark from MLCommons

security · arxiv

Fields

id
papers/meth-ai-safety-benchmark-v05
arXiv
2404.12241
Venue
arxiv-preprint
Venue track
unknown
Year
2024
Category
security
Adoption
research-only
Authors
Vidgen, BertieAgrawal, AdarshAhmed, Ahmed M.Akinwande, VictorAl-Nuaimi, NamirAlfaraj, NajlaAlhajjar, ElieAroyo, LoraBavalatti, TruptiBartolo, MaxBlili-Hamelin, BorhaneBollacker, KurtBomassani, RishiBoston, Marisa FerraraCampos, SiméonChakra, KalChen, CanyuColeman, CodyCoudert, Zacharie DelpierreDerczynski, LeonDutta, DebojyotiEisenberg, IanEzick, JamesFrase, HeatherFuller, BrianGandikota, RamGangavarapu, AgasthyaGangavarapu, AnanyaGealy, JamesGhosh, RajatGoel, JamesGohar, UsmanGoswami, SujataHale, Scott A.Hutiri, WiebkeImperial, Joseph MarvinJandial, SurganJudd, NickJuefei-Xu, FelixKhomh, FoutseKailkhura, BhavyaKirk, Hannah RoseKlyman, KevinKnotz, ChrisKuchnik, MichaelKumar, Shachi H.Kumar, SrijanLengerich, ChrisLi, BoLiao, ZeyiLong, Eileen PetersLu, VictorLuger, SarahMai, YifanMammen, Priyanka MaryManyeki, KelvinMcGregor, SeanMehta, VirendraMohammed, ShafeeMoss, EmanuelNachman, LamaNaganna, Dinesh JinenhallyNikanjam, AminNushi, BesmiraOala, LuisOrr, IftachParrish, AliciaPatlak, CigdemPietri, WilliamPoursabzi-Sangdeh, ForoughPresani, EleonoraPuletti, FabrizioRöttger, PaulSahay, SauravSantos, TimScherrer, NinoSebag, Alice SchoenauerSchramowski, PatrickShahbazi, AbolfazlSharma, VinShen, XudongSistla, VamsiTang, LeonardTestuggine, DavideThangarasa, VithursanWatkins, Elizabeth AnneWeiss, RebeccaWelty, ChrisWilbers, TylerWilliams, AdinaWu, Carole-JeanYadav, PoonamYang, XianjunZeng, YiZhang, WenhuiZhdanov, FedorZhu, JiachengLiang, PercyMattson, PeterVanschoren, Joaquin
Affiliations
MLCommons100+ institutions
Problem
AI safety benchmarks are needed to assess risks of chat-tuned language models, but existing benchmarks are ad hoc and don't cover the full risk surface.
Mechanism
Introduces a principled approach: use cases, system types, personas, tests, test items. 13 hazard categories, 7 with tests in v0.5. 43,090 test items created with templates. ModelBench platform for evaluation. Explicitly states v0.5 should NOT be used to assess safety of AI systems.
notes
arXiv preprint, no venue claim in comments. Notable for its explicit self-limitation: the authors state v0.5 should not be used to assess safety. This is a rare example of a benchmark authors explicitly warning against premature use. The 43,090 test items and 13 hazard categories are the paper's own numbers. VENUE_TRACK BACKFILL 2026-10-04 (paper-fields pass, agent w3p): venue_track 'unknown'. `venue` is 'arxiv-preprint', which means no peer-reviewed venue has been established for this work as of the verification date, so the track genuinely is not known. 'unknown' is used here rather than leaving the field null or guessing 'main': the schema separates 'unknown' from 'main' precisely so that an unprereviewed preprint is not silently counted as main-track work. This annotation is what lets a downstream filter distinguish 'peer reviewed, main track' from 'not peer reviewed' without inferring it from the venue string.

Notes

arXiv preprint, no venue claim in comments. Notable for its explicit self-limitation: the authors state v0.5 should not be used to assess safety. This is a rare example of a benchmark authors explicitly warning against premature use. The 43,090 test items and 13 hazard categories are the paper's own numbers.

VENUE_TRACK BACKFILL 2026-10-04 (paper-fields pass, agent w3p): venue_track 'unknown'. `venue` is 'arxiv-preprint', which means no peer-reviewed venue has been established for this work as of the verification date, so the track genuinely is not known. 'unknown' is used here rather than leaving the field null or guessing 'main': the schema separates 'unknown' from 'main' precisely so that an unprereviewed preprint is not silently counted as main-track work. This annotation is what lets a downstream filter distinguish 'peer reviewed, main track' from 'not peer reviewed' without inferring it from the venue string.

Cross-references

This record references no other records — it is a leaf. It is cited by 0.