arXivDaily arXiv每日学术速递 周一至周五更新
​通知:联邦节假日调休:哥伦布日 / 原住民日(Columbus Day / Indigenous Peoples' Day),今日(13日)无更新。
arXiv 2606.01322cs.CLcs.AI

TukaBench: 一个基于文化的非洲语言越狱基准

TukaBench: A Culturally Grounded Jailbreak Benchmark for African Languages

Mila - Quebec AI Institute(魁北克人工智能研究院);McGill University(麦吉尔大学);Microsoft AI for Good Research Lab(微软人工智能造福人类研究实验室);Canada CIFAR AI Chair(加拿大CIFAR人工智能主席)

Victor Akinode, Senyu Li, Wassim Hamidouche, Waqas Zamir, Inbal Becker-Reshef, David Ifeoluwa Adelani

AI总结:

针对大型语言模型在非洲低资源语言上的安全评估缺失,提出TUKABENCH基准,通过四种设置(直接翻译、文化适应翻译、人工策划提示、代码切换提示)评估语言、文化背景和提示规避性对模型安全的影响,发现非洲语言提示降低拒绝率,并引入Deflection指标和人工验证以解决模型理解失败和评判可靠性问题。

摘要:

大型语言模型(LLMs)的安全评估仍然高度以英语为中心,导致低资源语言(LRLs),特别是非洲语言,严重缺乏探索。我们引入了TUKABENCH,一个针对七种非洲语言的越狱基准,它通过四种设置将JailbreakBench(JBB)扩展到直接翻译之外:JBB提示的人工翻译、适应非洲背景的英语提示后人工翻译、通过与GPT-5.2交互验证的人工策划提示,以及结合英语和非洲语言的代码切换提示,从而隔离语言、文化背景和提示规避性对模型安全的影响。在闭源和开源模型中,使用非洲语言提示相比英语减少了拒绝,其中文化适应的提示导致最少的拒绝。评估还揭示了两个结构性限制:模型理解失败和低资源语言中LLM作为评判者的可靠性降低。为了捕捉前者,我们在“拒绝”和“越狱”之外引入了“回避”;为了评估后者,我们通过人工标注验证输出,显示在低资源语言和较少支持的脚本中,评判者与人类的一致性下降。

英文摘要:

Safety evaluation of Large Language Models (LLMs) remains heavily English-centric, leaving Low-Resource Languages (LRLs), particularly African ones, critically underexplored. We introduce TUKABENCH, a jailbreak benchmark for seven African languages that extends JailbreakBench (JBB) beyond direct translation through four settings: human translation of JBB prompts, English adaptation to African contexts followed by human translation, human-curated prompts validated through interactions with GPT-5.2, and code-switched prompts combining English and African languages, isolating the effect of language, cultural grounding, and prompt evasiveness on model safety. Across closed and open models, prompting in African languages reduces refusal relative to English, with culturally adapted prompts leading to least refusal. The evaluation also surfaces two structural limitations: model comprehension failures and reduced LLM-as-a-judge reliability in LRLs. To capture the first, we introduce Deflection alongside Refused and Jailbroken; to assess the second, we validate outputs with human annotations, showing that judge-human agreement drops in lower-resource languages and less commonly supported scripts.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑