Research Papers 论文研究 2d ago Updated 1d ago 更新于 1天前 48

Safety Alignment Illusion: The Cross-Lingual Safety Gap in LLMs 安全对齐幻觉:LLM的跨语言安全差距

Current LLM safety alignment training is heavily English-centric, creating a critical cross-lingual safety gap that allows harmful, stereotype-reinforcing outputs in non-English languages The authors introduce INCLUDE, a multilingual evaluation benchmark with 2,604 prompts across six languages (English, Hindi, Bengali, Marathi, Tamil, and Hinglish) to quantify Indian-centric socio-cultural biases Evaluation of ten open- and closed-source LLMs (14,988 bias scores analyzed) reveals Bengali produce 当前LLM安全对齐训练严重以英语为中心,导致非英语语言的安全过滤器失效,可能向非英语社区传播有害偏见和刻板印象。 研究提出INCLUDE基准,包含2,604个提示,覆盖英语、印地语、孟加拉语、马拉地语、泰米尔语和Hinglish六种语言,用于量化印度-centric的社会文化偏见。 对十个开源和闭源LLM的评估显示,孟加拉语在开源模型中产生最高平均偏见分数。 英语在开源模型中偏见最低,但在闭源模型中偏见最高,揭示了安全对齐训练在开源与闭源模型间的显著差异。 该研究揭示了跨语言安全对齐的"幻觉"现象,强调多语言安全评估对语音助手等口语技术的至关重要性。

65
Hot 热度
72
Quality 质量
68
Impact 影响力

Analysis 深度分析

TL;DR

  • Current LLM safety alignment training is heavily English-centric, creating a critical cross-lingual safety gap that allows harmful, stereotype-reinforcing outputs in non-English languages
  • The authors introduce INCLUDE, a multilingual evaluation benchmark with 2,604 prompts across six languages (English, Hindi, Bengali, Marathi, Tamil, and Hinglish) to quantify Indian-centric socio-cultural biases
  • Evaluation of ten open- and closed-source LLMs (14,988 bias scores analyzed) reveals Bengali produces the highest average bias in open-source models
  • A notable reversal was found for English: it yields the lowest bias in open-source models but the highest bias in closed-source models, suggesting fundamentally different safety alignment approaches

Why It Matters

This research exposes a critical failure mode in deployed AI systems, particularly for voice assistants and spoken dialogue technologies serving linguistically diverse populations like India. As LLMs are increasingly deployed in multilingual contexts, the English-centric safety alignment gap means non-English speakers are disproportionately exposed to harmful biases, making this a pressing concern for AI safety, equity, and responsible deployment at scale.

Technical Details

  • INCLUDE Benchmark: A multilingual evaluation framework comprising 2,604 prompts spanning six prompt languages—English, Hindi, Bengali, Marathi, Tamil, and Hinglish (Hindi-English code-mixed)—designed to detect embedded socio-cultural biases specific to Indian contexts
  • Model Evaluation: Ten open- and closed-source LLMs were evaluated, generating and analyzing 14,988 individual bias scores across all language-model combinations
  • Key Finding on Open-Source Models: Bengali consistently yielded the highest average bias score among open-source models, indicating severe safety alignment gaps for this language
  • Key Finding on Closed-Source Models: English demonstrated a reversal pattern, producing the highest bias in closed-source models while yielding the lowest bias in open-source models, suggesting closed-source providers may prioritize non-English safety less aggressively than their open-source counterparts
  • Methodology: The study employs statistical analysis of bias scores to quantify the cross-lingual safety gap, framing it as a "safety alignment illusion" where English-centric evaluations create a false sense of comprehensive safety coverage

Industry Insight

  • AI developers deploying models in multilingual regions must treat safety alignment as a per-language concern rather than assuming English-centric training generalizes; organizations targeting India and similar markets should adopt benchmarks like INCLUDE to audit their models before deployment
  • The English-in-closed-source reversal suggests commercial providers may be optimizing for different safety trade-offs than open-source communities, warranting independent auditing of proprietary models across non-English languages before enterprise adoption
  • The rise of code-mixed languages like Hinglish in the benchmark highlights the need for evaluation frameworks that account for real-world linguistic patterns rather than treating each language in isolation, especially in regions with high bilingualism

TL;DR

  • 当前LLM安全对齐训练严重以英语为中心,导致非英语语言的安全过滤器失效,可能向非英语社区传播有害偏见和刻板印象。
  • 研究提出INCLUDE基准,包含2,604个提示,覆盖英语、印地语、孟加拉语、马拉地语、泰米尔语和Hinglish六种语言,用于量化印度-centric的社会文化偏见。
  • 对十个开源和闭源LLM的评估显示,孟加拉语在开源模型中产生最高平均偏见分数。
  • 英语在开源模型中偏见最低,但在闭源模型中偏见最高,揭示了安全对齐训练在开源与闭源模型间的显著差异。
  • 该研究揭示了跨语言安全对齐的"幻觉"现象,强调多语言安全评估对语音助手等口语技术的至关重要性。

为什么值得看

本文揭示了当前LLM安全对齐训练以英语为中心的局限性,指出非英语语言可能绕过安全过滤器并传播有害偏见,这对在印度等多语言国家部署语音助手和对话系统具有直接风险。研究提供的INCLUDE基准为多语言偏见评估提供了可量化的工具,有助于AI从业者和行业识别并缓解跨语言安全差距。

技术解析

  • 研究提出INCLUDE(Indian Cultural Lens for Understanding and Detecting Embedded Biases)多语言评估基准,专门用于量化印度-centric的社会文化偏见。该基准包含2,604个提示,覆盖六种语言:英语、印地语、孟加拉语、马拉地语、泰米尔语和Hinglish(印地语-英语混合语)。
  • 实验评估了十个开源和闭源LLM,共分析14,988个偏见分数,以比较不同模型和语言组合下的偏见表现。
  • 关键发现之一是语言与模型类型的交互效应:孟加拉语在开源模型中产生最高平均偏见分数,而英语在开源模型中偏见最低,但在闭源模型中偏见最高,表明安全对齐训练的效果因模型来源和语言而异。
  • 研究指出当前安全对齐训练以英语为中心,当安全过滤器在非英语语言上失效时,语音助手和对话系统可能产生强化刻板印象的输出,这对印度等多语言人口密集地区的口语技术部署构成关键故障模式。

行业启示

  • AI开发者在部署多语言LLM时,必须超越英语中心的安全对齐策略,针对本地语言和文化背景进行专门的安全测试和微调,以避免向非英语社区传播有害偏见。
  • 行业应重视多语言偏见基准的建设,如INCLUDE,以量化评估不同语言下的模型安全表现,并推动开源和闭源模型在安全对齐上的透明度和可比性。
  • 对于在印度等多语言国家运营的语音助手和对话系统提供商,建议将跨语言安全评估纳入产品生命周期,优先测试高偏见风险语言(如孟加拉语)和开源模型,以降低用户-facing的声誉和法律风险。

Disclaimer: The above content is generated by AI and is for reference only. 免责声明:以上内容由 AI 生成,仅供参考。

LLM 大模型 Alignment 对齐 Security 安全 Speech 语音 Research 科学研究