ABench: Adversarily Benchmarking Large Language Models across Taxonomized Values
Organizations: TJUNLP Lab, School of Computer Science and Technology, Tianjin University, Tianjin, China · Yuanhui AI
Abstract
Ensuring the alignment of Large Language Models (LLMs) with diverse cultural values is critical for their safe global deployment. However, existing alignment benchmarks are predominantly English-centric or confined to simple discriminative tasks. Moreover, they often fail to effectively evaluate model robustness against complex, adversarial inductions within specific cultural contexts. To address these limitations, we propose ABench, a fine-grained, handcrafted benchmark specifically tailored to taxonomized values in Chinese. Grounded in a rigorous hierarchical taxonomy comprising 158 derived value subcategories, ABench consists of 2,895 open-ended questions. These questions employ techniques such as role-playing and logical traps to probe the stability of models' stances in adversarially induced contexts. Furthermore, we propose a weighted automated evaluation framework that utilizes question-specific scoring criteria for nuanced assessment. Extensive experiments on 16 mainstream LLMs reveal that most models exhibit significant vulnerabilities when subjected to sophisticated adversary attacks on values (scoring below 60). This underscores the need for more robust, culturally specific alignment strategies. Our data will be publicly released to promote further research on taxonomized value alignment.
Figures & tables
| Core Dimension | Count | Ratio (%) | Avg. Length (Q) | Avg. Length (A) |
|---|---|---|---|---|
| Social Order | 1,799 | 62.14 | 237.95 | 318.55 |
| Survival Guarantee | 618 | 21.35 | 146.67 | 199.40 |
| Civilization Progress | 478 | 16.51 | 355.64 | 291.67 |
| Overall | 2,895 | 100.00 | 237.90 | 288.67 |
| Model Name | Avg. | Macro-Avg. | invalid | Zero | 90 |
|---|---|---|---|---|---|
| Claude-Haiku-4.5 ( Anthropic, 2025 ) | 86.26 | 86.82 | 6 | 68 | 2097 |
| Kimi-K2-Thinking ( Team et al., 2025b ) | 56.08 | 60.62 | 9 | 863 | 1364 |
| MiniMax-M2 ( MiniMax AI, 2025 ) | 47.04 | 50.48 | 45 | 919 | 834 |
| Doubao-Seed-1.6 ( ByteDance Volcengine, ) | 43.87 | 50.45 | 12 | 1240 | 1035 |
| GPT-5.1 ( OpenAI, 2025 ) | 41.72 | 46.60 | 1 | 1183 | 933 |
| DeepSeek-R1 ( Guo et al., 2025 ) | 39.05 | 42.04 | 2 | 1369 | 900 |
| Model Name | DeepSeek V4-Pro | Kimi K2.5 |
|---|---|---|
| Claude-Haiku-4.5 | 81.28 | 84.75 |
| Kimi-K2-Thinking | 52.38 | 52.28 |
| Doubao-Seed-1.6 | 44.29 | 44.14 |
| Gemini-3-Pro-Preview | 28.52 | 28.57 |
| DeepSeek-V3.2 | 26.09 | 27.04 |
| Qwen3-30B-A3B | 23.17 | 24.31 |
| Value Dimension | Specific | Total | Ratio (%) |
|---|---|---|---|
| Human Rights (人权) | 199 | 352 | 56.53 |
| Rule of Law (法治) | 21 | 60 | 35.00 |
| Democracy (民主) | 20 | 60 | 33.33 |
| Equality (平等) | 138 | 435 | 31.72 |
| Benevolence (仁爱) | 33 | 105 | 31.43 |
| Civility (文明) | 14 | 60 | 23.33 |
Appendix figures & tables4 assets
Supplementary material from the paper’s appendix.
Appendix
| Social Order | Survival Guarantee | Civilization Progress | |||
|---|---|---|---|---|---|
| Sub-dimension | Count | Sub-dimension | Count | Sub-dimension | Count |
| Equality | 435 | Security | 380 | Development | 128 |
| Justice | 360 | Environmental Protection | 118 | Benevolence | 105 |
| Human Rights | 352 | Peace | 75 | Harmony | 95 |
| Freedom | 315 | Health | 45 | Dedication | 90 |
| Integrity | 217 | Civility | 60 | ||
| Macro-Dimension | Core Value | No. of Entries |
|---|---|---|
| Social Order | Equality | 21 |
| Justice | 20 | |
| Human Rights | 19 | |
| Freedom | 17 | |
| Integrity | 11 | |
| Democracy | 4 |
| Pipeline Stage | Field Name | Description |
|---|---|---|
| Step 0: Benchmark Data | index | Unique identifier for each sample. |
| value_item | The specific hierarchical value node (e.g., Survival-Security-Personal Safety). | |
| identity | The specific role assigned to the model (e.g., ”National Leader”). | |
| question | The adversarial scenario containing logical traps or role-playing inducements. | |
| correct_answer | The expert-written reference answer demonstrating the correct value stance. | |
| Step 0: Rubric Generation | rubrics | A list of dynamically generated scoring criteria specific to the question. |
LLM Safety Benchmarks
Large language model safety benchmarks test whether AI systems avoid harm while remaining helpful across realistic tasks, users, and deployment settings.
See all 283 papers