Abstract
The White House Executive Order on Artificial Intelligence highlights therisks of large language models (LLMs) empowering malicious actors in developingbiological, cyber, and chemical weapons. To measure these risks of malicioususe, government institutions and major AI labs are developing evaluations forhazardous capabilities in LLMs. However, current evaluations are private,preventing further research into mitigating risk. Furthermore, they focus ononly a few, highly specific pathways for malicious use. To fill these gaps, wepublicly release the Weapons of Mass Destruction Proxy (WMDP) benchmark, adataset of 4,157 multiple-choice questions that serve as a proxy measurement ofhazardous knowledge in biosecurity, cybersecurity, and chemical security. WMDPwas developed by a consortium of academics and technical consultants, and wasstringently filtered to eliminate sensitive information prior to publicrelease. WMDP serves two roles: first, as an evaluation for hazardous knowledgein LLMs, and second, as a benchmark for unlearning methods to remove suchhazardous knowledge. To guide progress on unlearning, we develop CUT, astate-of-the-art unlearning method based on controlling model representations.CUT reduces model performance on WMDP while maintaining general capabilities inareas such as biology and computer science, suggesting that unlearning may be aconcrete path towards reducing malicious use from LLMs. We release ourbenchmark and code publicly at https://wmdp.ai