{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,12]],"date-time":"2026-08-12T15:47:16Z","timestamp":1786549636207,"version":"build-2736575974"},"reference-count":93,"publisher":"Royal Society of Chemistry (RSC)","issue":"8","license":[{"start":{"date-parts":[[2026,7,6]],"date-time":"2026-07-06T00:00:00Z","timestamp":1783296000000},"content-version":"vor","delay-in-days":186,"URL":"http:\/\/creativecommons.org\/licenses\/by\/3.0\/"}],"funder":[{"DOI":"10.13039\/100000057","name":"National Institute of General Medical Sciences","doi-asserted-by":"publisher","award":["R35GM137966"],"award-info":[{"award-number":["R35GM137966"]}],"id":[{"id":"10.13039\/100000057","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100006108","name":"National Center for Advancing Translational Sciences","doi-asserted-by":"publisher","award":["UL1 TR002001"],"award-info":[{"award-number":["UL1 TR002001"]}],"id":[{"id":"10.13039\/100006108","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100006227","name":"Lawrence Livermore National Laboratory","doi-asserted-by":"publisher","award":["FLASK Project"],"award-info":[{"award-number":["FLASK Project"]}],"id":[{"id":"10.13039\/100006227","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["rsc.org"],"crossmark-restriction":true},"short-container-title":["Digital Discovery"],"abstract":"<jats:p>Selectively noising chemical datasets reduces the model accuracy in sensitive regions, offering a data-level approach to mitigate dual use risks in predictive chemistry.<\/jats:p>","DOI":"10.1039\/d5dd00512d","type":"journal-article","created":{"date-parts":[[2026,7,6]],"date-time":"2026-07-06T07:23:23Z","timestamp":1783322603000},"page":"3275-3289","update-policy":"https:\/\/doi.org\/10.1039\/rsc_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Censoring chemical data to mitigate dual use risk"],"prefix":"10.1039","volume":"5","author":[{"ORCID":"https:\/\/orcid.org\/0009-0006-8712-6416","authenticated-orcid":false,"given":"Quintina","family":"Campbell","sequence":"first","affiliation":[{"name":"Department of Chemical Engineering, University of Rochester Rochester, New York, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9507-8331","authenticated-orcid":false,"given":"Jonathan","family":"Herington","sequence":"additional","affiliation":[{"name":"Department of Health Humanities & Bioethics, University of Rochester Rochester, New York, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6647-3965","authenticated-orcid":false,"given":"Andrew D.","family":"White","sequence":"additional","affiliation":[{"name":"Department of Chemical Engineering, University of Rochester Rochester, New York, USA"},{"name":"Edison Scientific Inc., San Francisco, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"292","published-online":{"date-parts":[[2026]]},"reference":[{"issue":"7715","key":"D5DD00512D\/cit1\/1","doi-asserted-by":"crossref","first-page":"547","DOI":"10.1038\/s41586-018-0337-2","volume":"559","author":"Butler","year":"2018","journal-title":"Nature"},{"issue":"48","key":"D5DD00512D\/cit2\/1","doi-asserted-by":"publisher","first-page":"20273","DOI":"10.1021\/jacs.0c09105","volume":"142","author":"Mohamad Moosavi","year":"2020","journal-title":"J. Am. Chem. Soc."},{"issue":"18","key":"D5DD00512D\/cit3\/1","doi-asserted-by":"crossref","first-page":"9983","DOI":"10.3390\/ijms22189983","volume":"22","author":"Kim","year":"2021","journal-title":"Int. J. Mol. Sci."},{"key":"D5DD00512D\/cit4\/1","doi-asserted-by":"crossref","first-page":"2514","DOI":"10.1039\/D4SC03921A","volume":"16","author":"Caldas Ramos","year":"2025","journal-title":"Chem. Sci."},{"key":"D5DD00512D\/cit5\/1","volume-title":"United States Government Policy for Institutional Oversight of Life Sciences Dual Use Research of Concern","author":"U.S. Government","year":"2014","unstructured":"U.S. Government .  United States Government Policy for Institutional Oversight of Life Sciences Dual Use Research of Concern . Technical report,  United States Government ,  Washington, D.C. ,  2014"},{"key":"D5DD00512D\/cit6\/1","doi-asserted-by":"crossref","DOI":"10.1007\/978-1-4020-8312-9","volume-title":"Ethical and Philosophical Consideration of the Dual-Use Dilemma in the Biological Sciences","author":"Miller","year":"2008","unstructured":"S.Miller  and  M. J.Selgelid .  Ethical and Philosophical Consideration of the Dual-Use Dilemma in the Biological Sciences .  Springer Science & Business Media ,  2008 . ISBN 978-1-4020-8312-9"},{"issue":"4","key":"D5DD00512D\/cit7\/1","doi-asserted-by":"publisher","first-page":"209","DOI":"10.1136\/medethics-2012-100712","volume":"39","author":"Evans","year":"2013","journal-title":"J. Med. Ethics"},{"issue":"5","key":"D5DD00512D\/cit8\/1","doi-asserted-by":"publisher","first-page":"e1001646","DOI":"10.1371\/journal.pmed.1001646","volume":"11","author":"Lipsitch","year":"2014","journal-title":"PLoS Med."},{"issue":"4","key":"D5DD00512D\/cit9\/1","doi-asserted-by":"publisher","first-page":"923","DOI":"10.1007\/s11948-016-9810-1","volume":"22","author":"Selgelid","year":"2016","journal-title":"Sci. Eng. Ethics"},{"issue":"6","key":"D5DD00512D\/cit10\/1","doi-asserted-by":"publisher","first-page":"620","DOI":"10.1089\/hs.2017.0061","volume":"15","author":"Koblentz","year":"2017","journal-title":"Health Care Secur. Saf. Manag."},{"key":"D5DD00512D\/cit11\/1","volume-title":"Superintelligence: Paths, Dangers, Strategies","author":"Bostrom","year":"2014","unstructured":"N.Bostrom ,  Superintelligence: Paths, Dangers, Strategies .  OUP Oxford ,  Oxford ,  2014 . ISBN 978-0-19-967811-2"},{"key":"D5DD00512D\/cit12\/1","volume-title":"Report of the 2016 Informal Meeting of Experts on Lethal Autonomous Weapons Systems (LAWS)","author":"UNCCCW","year":"2016","unstructured":"UNCCCW ,  Report of the 2016 Informal Meeting of Experts on Lethal Autonomous Weapons Systems (LAWS) , Technical report,  United Nations ,  Geneva ,  2016"},{"key":"D5DD00512D\/cit13\/1","doi-asserted-by":"publisher","DOI":"10.7551\/mitpress\/9147.001.0001","volume-title":"Innovation, Dual Use, and Security: Managing the Risks of Emerging Biological and Chemical Technologies","year":"2012","unstructured":"J. B. Tucker , editor.  Innovation, Dual Use, and Security: Managing the Risks of Emerging Biological and Chemical Technologies .  MIT Press ,  Cambridge, MA ,  2012 ,  10.7551\/mitpress\/9147.001.0001 ,  https:\/\/direct.mit.edu\/books\/book\/4418\/Innovation-Dual-Use-and-SecurityManaging-the-Risks"},{"issue":"9","key":"D5DD00512D\/cit14\/1","doi-asserted-by":"crossref","first-page":"e1800098","DOI":"10.1002\/hlca.201800098","volume":"101","author":"Mehlich","year":"2018","journal-title":"Helv. Chim. Acta"},{"key":"D5DD00512D\/cit15\/1","year":"2021","unstructured":"Chemical Facility Anti-Terrorism Standards (CFATS) ,  2021 , URL  https:\/\/www.ecfr.gov\/current\/title-6\/chapter-I\/part-27?toc=1"},{"key":"D5DD00512D\/cit16\/1","author":"Organization for the Prohibition of Chemical Weapons","year":"1998","unstructured":"Organization for the Prohibition of Chemical Weapons .  The Convention on the Prohibition of the Development, Production, Stockpiling and Use of Chemical Weapons and on their Destruction: Annex on Chemicals ,  1998 ,  https:\/\/www.opcw.org\/chemical-weapons-convention"},{"key":"D5DD00512D\/cit17\/1","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.2311.12022","volume-title":"arXiv","author":"Rein","year":"2023","unstructured":"D.Rein ,  B.Li Hou ,  A. C.Stickland ,  J.Petty ,  R. Y.Pang ,  J.Dirani ,  J.Michael  and  S. R.Bowman ,  GPQA, A graduate-level google-proof Q&A benchmark ,  arXiv ,  2023 , preprint, arXiv:2311.12022,  10.48550\/arXiv.2311.12022"},{"issue":"2","key":"D5DD00512D\/cit18\/1","doi-asserted-by":"crossref","first-page":"368","DOI":"10.1039\/D2DD00087C","volume":"2","author":"White","year":"2023","journal-title":"Digital Discovery"},{"key":"D5DD00512D\/cit19\/1","volume-title":"Chemcrow: Augmenting large-language models with chemistry tools","author":"Bran","year":"2023","unstructured":"A. M.Bran ,  S.Cox ,  A. D.White , and  P.Schwaller .  Chemcrow: Augmenting large-language models with chemistry tools ,  2023"},{"key":"D5DD00512D\/cit20\/1","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.2404.01475","volume-title":"arXiv","author":"Mirza","year":"2024","unstructured":"A.Mirza ,  N.Alampara ,  S.Kunchapu ,  M.R\u00edos-Garc\u00eda ,  B.Emoekabu ,  A.Krishnan ,  T.Gupta ,  M.Schilling-Wilhelmi ,  M.Okereke ,  A.Aneesh ,  et al., Are large language models superhuman chemists? ,  arXiv ,  2024 , preprint, arXiv:2404.01475,  10.48550\/arXiv.2404.01475"},{"key":"D5DD00512D\/cit21\/1","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.2312.06632","volume-title":"arXiv","author":"He","year":"2023","unstructured":"J.He ,  W.Feng ,  Y.Min ,  J.Yi ,  K.Tang ,  S.Li ,  J.Zhang ,  K.Chen ,  W.Zhou ,  X.Xie ,  et al., Control risk for potential misuse of artificial intelligence in science ,  arXiv ,  2023 , preprint, arXiv:2312.06632,  10.48550\/arXiv.2312.06632"},{"key":"D5DD00512D\/cit22\/1","doi-asserted-by":"crossref","first-page":"8317","DOI":"10.1038\/s41467-025-63913-1","volume":"16","author":"Tang","year":"2025","journal-title":"Nat. Commun."},{"key":"D5DD00512D\/cit23\/1","volume-title":"OpenAI's new chatbot will tell you how to shoplift and make explosives","author":"Rose","year":"2022","unstructured":"J.Rose ,  OpenAI's new chatbot will tell you how to shoplift and make explosives ,  Vice ,  2022 , URL  https:\/\/www.vice.com\/en\/article\/xgyp9j\/openais-new-chatbot-will-tell-you-how-to-shoplift-and-make-explosives ,"},{"key":"D5DD00512D\/cit24\/1","volume-title":"Emergent autonomous scientific research capabilities of large language models","author":"Boiko","year":"2023","unstructured":"D. A.Boiko ,  R.MacKnight , and  G.Gomes ,  Emergent autonomous scientific research capabilities of large language models ,  2023"},{"key":"D5DD00512D\/cit25\/1","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.2310.03693","volume-title":"arXiv","author":"Qi","year":"2023","unstructured":"X.Qi ,  Y.Zeng ,  T.Xie ,  P. Y.Chen ,  R.Jia ,  P.Mittal  and  P.Henderson ,  Fine-tuning aligned language models compromises safety, even when users do not intend to! ,  arXiv ,  2023 , preprint, arXiv:2310.03693,  10.48550\/arXiv.2310.03693"},{"key":"D5DD00512D\/cit26\/1","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.2310.18233","volume-title":"arXiv","author":"Gopal","year":"2023","unstructured":"A.Gopal ,  N.Helm-Burger ,  L.Justen ,  E. H.Soice ,  T.Tzeng ,  G.Jeyapragasan ,  S.Grimm ,  B.Mueller , and  K. M.Esvelt .  Will releasing the weights of large language models grant widespread access to pandemic agents? ,  arXiv ,  2023 , preprint, arXiv:2310.18233,  10.48550\/arXiv.2310.18233"},{"key":"D5DD00512D\/cit27\/1","doi-asserted-by":"publisher","first-page":"23951","DOI":"10.1609\/aaai.v39i22.34568","volume-title":"Proceedings of the AAAI Conference on Artifical Intelligence","volume":"39","author":"Gong","year":"2025","unstructured":"Y.Gong ,  D.Ran ,  J.Liu ,  C.Wang ,  T.Cong ,  A.Wang ,  S.Duan  and  X.Wang ,  FigStep: Jailbreaking large vision-language models via typographic visual prompts ,  Proceedings of the AAAI Conference on Artifical Intelligence ,  2025 ,  vol. 39 ,  pp. 23951\u201323959 ,  10.1609\/aaai.v39i22.34568"},{"key":"D5DD00512D\/cit28\/1","volume-title":"Technical report, National Science Advisory Board for Biosecurity","author":"Scientific","year":"2015","unstructured":"G.Scientific ,  Risk and Benefit Analysis of Gain of Function Research ,  Technical report, National Science Advisory Board for Biosecurity ,  Bethesda, MD ,  2015"},{"key":"D5DD00512D\/cit29\/1","doi-asserted-by":"publisher","DOI":"10.17226\/24890","volume-title":"Biodefense in the Age of Synthetic Biology","author":"National Academies of Sciences, Engineering, and Medicine","year":"2018","unstructured":"National Academies of Sciences, Engineering, and Medicine .  Biodefense in the Age of Synthetic Biology .  National Academies Press ,  Washington, D.C. ,  2018 . ISBN 978-0-309-46518-2. doi:  10.17226\/24890"},{"issue":"3","key":"D5DD00512D\/cit30\/1","doi-asserted-by":"publisher","first-page":"155","DOI":"10.1089\/hs.2019.0115","volume":"18","author":"Sandberg","year":"2020","journal-title":"Health Care Secur. Saf. Manag."},{"issue":"4","key":"D5DD00512D\/cit31\/1","doi-asserted-by":"publisher","first-page":"277","DOI":"10.1080\/105761099265658","volume":"22","author":"Cameron","year":"1999","journal-title":"Stud. Conflict Terrorism"},{"issue":"1","key":"D5DD00512D\/cit32\/1","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1111\/j.1467-8519.2009.01740.x","volume":"25","author":"Frida","year":"2011","journal-title":"Bioethics"},{"key":"D5DD00512D\/cit33\/1","first-page":"223","volume-title":"On the Dual Uses of Science and Ethics, Principles, Practices, and Prospects","author":"Clarke","year":"2013","unstructured":"S.Clarke .  The Precautionary Principle and the Dual-Use Dilemma . In  B. Rappert  and  M. J. Selgelid , editors,  On the Dual Uses of Science and Ethics, Principles, Practices, and Prospects , pages  223\u2013234 .  ANU Press ,  2013 . ISBN 978-1-925021-33-2. URL  https:\/\/www.jstor.org\/stable\/j.ctt5hgz15.19"},{"key":"D5DD00512D\/cit34\/1","doi-asserted-by":"publisher","first-page":"2136","DOI":"10.1145\/3728971","volume-title":"Proceedings of the ACM on Software Engineering","volume":"2","author":"Yuan","year":"2025","unstructured":"X.Yuan ,  J.Li ,  D.Wang ,  Y.Chen ,  X.Mao ,  L.Huang ,  J.Chen ,  H.Xue ,  X.Liu ,  W.Wang ,  K.Ren  and  J.Wang ,  S-Eval: Towards automated and comprehensive safety evaluation for large language models ,  Proceedings of the ACM on Software Engineering ,  2025 ,  vol. 2 ,  pp. 2136\u20132157 ,  10.1145\/3728971"},{"key":"D5DD00512D\/cit35\/1","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.2403.13793","volume-title":"arXiv","author":"Phuong","year":"2024","unstructured":"M.Phuong ,  M.Aitchison ,  E.Catt ,  S.Cogan ,  A.Kaskasoli ,  V.Krakovna ,  D.Lindner ,  M.Rahtz ,  Y.Assael ,  S.Hodkinson ,  et al., Evaluating frontier models for dangerous capabilities ,  arXiv ,  2024 , preprint, arXiv:2403.13793,  10.48550\/arXiv.2403.13793"},{"key":"D5DD00512D\/cit36\/1","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.2404.08676","volume-title":"arXiv","author":"Tedeschi","year":"2024","unstructured":"S.Tedeschi ,  F.Friedrich ,  P.Schramowski ,  K.Kersting ,  R.Navigli ,  H.Nguyen , and  BoLi .  ALERT: A comprehensive benchmark for assessing large language models' safety through red teaming ,  arXiv ,  2024 , preprint, arXiv:2404.08676,  10.48550\/arXiv.2404.08676"},{"key":"D5DD00512D\/cit37\/1","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.2404.12241","volume-title":"arXiv","author":"Vidgen","year":"2024","unstructured":"B.Vidgen ,  A.Agrawal ,  M. A.Ahmed ,  V.Akinwande ,  N.Al-Nuaimi ,  N.Alfaraj ,  E.Alhajjar ,  L.Aroyo ,  T.Bavalatti ,  B.Blili-Hamelin ,  et al., Introducing v0.5 of the AI safety benchmark from MLCommons ,  arXiv ,  2024 , preprint, arXiv:2404.12241,  10.48550\/arXiv.2404.12241"},{"key":"D5DD00512D\/cit38\/1","doi-asserted-by":"publisher","first-page":"431","DOI":"10.18653\/v1\/2023.emnlp-demo.40","volume-title":"Proceedings of the 2023 Conference on Empirical Methods in Natural Language Processing: System Demonstrations","author":"Rebedea","year":"2023","unstructured":"T.Rebedea ,  R.Dinu ,  M. N.Sreedhar ,  C.Parisien , and  J.Cohen .  NeMoguardrails :  A toolkit for controllable and safe LLM applications with programmable rails . In  Y. Feng  and  E. Lefever , editors,  Proceedings of the 2023 Conference on Empirical Methods in Natural Language Processing: System Demonstrations , pages  431\u2013445 ,  Singapore .  Association for Computational Linguistics ,  2023 . doi:  10.18653\/v1\/2023.emnlp-demo.40 . URL  https:\/\/aclanthology.org\/2023.emnlp-demo.40"},{"key":"D5DD00512D\/cit39\/1","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.2312.06674","volume-title":"arXiv","author":"Inan","year":"2023","unstructured":"H.Inan ,  K.Upasani ,  J.Chi ,  R.Rungta ,  K.Iyer ,  Y.Mao ,  M.Tontchev ,  Q.Hu ,  B.Fuller ,  D.Testuggine ,  et al., Llama Guard: LLM-based input-output safeguard for human-AI conversations ,  arXiv ,  2023 , preprint, arXiv:2312.06674,  10.48550\/arXiv.2312.06674"},{"key":"D5DD00512D\/cit40\/1","author":"Grattafiori","year":"2024","unstructured":"A.Grattafiori ,  A.Dubey ,  A.Jauhri ,  A.Pandey ,  A.Kadian ,  et al., The Llama 3 herd of models. arXiv ,  2024"},{"key":"D5DD00512D\/cit41\/1","volume-title":"bioRxiv","author":"Challacombe","year":"2024","unstructured":"C. A.Challacombe  and  N. S.Haas .  Towards a dataset for state of the art protein toxin classification .  bioRxiv ,  2024"},{"key":"D5DD00512D\/cit42\/1","first-page":"1273","volume-title":"Artificial intelligence and statistics","author":"McMahan","year":"2017","unstructured":"B.McMahan ,  E.Moore ,  D.Ramage ,  S.Hampson , and  B. A. yArcas .  Communication-efficient learning of deep networks from decentralized data . In  Artificial intelligence and statistics , pages  1273\u20131282 .  PMLR ,  2017"},{"issue":"2","key":"D5DD00512D\/cit43\/1","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3298981","volume":"10","author":"Yang","year":"2019","journal-title":"ACM Transactions on Intelligent Systems and Technology (TIST)"},{"issue":"22\u201323","key":"D5DD00512D\/cit44\/1","first-page":"5492","volume":"36","author":"Chen","year":"2020","journal-title":"Bioinformatics"},{"issue":"7","key":"D5DD00512D\/cit45\/1","doi-asserted-by":"crossref","first-page":"2331","DOI":"10.1021\/acs.jcim.3c00799","volume":"64","author":"Heyndrickx","year":"2023","journal-title":"J. Chem. Inf. Model."},{"key":"D5DD00512D\/cit46\/1","doi-asserted-by":"crossref","first-page":"739","DOI":"10.1007\/s10822-005-9011-5","volume":"19","author":"Karr","year":"2005","journal-title":"J. Comput.-Aided Mol. Des."},{"key":"D5DD00512D\/cit47\/1","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.2405.12961","volume-title":"arXiv","author":"Chennakesavalu","year":"2024","unstructured":"S.Chennakesavalu ,  F.Hu ,  S.Ibarraran , and  G. M.Rotskoff .  Energy rank alignment: Using preference optimization to search chemical space at scale ,  arXiv ,  2024 , preprint, arXiv:2405.12961,  10.48550\/arXiv.2405.12961"},{"key":"D5DD00512D\/cit48\/1","doi-asserted-by":"crossref","first-page":"27730","DOI":"10.52202\/068431-2011","volume":"35","author":"Ouyang","year":"2022","journal-title":"Advances in neural information processing systems"},{"key":"D5DD00512D\/cit49\/1","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.2204.05862","volume-title":"arXiv","author":"Bai","year":"2022","unstructured":"Y.Bai ,  A.Jones ,  K.Ndousse ,  A.Askell ,  A.Chen ,  N.DasSarma ,  D.Drain ,  S.Fort ,  D.Ganguli ,  T.Henighan ,  et al., Training a helpful and harmless assistant with reinforcement learning from human feedback ,  arXiv ,  2022 , preprint, arXiv:2204.05862,  10.48550\/arXiv.2204.05862"},{"issue":"4","key":"D5DD00512D\/cit50\/1","doi-asserted-by":"crossref","first-page":"62","DOI":"10.1609\/aimag.v42i4.7390","volume":"42","author":"Saisubramanian","year":"2022","journal-title":"AI Magazine"},{"key":"D5DD00512D\/cit51\/1","first-page":"4867","author":"Zhang","year":"2018","journal-title":"IJCAI"},{"key":"D5DD00512D\/cit52\/1","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.2405.03005","volume-title":"arXiv","author":"Low","year":"2024","unstructured":"S. M.Low  and  A.Kumar ,  Safe reinforcement learning with learned non-Markovian safety constraints ,  arXiv ,  2024 , preprint, arXiv:2405.03005,  10.48550\/arXiv.2405.03005"},{"key":"D5DD00512D\/cit53\/1","first-page":"9133","volume-title":"International Conference on Machine Learning","author":"Stooke","year":"2020","unstructured":"A.Stooke ,  J.Achiam , and  P.Abbeel .  Responsive safety in reinforcement learning by PID Lagrangian methods . In  International Conference on Machine Learning , pages  9133\u20139143 .  PMLR ,  2020"},{"key":"D5DD00512D\/cit54\/1","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.2209.07858","volume-title":"arXiv","author":"Ganguli","year":"2022","unstructured":"D.Ganguli ,  L.Lovitt ,  K.Jackson ,  A.Askell ,  Y.Bai ,  S.Kadavath ,  B.Mann ,  E.Perez ,  N.Schiefer ,  N.Kamal ,  et al., Red teaming language models to reduce harms: Methods, scaling behaviors, and lessons learned ,  arXiv ,  2022 , preprint, arXiv:2209.07858,  10.48550\/arXiv.2209.07858"},{"key":"D5DD00512D\/cit55\/1","volume-title":"Self-destructing models: Increasing the costs of harmful dual uses in foundation models","author":"Mitchell","year":"2022","unstructured":"E.Mitchell ,  P.Henderson ,  C. D.Manning ,  D.Jurafsky , and  C.Finn .  Self-destructing models: Increasing the costs of harmful dual uses in foundation models ,  2022"},{"key":"D5DD00512D\/cit56\/1","author":"Rosati","year":"2024","unstructured":"D.Rosati ,  J.Wehner ,  K.Williams ,  \u0141.Bartoszcze ,  D.Atanasov ,  R.Gonzales ,  S.Majumdar ,  C.Maple ,  H.Sajjad , and  F.Rudzicz .  Representation noising: A defence mechanism against harmful finetuning ,  2024 . URL  https:\/\/arxiv.org\/abs\/2405.14577"},{"key":"D5DD00512D\/cit57\/1","volume-title":"A watermark for large language models","author":"Kirchenbauer","year":"2023","unstructured":"J.Kirchenbauer ,  J.Geiping ,  Y.Wen ,  J.Katz ,  I.Miers , and  T.Goldstein .  A watermark for large language models ,  2023"},{"issue":"3","key":"D5DD00512D\/cit58\/1","doi-asserted-by":"publisher","first-page":"189","DOI":"10.1038\/s42256-022-00465-9","volume":"4","author":"Urbina","year":"2022","journal-title":"Nature Machine Intelligence"},{"key":"D5DD00512D\/cit59\/1","doi-asserted-by":"crossref","first-page":"705","DOI":"10.1007\/s10822-005-9014-2","volume":"19","author":"Filimonov","year":"2005","journal-title":"J. Comput. Aided Mol. Des."},{"issue":"2","key":"D5DD00512D\/cit60\/1","doi-asserted-by":"crossref","first-page":"256","DOI":"10.1021\/ci600383v","volume":"48","author":"Masek","year":"2008","journal-title":"J. Chem. Inf. Model."},{"key":"D5DD00512D\/cit61\/1","doi-asserted-by":"crossref","first-page":"637","DOI":"10.1007\/s10822-005-9007-1","volume":"19","author":"Faulon","year":"2005","journal-title":"J. Comput. Aided Mol. Des."},{"key":"D5DD00512D\/cit62\/1","doi-asserted-by":"crossref","first-page":"651","DOI":"10.1007\/s10822-005-9010-6","volume":"19","author":"Alexandru","year":"2005","journal-title":"J. Comput. Aided Mol. Des."},{"key":"D5DD00512D\/cit63\/1","doi-asserted-by":"crossref","first-page":"693","DOI":"10.1007\/s10822-005-9008-0","volume":"19","author":"Varnek","year":"2005","journal-title":"J. Comput. Aided Mol. Des."},{"key":"D5DD00512D\/cit64\/1","doi-asserted-by":"crossref","first-page":"661","DOI":"10.1007\/s10822-005-9019-x","volume":"19","author":"Nicholls","year":"2005","journal-title":"J. Comput. Aided Mol. Des."},{"issue":"1","key":"D5DD00512D\/cit65\/1","doi-asserted-by":"crossref","first-page":"37","DOI":"10.1021\/ci400399a","volume":"54","author":"Matlock","year":"2014","journal-title":"J. Chem. Inf. Model."},{"key":"D5DD00512D\/cit66\/1","doi-asserted-by":"publisher","first-page":"625","DOI":"10.1007\/s10822-005-9020-4","volume":"19","author":"Bologa","year":"2005","journal-title":"J. Comput.-Aided Mol. Des."},{"key":"D5DD00512D\/cit67\/1","doi-asserted-by":"publisher","first-page":"749","DOI":"10.1007\/s10822-005-9013-3","volume":"19","author":"Tetko","year":"2005","journal-title":"J. Comput. Aided Mol. Des."},{"issue":"3","key":"D5DD00512D\/cit68\/1","doi-asserted-by":"publisher","first-page":"180","DOI":"10.1038\/nrd1683","volume":"4","author":"Bradley","year":"2005","journal-title":"Nat. Rev. Drug Discovery"},{"key":"D5DD00512D\/cit69\/1","doi-asserted-by":"crossref","first-page":"715","DOI":"10.1007\/s10822-005-9023-1","volume":"19","author":"Trepalin","year":"2005","journal-title":"J. Comput. Aided Mol. Des."},{"key":"D5DD00512D\/cit70\/1","doi-asserted-by":"crossref","first-page":"687","DOI":"10.1007\/s10822-005-9000-8","volume":"19","author":"Kaiser","year":"2005","journal-title":"J. Comput. Aided Mol. Des."},{"issue":"9","key":"D5DD00512D\/cit71\/1","doi-asserted-by":"crossref","first-page":"731","DOI":"10.1007\/s10822-005-9026-y","volume":"19","author":"Clement","year":"2005","journal-title":"J. Comput. Aided Mol. Des."},{"issue":"2","key":"D5DD00512D\/cit72\/1","doi-asserted-by":"crossref","first-page":"e0117898","DOI":"10.1371\/journal.pone.0117898","volume":"10","author":"Joshua Swamidass","year":"2015","journal-title":"PLoS One"},{"key":"D5DD00512D\/cit73\/1","volume-title":"The Operational Risks of AI in Large-Scale Biological Attacks: Results of a Red-Team Study","author":"Mouton","year":"2024","unstructured":"C. A.Mouton ,  C.Lucas , and  E.Guest .  The Operational Risks of AI in Large-Scale Biological Attacks: Results of a Red-Team Study .  RAND ,  2024 . URL  https:\/\/www.rand.org\/pubs\/research_reports\/RRA2977-2.html"},{"key":"D5DD00512D\/cit74\/1","author":"Patwardhan","year":"2024","unstructured":"T.Patwardhan ,  K.Liu ,  T.Markov ,  N.Chowdhury ,  D.Leet ,  N.Cone ,  C.Maltbie ,  J.Huizinga ,  C.Wainwright ,  S. F.Jackson ,  S.Adler ,  R.Casagrande , and  A.Madry .  Building an early warning system for LLM-aided biological threat creation .  https:\/\/openai.com\/research\/building-an-early-warning-system-for-llm-aided-biological-threat-creation ,  2024"},{"key":"D5DD00512D\/cit75\/1","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.2311.07689","volume-title":"arXiv","author":"Ge","year":"2023","unstructured":"S.Ge ,  C.Zhou ,  R.Hou ,  M.Khabsa ,  Y. C.Wang ,  Q.Wang ,  J.Han  and  Y.Mao ,  MART: Improving LLM safety with multi-round automatic red-teaming ,  arXiv ,  2023 , preprint, arXiv:2311.07689,  10.48550\/arXiv.2311.07689"},{"key":"D5DD00512D\/cit76\/1","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.2401.12915","volume-title":"arXiv","author":"Li","year":"2024","unstructured":"M.Li ,  L.Li ,  Y.Yin ,  M.Ahmed ,  Z.Liu  and  Q.Liu ,  Red teaming visual language models ,  arXiv ,  2024 , preprint, arXiv:2401.12915,  10.48550\/arXiv.2401.12915"},{"key":"D5DD00512D\/cit77\/1","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.2403.03218","volume-title":"arXiv","author":"Li","year":"2024","unstructured":"N.Li ,  A.Pan ,  A.Gopal ,  S.Yue ,  D.Berrios ,  A.Gatti ,  J. D.Li ,  A.-K.Dombrowski ,  S.Goel ,  L.Phan ,  et al., The WMDP benchmark: Measuring and reducing malicious use with unlearning ,  arXiv ,  2024 , preprint, arXiv:2403.03218,  10.48550\/arXiv.2403.03218"},{"key":"D5DD00512D\/cit78\/1","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.2405.10986","volume-title":"arXiv","author":"Barrett","year":"2024","unstructured":"A. M.Barrett ,  K.Jackson ,  E. R.Murphy ,  N.Madkour , and  J.Newman .  Benchmark early and red team often: A framework for assessing and managing dual-use hazards of AI foundation models ,  arXiv ,  2024 , preprint, arXiv:2405.10986,  10.48550\/arXiv.2405.10986"},{"issue":"1","key":"D5DD00512D\/cit79\/1","doi-asserted-by":"crossref","first-page":"42","DOI":"10.1038\/s41524-023-01000-z","volume":"9","author":"Xu","year":"2023","journal-title":"npj Comput. Mater."},{"issue":"4","key":"D5DD00512D\/cit80\/1","doi-asserted-by":"crossref","first-page":"283","DOI":"10.1021\/acscentsci.6b00367","volume":"3","author":"Altae-Tran","year":"2017","journal-title":"ACS Cent. Sci."},{"key":"D5DD00512D\/cit81\/1","volume-title":"Low-shot learning from imaginary data","author":"Wang","year":"2018","unstructured":"Yu-X.Wang ,  R.Girshick ,  M.Hebert , and  B.Hariharan .  Low-shot learning from imaginary data ,  2018"},{"issue":"7","key":"D5DD00512D\/cit82\/1","doi-asserted-by":"crossref","first-page":"274","DOI":"10.3390\/ijgi7070274","volume":"7","author":"Boonprong","year":"2018","journal-title":"ISPRS Int. J. GeoInf."},{"key":"D5DD00512D\/cit83\/1","first-page":"11022","volume":"33","author":"Adlam","year":"2020","journal-title":"Adv. Neural Inf. Process. Syst."},{"issue":"1","key":"D5DD00512D\/cit84\/1","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1162\/neco.1992.4.1.1","volume":"4","author":"Geman","year":"1992","journal-title":"Neural Comput."},{"issue":"2","key":"D5DD00512D\/cit85\/1","doi-asserted-by":"crossref","first-page":"173","DOI":"10.1111\/1467-985X.00164","volume":"163","author":"Frost","year":"2000","journal-title":"J. Roy. Stat. Soc. Stat. Soc."},{"issue":"20","key":"D5DD00512D\/cit86\/1","doi-asserted-by":"crossref","first-page":"7079","DOI":"10.1039\/D1SC00231G","volume":"12","author":"Nigam","year":"2021","journal-title":"Chem. Sci."},{"issue":"13","key":"D5DD00512D\/cit87\/1","doi-asserted-by":"crossref","first-page":"3697","DOI":"10.1039\/D1SC05259D","volume":"13","author":"Wellawatte","year":"2022","journal-title":"Chem. Sci."},{"key":"D5DD00512D\/cit88\/1","volume-title":"Semi-supervised classification with graph convolutional networks","author":"Kipf","year":"2017","unstructured":"T. N.Kipf  and  M.Welling ,  Semi-supervised classification with graph convolutional networks ,  2017"},{"issue":"2","key":"D5DD00512D\/cit89\/1","doi-asserted-by":"crossref","first-page":"513","DOI":"10.1039\/C7SC02664A","volume":"9","author":"Wu","year":"2018","journal-title":"Chem. Sci."},{"key":"D5DD00512D\/cit90\/1","doi-asserted-by":"publisher","first-page":"599","DOI":"10.1080\/10736700.2019.1662618","volume":"26","author":"Costanzi","year":"2019","journal-title":"Nonproliferation Rev."},{"key":"D5DD00512D\/cit91\/1","doi-asserted-by":"publisher","first-page":"447","DOI":"10.1007\/s11019-013-9542-9","volume":"17","author":"Dubov","year":"2014","journal-title":"Med. Health Care Philos."},{"key":"D5DD00512D\/cit92\/1","doi-asserted-by":"publisher","first-page":"14056","DOI":"10.3390\/su132414056","volume":"13","author":"Yang","year":"2021","journal-title":"Sustainability"},{"key":"D5DD00512D\/cit93\/1","doi-asserted-by":"publisher","first-page":"2296","DOI":"10.3389\/fbioe.2025.1620678","volume":"13","author":"Greene","year":"2025","journal-title":"Front. Bioeng. Biotechnol."}],"container-title":["Digital Discovery"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/pubs.rsc.org\/DD\/article-pdf\/doi\/10.1039\/D5DD00512D\/0\/D5DD00512D.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"http:\/\/pubs.rsc.org\/DD\/article-pdf\/doi\/10.1039\/D5DD00512D\/0\/D5DD00512D.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,8,12]],"date-time":"2026-08-12T14:52:21Z","timestamp":1786546341000},"score":1,"resource":{"primary":{"URL":"http:\/\/pubs.rsc.org\/DD\/article-lookup\/doi\/10.1039\/D5DD00512D"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"references-count":93,"journal-issue":{"issue":"8","published-print":{"date-parts":[[2026,8,12]]}},"URL":"https:\/\/doi.org\/10.1039\/d5dd00512d","relation":{},"ISSN":["2635-098X"],"issn-type":[{"value":"2635-098X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]}}}