Skip to yearly menu bar Skip to main content


Workshop Sat, Dec 6, 2025 • 8:00 AM – 5:00 PM PST Upper Level Room 27AB

Biosecurity Safeguards for Generative AI

ZAIXI ZHANG · Amrit Singh Bedi · Mengdi Wang · Ruofan Jin · Le Cong · Souradip Chakraborty · Alvaro Velasquez
Project Page [ OpenReview] 

Video

Chat is not available.

Schedule

Timezone: America/Los_Angeles
9:00 AM
Opening remarks
9:05 AM
Yoshua Bengio
9:35 AM
Peter Henderson
10:05 AM
Sheng Lin-Gibson
10:45 AM
Megan Blewett
11:15 AM
George Church
1:40 PM
Jian Ma
2:10 PM
Russ Altman
3:35 PM
Eric Xing
Without Safeguards, AI-Biology Integration Risks Creating Future Pandemics
Dianzhuo Wang · Marian Huot · Zechen Zhang · Kaiyi Jiang · Eugene Shakhnovich · Kevin Esvelt
Deep Research Brings Deeper Harm
Shuo Chen · Zonggen Li · Zhen Han · Bailan He · Tong Liu · Haokun Chen · Georg Groh · Philip Torr · Volker Tresp · Jindong Gu
RippleBench: Capturing Ripple Effects by Leveraging Existing Knowledge Repositories
Roy Rinberg · Usha Bhalla · Igor Shilov · Rohit Gandikota
SafeProtein: Red-Teaming Framework and Benchmark for Protein Foundation Models
Jigang Fan · Zhenghong Zhou · ZAIXI ZHANG · Ruofan Jin · Le Cong · Mengdi Wang
Prompting Toxicity: Analyzing Biosafety Risks in Genomic Language Models
Akshay Murthy · Mengmeng Zhang · Shanmukhi Kannamangalam · Benjamin Liu · Kevin Zhu
Benchmarking diffusion models for predicting perturbed cellular responses
Zijun Song · Changwen Zheng · Jiangmeng Li · Linhai Xie · Yujia Xiang
Translating Biomedical Observations into Signal Temporal Logic with LLMs using Structured Feedback
Hanna Krasowski · Lauren Malek · Sanjit Seshia · Murat Arcak
ABC-Bench: An Agentic Bio-Capabilities Benchmark for Biosecurity
Andrew Liu · Samira Nedungadi · Bryce Cai · Alex Kleinman · Harmon Bhasin · Seth Donoughe
Deep Ignorance: Filtering Pretraining Data Builds Tamper-Resistant Safeguards into Open-Weight LLMs
Kyle O'Brien · Stephen Casper · Quentin Anthony · Tomek Korbak · Robert Kirk · Xander Davies · Ishan Mishra · Geoffrey Irving · Yarin Gal · Stella Biderman
SafeGenie: Erasing Dangerous Concepts from Biological Diffusion Models
Arjun Banerjee · Ethan Tam · Camille Dang · David Martinez
Agentic BAIM-LLM Evaluation (ABLE): Benchmarking LLM Use of Protein Design Tools
Bryce Cai · Geetha Jeyapragasan · Samira Nedungadi · Jake Yukich · Seth Donoughe
Property Adherent Molecular Generation with Constrained Discrete Diffusion
Michael Cardei · Jacob K Christopher · Bhavya Kailkhura · Tom Hartvigsen · Ferdinando Fioretto
Zero-Shot Embedding Drift Detection: A Lightweight Defense Against Prompt Injections in LLMs
Arjun Damerla · Anirudh Sekar · Rachel Sharma · Mrinal Agarwal · Jasmine Zhang · Akitsugu Tanaka
Open-weight genome language model safeguards: Assessing robustness via adversarial fine-tuning
James Black · Moritz Sebastian Hanke · Aaron Maiwald · Tina Hernandez-Boussard · Oliver Crook · Jaspreet Pannu
Securing Dual-Use Pathogen Data of Concern
Doni Bloomfield · Moritz Sebastian Hanke · Aaron Maiwald · James Black · Toby Webster · Tina Hernandez-Boussard · Allison Berke · Oliver Crook · Jaspreet Pannu
Resisting RL Elicitation of Biosecurity Capabilities: Reasoning Models Exploration Hacking on WMDP
Joschka Braun · Yeonwoo Jang · Damon Falck · Roland S. Zimmermann · David Lindner · Scott Emmons
Benchmarking Mitigations Against Covert Misuse
Davis Brown · Mahdi Sabbaghi · Luze Sun · Alexander Robey · George J. Pappas · Eric Wong · Hamed Hassani
Is My Language Model a Biohazard?
Aldan Creo · Cristina Correa
Best Practices for Biorisk Evaluations on Open-Weight Bio-Foundation Models
Boyi Wei · Zora Che · Nathaniel Li · Jasper Götting · Samira Nedungadi · Julian Michael · Summer Yue · Dan Hendrycks · Peter Henderson · Zifan Wang · Seth Donoughe · Mantas Mazeika
Biorisk-Shift: Converting AI Vulnerabilities into Biological Threat Vectors
Eun Ro · Yoshi Nakachi · Yang Chung · Steven Basart
Where to Edit? : Complementary Protein Property Control from Weight and Activation Spaces
Armaity Katki · Nathan Choi · Son Otra · George Flint · Kevin Zhu
GeneBreaker: Jailbreak Attacks against DNA Language Models with Pathogenicity Guidance
ZAIXI ZHANG · Zhenghong Zhou · Ruofan Jin · Le Cong · Mengdi Wang
Involuntary Jailbreak
Yangyang Guo · Yangyan Li · Mohan Kankanhalli
Monte Carlo Expected Threat (MOCET) Scoring
Joseph Kim · Saahith Potluri
Robust LLM Unlearning with MUDMAN: Meta-Unlearning with Disruption Masking And Normalization
Filip Sondej · Yushi Yang · Mikolaj Kniejski · Marcel Windys