arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 2603.04410cs.CLcs.AI
收藏

SalamahBench: 向阿拉伯语言模型的安全评估标准化迈进

SalamahBench: Dialect and Category Level Safety Evaluation of Arabic Language Models

Compumacy for Artificial Intelligence Solutions(Compumacy人工智能解决方案公司);Taibah University(泰巴大学);George Mason University(乔治梅森大学);Queen’s University Belfast(贝尔法斯特女王大学)

Omar Abdelnasser, Fatemah Alharbi, Khaled Khasawneh, Ihsen Alouani, Mohammed E. Fouda

AI总结:

SalamahBench提出了一种统一的阿拉伯语言模型安全评估基准,评估五种先进模型的安全性,揭示了不同模型在安全对齐上的显著差异。

摘要:

语言模型(LMs)中的安全对齐对于可信AI至关重要。然而,尽管不同的利益相关者试图利用阿拉伯语言模型(ALMs),系统性的ALMs安全评估仍然鲜为人知,限制了它们的主流应用。现有的安全基准和防护模型主要以英语为中心,限制了它们在阿拉伯自然语言处理(NLP)系统中的适用性,并掩盖了细粒度、类别级的安全漏洞。本文介绍了SalamahBench,一个用于评估ALMs安全性的统一基准,包含8170个提示,涵盖12种不同的类别,与MLCommons安全威胁分类学对齐。通过严格的管道,通过AI过滤和多阶段人工验证,将异构数据集和谐化,SalamahBench实现了标准化、类别感知的安全评估。使用此基准,我们评估了五种最先进的ALMs,包括Fanar 1和2、ALLaM 2、Falcon H1R和Jais 2,在多种防护配置下,包括单独的防护模型、多数投票聚合和验证人类注释的黄金标签。我们的结果揭示了安全对齐的显著差异:虽然Fanar 2实现了最低的攻击成功率,但其在特定危害领域中的鲁棒性不均。相比之下,Jais 2始终表现出较高的易受攻击性,表明内在的安全对齐较弱。我们进一步证明,原生ALMs在作为安全法官时,其表现明显劣于专门的防护模型。总体而言,我们的发现突显了类别感知评估和专门防护机制在ALMs中实现稳健危害缓解的必要性。

英文摘要:

While different stakeholders are trying to leverage Arabic Language Models (ALMs), safety alignment in ALMs remains largely underexplored, hindering their mainstream adoption. Existing safety benchmarks are predominantly English-centric and evaluate Arabic only in its standardized form, obscuring fine-grained safety vulnerabilities in Arabic NLP systems. This paper introduces SalamahBench, a unified benchmark of 8{,}270 human-verified harmful prompts across ML Commons hazard categories, each rendered in Modern Standard Arabic (MSA) and five regional Arabic varieties, namely Egyptian, Syrian, Saudi, Lebanese, and Moroccan, for a total of 49{,}620 paired instances. To analyze the resulting data, we introduce two complementary metrics, namely Dialect Shift, which measures a model's aggregate change in safety under dialectal reformulation, and Category-Specific Dialect Deviation, which isolates harm categories whose change departs from that aggregate trend. Evaluating models such as Fanar 2, ALLaM 2, and Karnak 1 under multiple safeguard configurations, we find that cross-variety robustness is strongly model dependent, and that aggregate scores can conceal category-level divergence. Our findings highlight the necessity of evaluating Arabic model safety jointly across linguistic varieties and harm domains rather than relying on aggregate scores or MSA alone.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑