Exploring the Limits of Domain-Adaptive Training for Detoxifying Large-Scale Language Models
Not on the map. Why?
Abstract (arXiv)
Pre-trained language models (LMs) are shown to easily generate toxic language. In this work, we systematically explore domain-adaptive training to reduce the toxicity of language models. We conduct this study on three dimensions: training corpus, model size, and parameter efficiency. For the training corpus, we propose to leverage the generative power of LMs and generate nontoxic datasets for domain-adaptive training, which mitigates the exposure bias and is shown to be more data-efficient than using a curated pre-training corpus. We demonstrate that the self-generation method consistently outperforms the existing baselines across various model sizes on both automatic and human evaluations, even when it uses a 1/3 smaller training corpus. We then comprehensively study detoxifying LMs with parameter sizes ranging from 126M up to 530B (3x larger than GPT-3), a scale that has never been studied before. We find that i) large LMs have similar toxicity levels as smaller ones given the same pre-training corpus, and ii) large LMs require more endeavor to detoxify. We also explore parameter-efficient training methods for detoxification. We demonstrate that adding and training adapter-only layers in LMs not only saves a lot of parameters but also achieves a better trade-off between toxicity and perplexity than whole model adaptation for the large-scale models.
Key facts. Cited by 67 papers in the map (data through 7 Oct 2026). Builds on 45 of its 65 references that are in the map. First posted on arXiv 8 Feb 2022.
Builds on
45 of 65 references.
References · 45
- 2017Attention Is All You Needcited by 59,932
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,491
- 2021Zero-Shot Text-to-Image Generationcited by 4,276
- 2019Parameter-Efficient Transfer Learning for NLPcited by 4,195
- 2019HellaSwag: Can a Machine Really Finish Your Sentence?cited by 4,018
- 2021Prefix-Tuning: Optimizing Continuous Prompts for Generationcited by 3,878
- 2021The Power of Scale for Parameter-Efficient Prompt Tuningcited by 3,769
- 2021Switch Transformers: Scaling to Trillion Parameter Models with Simple and Efficient Sparsitycited by 3,014
- 2019The Curious Case of Neural Text Degenerationcited by 2,881
- 2019PIQA: Reasoning about Physical Commonsense in Natural Languagecited by 2,818
- 2021Pre-train, Prompt, and Predict: A Systematic Survey of Prompting Methods in Natural Language Processingcited by 2,222
33 more
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2019BoolQ: Exploring the Surprising Difficulty of Natural Yes/No Questionscited by 2,140
- 2019Megatron-LM: Training Multi-Billion Parameter Language Models Using Model Parallelismcited by 1,829
- 2020Don't Stop Pretraining: Adapt Language Models to Domains and Taskscited by 1,548
- 2021Calibrate Before Use: Improving Few-Shot Performance of Language Modelscited by 1,371
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,235
- 2015A Diversity-Promoting Objective Function for Neural Conversation Modelscited by 1,068
- 2022Red Teaming Language Models with Language Modelscited by 983
- 2016The LAMBADA dataset: Word prediction requiring a broad discourse contextcited by 960
- 2020Exploiting Cloze Questions for Few Shot Text Classification and Natural Language Inferencecited by 934
- 2017RACE: Large-scale ReAding Comprehension Dataset From Examinationscited by 851
- 2019Adversarial NLI: A New Benchmark for Natural Language Understandingcited by 798
- 2019Plug and Play Language Models: A Simple Approach to Controlled Text Generationcited by 793
- 2015Scheduled Sampling for Sequence Prediction with Recurrent Neural Networkscited by 779
- 2016Sequence-Level Knowledge Distillationcited by 761
- 2019Universal Adversarial Triggers for Attacking and Analyzing NLPcited by 709
- 2020It's Not Just Size That Matters: Small Language Models Are Also Few-Shot Learnerscited by 668
- 2022Using DeepSpeed and Megatron to Train Megatron-Turing NLG 530B, A Large-Scale Generative Language Modelcited by 557
- 2021DExperts: Decoding-Time Controlled Text Generation with Experts and Anti-Expertscited by 434
- 2021BOLD: Dataset and Metrics for Measuring Biases in Open-Ended Language Generationcited by 410
- 2019On Measuring Social Biases in Sentence Encoderscited by 397
- 2020GeDi: Generative Discriminator Guided Sequence Generationcited by 377
- 2018WiC: the Word-in-Context Dataset for Evaluating Context-Sensitive Meaning Representationscited by 370
- 2021Self-Diagnosis and Self-Debiasing: A Proposal for Reducing Corpus-Based Bias in NLPcited by 336
- 2020AutoPrompt: Eliciting Knowledge from Language Models with Automatically Generated Promptscited by 246
- 2021Adversarial GLUE: A Multi-Task Benchmark for Robustness Evaluation of Language Modelscited by 227
- 2019Gender Bias in Contextualized Word Embeddingscited by 203
- 2021Process for Adapting Language Models to Society (PALMS) with Values-Targeted Datasetscited by 179
- 2021Challenges in Detoxifying Language Modelscited by 169
- 2021Detoxifying Language Models Risks Marginalizing Minority Voicescited by 106
- 2019Evaluating the Underlying Gender Bias in Contextualized Word Embeddingscited by 94
- 2020The Radicalization Risks of GPT-3 and Advanced Neural Language Modelscited by 76
- 2021Just Say No: Analyzing the Stance of Neural Dialogue Generation in Offensive Contextscited by 56
Built on by
Citing papers per year: 2022: 4; 2023: 20; 2024: 25; 2025: 14; 2026: 4.
67 papers.
Sort:
By area:
- 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,565
- 2023GPT-4 Is Too Smart To Be Safe: Stealthy Chat with LLMs via Ciphercited by 401
- 2023Pretraining Language Models with Human Preferencescited by 245
- 2023A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easilycited by 242
- 2023In-context Vectors: Making In Context Learning More Effective and Controllable Through Latent Space Steeringcited by 240
- 2022Factuality Enhanced Language Models for Open-Ended Text Generationcited by 200
- 2025GuardReasoner: Towards Reasoning-based LLM Safeguardscited by 89
- 2022Language Generation Models Can Cause Harm: So What Can We Do About It? An Actionable Surveycited by 80
- 2024BadChain: Backdoor Chain-of-Thought Prompting for Large Language Modelscited by 74
- 2024FlipAttack: Jailbreak LLMs via Flippingcited by 73
- 2024Risk Taxonomy, Mitigation, and Assessment Benchmarks of Large Language Model Systemscited by 63
- 2025Safety in Large Reasoning Models: A Surveycited by 58
38 more
- 2024Fairness in Large Language Models: A Taxonomic Surveycited by 57
- 2023All Languages Matter: On the Multilingual Safety of Large Language Modelscited by 51
- 2023Self-Detoxifying Language Models via Toxification Reversalcited by 45
- 2023On the Challenges of Using Black-Box APIs for Toxicity Evaluation in Researchcited by 44
- 2024Stress-Testing Capability Elicitation With Password-Locked Modelscited by 42
- 2023Click: Controllable Text Generation with Sequence Likelihood Contrastive Learningcited by 41
- 2023Towards Safe Self-Distillation of Internet-Scale Text-to-Image Diffusion Modelscited by 41
- 2024Model Editing as a Robust and Denoised variant of DPO: A Case Study on Toxicitycited by 33
- 2022Unified Detoxifying and Debiasing in Language Generation via Inference-time Adaptive Optimizationcited by 32
- 2024Get more for less: Principled Data Selection for Warming Up Fine-Tuning in LLMscited by 32
- 2023ToViLaG: Your Visual-Language Generative Model is Also An Evildoercited by 27
- 2023Goodtriever: Adaptive Toxicity Mitigation with Retrieval-augmented Modelscited by 23
- 2023A Pseudo-Semantic Loss for Autoregressive Models with Logical Constraintscited by 21
- 2024Parameter-Efficient Detoxification with Contrastive Decodingcited by 18
- 2024From One to Many: Expanding the Scope of Toxicity Mitigation in Language Modelscited by 18
- 2024Walking in Others' Shoes: How Perspective-Taking Guides Large Language Models in Reducing Toxicity and Biascited by 17
- 2023Adding Instructions during Pretraining: Effective Way of Controlling Toxicity in Language Modelscited by 16
- 2024Efficient LLM Jailbreak via Adaptive Dense-to-sparse Constrained Optimizationcited by 16
- 2023Harnessing the Power of LLMs: Evaluating Human-AI Text Co-Creation through the Lens of News Headline Generationcited by 14
- 2022Enabling Classifiers to Make Judgements Explicitly Aligned with Human Valuescited by 13
- 2024Controllable Generation via Locally Constrained Resamplingcited by 11
- 2024RSA-Control: A Pragmatics-Grounded Lightweight Controllable Text Generation Frameworkcited by 11
- 2024SATA: A Paradigm for LLM Jailbreak via Simple Assistive Task Linkagecited by 10
- 2023Unpacking the Ethical Value Alignment in Big Modelscited by 9
- 2023Transformation vs Tradition: Artificial General Intelligence (AGI) for Arts and Humanitiescited by 9
- 2024DESTEIN: Navigating Detoxification of Language Models via Universal Steering Pairs and Head-wise Activation Fusioncited by 9
- 2025Detoxifying Large Language Models via Autoregressive Reward Guided Representation Editingcited by 9
- 2023BiasTestGPT: Using ChatGPT for Social Bias Testing of Language Modelscited by 8
- 2025UniDetox: Universal Detoxification of Large Language Models via Dataset Distillationcited by 8
- 2025Breaking Bad Tokens: Detoxification of LLMs Using Sparse Autoencoderscited by 8
- 2024Jailbreaking LLMs with Arabic Transliteration and Arabizicited by 7
- 2024Attribute Controlled Fine-tuning for Large Language Models: A Case Study on Detoxificationcited by 7
- 2025IF-GUIDE: Influence Function-Guided Detoxification of LLMscited by 7
- 2023CMD: a framework for Context-aware Model self-Detoxificationcited by 6
- 2025BiasFilter: An Inference-Time Debiasing Framework for Large Language Modelscited by 6
- 2024FrenchToxicityPrompts: a Large Benchmark for Evaluating and Mitigating Toxicity in French Textscited by 5
- 2025Evaluating and Improving Robustness in Large Language Models: A Survey and Future Directionscited by 5
- 2024Composable Interventions for Language Modelscited by 4
50 most cited of 67 All 67 (JSON)
- 2026A Survey of Toxicity Detection and Mitigation Strategies for Multilingual Language Models24 Jun 2026
- 2026Ethics Testing: Proactive Identification of Generative AI System Harms23 Apr 2026
- 2026Detoxification for LLM: From Dataset Itself21 Apr 2026
- 2026Test-Time Detoxification without Training or Learning Anything14 Jan 2026
- 2025An Empirical Study of Sample Selection Strategies for Large Language Model Repair23 Oct 2025
- 2025Detoxifying Large Language Models via Autoregressive Reward Guided Representation Editing24 Sep 2025
- 2025Probing AI Safety with Source Code25 Jun 2025
- 2025Detection, Classification, and Mitigation of Gender Bias in Large Language Models14 Jun 2025
- 2025Evaluating and Improving Robustness in Large Language Models: A Survey and Future Directions8 Jun 2025
- 2025IF-GUIDE: Influence Function-Guided Detoxification of LLMs2 Jun 2025
- 2025Detoxification of Large Language Models through Output-layer Fusion with a Calibration Model2 Jun 2025
- 2025BiasFilter: An Inference-Time Debiasing Framework for Large Language Models28 May 2025
38 more
- 2025Breaking Bad Tokens: Detoxification of LLMs Using Sparse Autoencoders20 May 2025
- 2025UniDetox: Universal Detoxification of Large Language Models via Dataset Distillation29 Apr 2025
- 2025Safety in Large Reasoning Models: A Survey24 Apr 2025
- 2025Multimedia and Visual Analytics in the Agentic Era8 Apr 2025
- 2025IRepair: An Intent-Aware Approach to Repair Data-Driven Errors in Large Language Models10 Feb 2025
- 2025GuardReasoner: Towards Reasoning-based LLM Safeguards30 Jan 2025
- 2024SATA: A Paradigm for LLM Jailbreak via Simple Assistive Task Linkage19 Dec 2024
- 2024RSA-Control: A Pragmatics-Grounded Lightweight Controllable Text Generation Framework24 Oct 2024
- 2024Controllable Generation via Locally Constrained Resampling17 Oct 2024
- 2024Attribute Controlled Fine-tuning for Large Language Models: A Case Study on Detoxification7 Oct 2024
- 2024FlipAttack: Jailbreak LLMs via Flipping2 Oct 2024
- 2024AgentPeerTalk: Empowering Students through Agentic-AI-Driven Discernment of Bullying and Joking in Peer Interactions in Schools27 Jul 2024
- 2024Walking in Others' Shoes: How Perspective-Taking Guides Large Language Models in Reducing Toxicity and Bias22 Jul 2024
- 2024Composable Interventions for Language Models9 Jul 2024
- 2024Jailbreaking LLMs with Arabic Transliteration and Arabizi26 Jun 2024
- 2024FrenchToxicityPrompts: a Large Benchmark for Evaluating and Mitigating Toxicity in French Texts25 Jun 2024
- 2024Stress-Testing Capability Elicitation With Password-Locked Models29 May 2024
- 2024Model Editing as a Robust and Denoised variant of DPO: A Case Study on Toxicity22 May 2024
- 2024Efficient LLM Jailbreak via Adaptive Dense-to-sparse Constrained Optimization15 May 2024
- 2024Get more for less: Principled Data Selection for Warming Up Fine-Tuning in LLMs5 May 2024
- 2024The Trade-off between Performance, Efficiency, and Fairness in Adapter Modules for Text Classification3 May 2024
- 2024Aligning language models with human preferences18 Apr 2024
- 2024DESTEIN: Navigating Detoxification of Language Models via Universal Steering Pairs and Head-wise Activation Fusion16 Apr 2024
- 2024Fairness in Large Language Models: A Taxonomic Survey31 Mar 2024
- 2024On the Consideration of AI Openness: Can Good Intent Be Abused?11 Mar 2024
- 2024From One to Many: Expanding the Scope of Toxicity Mitigation in Language Models6 Mar 2024
- 2024Fine-Grained Detoxification via Instance-Level Prefixes for Large Language Models23 Feb 2024
- 2024BadChain: Backdoor Chain-of-Thought Prompting for Large Language Models20 Jan 2024
- 2024Contrastive Perplexity for Controlled Generation: An Application in Detoxifying Large Language Models16 Jan 2024
- 2024Parameter-Efficient Detoxification with Contrastive Decoding13 Jan 2024
- 2024Risk Taxonomy, Mitigation, and Assessment Benchmarks of Large Language Model Systems11 Jan 2024
- 2023ToViLaG: Your Visual-Language Generative Model is Also An Evildoer13 Dec 2023
- 2023A Pseudo-Semantic Loss for Autoregressive Models with Logical Constraints6 Dec 2023
- 2023A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easily14 Nov 2023
- 2023In-context Vectors: Making In Context Learning More Effective and Controllable Through Latent Space Steering11 Nov 2023
- 2023Transformation vs Tradition: Artificial General Intelligence (AGI) for Arts and Humanities30 Oct 2023
- 2023Unpacking the Ethical Value Alignment in Big Models26 Oct 2023
- 2023Harnessing the Power of LLMs: Evaluating Human-AI Text Co-Creation through the Lens of News Headline Generation16 Oct 2023
50 newest of 67 All 67 (JSON)
- 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,565
- 2023A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easilycited by 242
- 2024FlipAttack: Jailbreak LLMs via Flippingcited by 73
- 2023All Languages Matter: On the Multilingual Safety of Large Language Modelscited by 51
- 2023Self-Detoxifying Language Models via Toxification Reversalcited by 45
- 2024Efficient LLM Jailbreak via Adaptive Dense-to-sparse Constrained Optimizationcited by 16
- 2024Jailbreaking LLMs with Arabic Transliteration and Arabizicited by 7
- 2024Composable Interventions for Language Modelscited by 4
- 2026A Survey of Toxicity Detection and Mitigation Strategies for Multilingual Language Modelscited by 0
- 2026A Survey of Toxicity Detection and Mitigation Strategies for Multilingual Language Models24 Jun 2026
- 2024FlipAttack: Jailbreak LLMs via Flipping2 Oct 2024
- 2024Composable Interventions for Language Models9 Jul 2024
- 2024Jailbreaking LLMs with Arabic Transliteration and Arabizi26 Jun 2024
- 2024Efficient LLM Jailbreak via Adaptive Dense-to-sparse Constrained Optimization15 May 2024
- 2023A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easily14 Nov 2023
- 2023Self-Detoxifying Language Models via Toxification Reversal14 Oct 2023
- 2023All Languages Matter: On the Multilingual Safety of Large Language Models2 Oct 2023
- 2023Jailbroken: How Does LLM Safety Training Fail?5 Jul 2023
- 2023GPT-4 Is Too Smart To Be Safe: Stealthy Chat with LLMs via Ciphercited by 401
- 2023Pretraining Language Models with Human Preferencescited by 245
- 2024Model Editing as a Robust and Denoised variant of DPO: A Case Study on Toxicitycited by 33
- 2022Enabling Classifiers to Make Judgements Explicitly Aligned with Human Valuescited by 13
- 2024SATA: A Paradigm for LLM Jailbreak via Simple Assistive Task Linkagecited by 10
- 2025Detoxifying Large Language Models via Autoregressive Reward Guided Representation Editingcited by 9
- 2024Aligning language models with human preferencescited by 1
- 2025Detoxifying Large Language Models via Autoregressive Reward Guided Representation Editing24 Sep 2025
- 2024SATA: A Paradigm for LLM Jailbreak via Simple Assistive Task Linkage19 Dec 2024
- 2024Model Editing as a Robust and Denoised variant of DPO: A Case Study on Toxicity22 May 2024
- 2024Aligning language models with human preferences18 Apr 2024
- 2023GPT-4 Is Too Smart To Be Safe: Stealthy Chat with LLMs via Cipher12 Aug 2023
- 2023Pretraining Language Models with Human Preferences16 Feb 2023
- 2022Enabling Classifiers to Make Judgements Explicitly Aligned with Human Values14 Oct 2022
- 2025GuardReasoner: Towards Reasoning-based LLM Safeguardscited by 89
- 2024BadChain: Backdoor Chain-of-Thought Prompting for Large Language Modelscited by 74
- 2025Safety in Large Reasoning Models: A Surveycited by 58
- 2025Safety in Large Reasoning Models: A Survey24 Apr 2025
- 2025GuardReasoner: Towards Reasoning-based LLM Safeguards30 Jan 2025
- 2024BadChain: Backdoor Chain-of-Thought Prompting for Large Language Models20 Jan 2024
- 2023In-context Vectors: Making In Context Learning More Effective and Controllable Through Latent Space Steeringcited by 240
- 2022Factuality Enhanced Language Models for Open-Ended Text Generationcited by 200
- 2022Language Generation Models Can Cause Harm: So What Can We Do About It? An Actionable Surveycited by 80
- 2024Risk Taxonomy, Mitigation, and Assessment Benchmarks of Large Language Model Systemscited by 63
- 2024Fairness in Large Language Models: A Taxonomic Surveycited by 57
- 2023On the Challenges of Using Black-Box APIs for Toxicity Evaluation in Researchcited by 44
- 2024Stress-Testing Capability Elicitation With Password-Locked Modelscited by 42
- 2023Click: Controllable Text Generation with Sequence Likelihood Contrastive Learningcited by 41
- 2022Unified Detoxifying and Debiasing in Language Generation via Inference-time Adaptive Optimizationcited by 32
- 2024Get more for less: Principled Data Selection for Warming Up Fine-Tuning in LLMscited by 32
- 2023ToViLaG: Your Visual-Language Generative Model is Also An Evildoercited by 27
- 2023A Pseudo-Semantic Loss for Autoregressive Models with Logical Constraintscited by 21
12 most cited of 44 All 44 (JSON)
- 2026Ethics Testing: Proactive Identification of Generative AI System Harms23 Apr 2026
- 2026Detoxification for LLM: From Dataset Itself21 Apr 2026
- 2026Test-Time Detoxification without Training or Learning Anything14 Jan 2026
- 2025An Empirical Study of Sample Selection Strategies for Large Language Model Repair23 Oct 2025
- 2025Probing AI Safety with Source Code25 Jun 2025
- 2025Detection, Classification, and Mitigation of Gender Bias in Large Language Models14 Jun 2025
- 2025Evaluating and Improving Robustness in Large Language Models: A Survey and Future Directions8 Jun 2025
- 2025IF-GUIDE: Influence Function-Guided Detoxification of LLMs2 Jun 2025
- 2025Detoxification of Large Language Models through Output-layer Fusion with a Calibration Model2 Jun 2025
- 2025BiasFilter: An Inference-Time Debiasing Framework for Large Language Models28 May 2025
- 2025Breaking Bad Tokens: Detoxification of LLMs Using Sparse Autoencoders20 May 2025
- 2025UniDetox: Universal Detoxification of Large Language Models via Dataset Distillation29 Apr 2025
12 newest of 44 All 44 (JSON)