Tell Your Model Where to Attend: Post-hoc Attention Steering for LLMs
Not on the map. Why?
Abstract (arXiv)
In human-written articles, we often leverage the subtleties of text style, such as bold and italics, to guide the attention of readers. These textual emphases are vital for the readers to grasp the conveyed information. When interacting with large language models (LLMs), we have a similar need -- steering the model to pay closer attention to user-specified information, e.g., an instruction. Existing methods, however, are constrained to process plain text and do not support such a mechanism. This motivates us to introduce PASTA -- Post-hoc Attention STeering Approach, a method that allows LLMs to read text with user-specified emphasis marks. To this end, PASTA identifies a small subset of attention heads and applies precise attention reweighting on them, directing the model attention to user-specified parts. Like prompting, PASTA is applied at inference time and does not require changing any model parameters. Experiments demonstrate that PASTA can substantially enhance an LLM's ability to follow user instructions or integrate new knowledge from user inputs, leading to a significant performance improvement on a variety of tasks, e.g., an average accuracy improvement of 22% for LLAMA-7B. Our code is publicly available at https://github.com/QingruZhang/PASTA .
Key facts. Cited by 82 papers in the map (data through 7 Oct 2026). Builds on 42 of its 51 references that are in the map. First posted on arXiv 3 Nov 2023.
Builds on
42 of 51 references.
References · 42
- 2017Attention Is All You Needcited by 59,932
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,160
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,302
- 2021Finetuned Language Models Are Zero-Shot Learnerscited by 3,747
- 2022Scaling Instruction-Finetuned Language Modelscited by 2,997
- 2022Locating and Editing Factual Associations in GPTcited by 2,609
- 2020Learning to summarize from human feedbackcited by 2,562
- 2021Pre-train, Prompt, and Predict: A Systematic Survey of Prompting Methods in Natural Language Processingcited by 2,222
30 more
- 2019HuggingFace's Transformers: State-of-the-art Natural Language Processingcited by 2,201
- 2019Fine-Tuning Language Models from Human Preferencescited by 2,124
- 2017Interpretability Beyond Feature Attribution: Quantitative Testing with Concept Activation Vectors (TCAV)cited by 1,309
- 2021Fantastically Ordered Prompts and Where to Find Them: Overcoming Few-Shot Prompt Order Sensitivitycited by 1,122
- 2019BERT Rediscovers the Classical NLP Pipelinecited by 1,046
- 2019What Does BERT Look At? An Analysis of BERT's Attentioncited by 994
- 2022Mass-Editing Memory in a Transformercited by 976
- 2019Attention is not Explanationcited by 916
- 2019Analyzing Multi-Head Self-Attention: Specialized Heads Do the Heavy Lifting, the Rest Can Be Prunedcited by 844
- 2019Are Sixteen Heads Really Better than One?cited by 803
- 2019Attention is not not Explanationcited by 629
- 2021Prompt Programming for Large Language Models: Beyond the Few-Shot Paradigmcited by 599
- 2021Knowledge Neurons in Pretrained Transformerscited by 590
- 2018What you can cram into a single vector: Probing sentence embeddings for linguistic propertiescited by 452
- 2022RLPrompt: Optimizing Discrete Text Prompts with Reinforcement Learningcited by 361
- 2019Bias in Bios: A Case Study of Semantic Representation Bias in a High-Stakes Settingcited by 346
- 2021Do Prompt-Based Models Really Understand the Meaning of their Prompts?cited by 324
- 2017Right for the Right Reasons: Training Differentiable Models by Constraining their Explanationscited by 293
- 2022PromptSource: An Integrated Development Environment and Repository for Natural Language Promptscited by 288
- 2015Visualizing and Understanding Recurrent Networkscited by 158
- 2019Interpretations are useful: penalizing explanations to align neural networks with prior knowledgecited by 144
- 2020Making deep neural networks right for the right scientific reasons by interacting with their explanationscited by 141
- 2023DeepSpeed-Chat: Easy, Fast and Affordable RLHF Training of ChatGPT-like Models at All Scalescited by 107
- 2022Interactive and Visual Prompt Engineering for Ad-hoc Task Adaptation with Large Language Modelscited by 70
- 2019Incorporating Priors with Feature Attribution on Text Classificationcited by 68
- 2023Explaining black box text modules in natural language with language modelscited by 61
- 2023Post Hoc Explanations of Language Models Can Improve Language Modelscited by 50
- 2023AtMan: Understanding Transformer Predictions Through Memory Efficient Attention Manipulationcited by 30
- 2021Toward a Visual Concept Vocabulary for GAN Latent Spacecited by 15
- 2023TOAST: Transfer Learning via Attention Steeringcited by 15
Built on by
Citing papers per year: 2024: 27; 2025: 22; 2026: 33.
82 papers.
Sort:
By area:
- 2024GEAR: An Efficient KV Cache Compression Recipe for Near-Lossless Generative Inference of LLMcited by 155
- 2025See What You Are Told: Visual Attention Sink in Large Multimodal Modelscited by 127
- 2024Rethinking Interpretability in the Era of Large Language Modelscited by 110
- 2024Found in the Middle: Calibrating Positional Attention Bias Improves Long Context Utilizationcited by 97
- 2025Why Is Spatial Reasoning Hard for VLMs? An Attention Mechanism Perspective on Focus Areascited by 93
- 2024Steering Language Model Refusal with Sparse Autoencoderscited by 89
- 2024Attention Tracker: Detecting Prompt Injection Attacks in LLMscited by 82
- 2024Unveiling and Harnessing Hidden Attention Sinks: Enhancing Large Language Models without Training through Attention Calibrationcited by 70
- 2025Effectively Controlling Reasoning Models through Thinking Interventioncited by 63
- 2024LoFiT: Localized Fine-tuning on LLM Representationscited by 56
- 2025A Survey on Mechanistic Interpretability for Multi-Modal Foundation Modelscited by 34
- 2024From Complex to Simple: Enhancing Multi-Constraint Complex Instruction Following Ability of Large Language Modelscited by 27
38 more
- 2024Towards Consistent Natural-Language Explanations via Explanation-Consistency Finetuningcited by 26
- 2024Do LLMs estimate uncertainty well in instruction-following?cited by 26
- 2024Do LLMs "know" internally when they follow instructions?cited by 25
- 2024Data Formulator 2: Iterative Creation of Data Visualizations, with AI Transforming Data Along the Waycited by 19
- 2025Spotlight Your Instructions: Instruction-following with Dynamic Attention Steeringcited by 18
- 2024Mixture of In-Context Experts Enhance LLMs' Long Context Awarenesscited by 17
- 2024Discovering Bias in Latent Space: An Unsupervised Debiasing Approachcited by 15
- 2024Model Tells Itself Where to Attend: Faithfulness Meets Automatic Attention Steeringcited by 15
- 2024Do Large Language Models Need a Content Delivery Network?cited by 15
- 2024DebUnc: Improving Large Language Model Agent Communication With Uncertainty Metricscited by 13
- 2025SPEX: Scaling Feature Interaction Explanations for LLMscited by 12
- 2024Large Language Models for Social Networks: Applications, Challenges, and Solutionscited by 11
- 2025ZeroTuning: Unlocking the Initial Token's Power to Enhance Large Language Models Without Trainingcited by 11
- 2024On the Loss of Context-awareness in General Instruction Fine-tuningcited by 10
- 2025Interpretation Meets Safety: A Survey on Interpretation Methods and Tools for Improving LLM Safetycited by 10
- 2026Analysing the Safety Pitfalls of Steering Vectorscited by 9
- 2026ICON: Indirect Prompt Injection Defense for Agents based on Inference-Time Correctioncited by 8
- 2024FALIP: Visual Prompt as Foveal Attention Boosts CLIP Zero-Shot Performancecited by 7
- 2024LLMSteer: Improving Long-Context LLM Inference by Steering Attention on Reused Contextscited by 7
- 2025HICD: Hallucination-Inducing via Attention Dispersion for Contrastive Decoding to Mitigate Hallucinations in Large Language Modelscited by 7
- 2024Attention Speaks Volumes: Localizing and Mitigating Bias in Language Modelscited by 6
- 2025PANDAS: Improving Many-shot Jailbreaking via Positive Affirmation, Negative Demonstration, and Adaptive Samplingcited by 6
- 2025Attention Eclipse: Manipulating Attention to Bypass LLM Safety-Alignmentcited by 6
- 2025Hallucinate at the Last in Long Response Generation: A Case Study on Long Document Summarizationcited by 6
- 2026Epistemic Context Learning: Building Trust the Right Way in LLM-Based Multi-Agent Systemscited by 6
- 2026Efficient and accurate steering of Large Language Models through attention-guided feature learningcited by 6
- 2026Spectral Attention Steering for Prompt Highlightingcited by 6
- 2024Feint and Attack: Attention-Based Strategies for Jailbreaking and Protecting LLMscited by 5
- 2024Attribute Structuring Improves LLM-Based Evaluation of Clinical Text Summariescited by 4
- 2024It Is Not About What You Say, It Is About How You Say It: A Surprisingly Simple Approach for Improving Reading Comprehensioncited by 4
- 2025Stepwise Informativeness Search for Efficient and Effective LLM Reasoningcited by 4
- 2025CAFE: Retrieval Head-based Coarse-to-Fine Information Seeking to Enhance Multi-Document QA Capabilitycited by 4
- 2026Enhancing Instruction Following of LLMs via Activation Steering with Dynamic Rejectioncited by 4
- 2025Enhancing Chain-of-Thought Reasoning with Critical Representation Fine-tuningcited by 3
- 2025Capturing Gaze Shifts for Guidance: Cross-Modal Fusion Enhancement for VLM Hallucination Mitigationcited by 3
- 2025Towards Mitigating Hallucinations in Large Vision-Language Models by Refining Textual Embeddingscited by 3
- 2026Interpreting and Steering State-Space Models via Activation Subspace Bottleneckscited by 3
- 2024Interpretable Next-token Prediction via the Generalized Induction Headcited by 2
50 most cited of 82 All 82 (JSON)
- 2026When Context Changes: Understanding Update Failures in LLMs30 Sep 2026
- 2026Beyond Attention Imbalance: Mitigating Hallucinations via Spectral Surgery29 Sep 2026
- 2026BaRe-Mem: Bayesian Reliability Memory for Robust and Adaptive Agent Consultation28 Sep 2026
- 2026A mechanistic study of language model introspection28 Sep 2026
- 2026Inherited Heads: Audio language models track speakers with their text backbone's attention, and an attention-mass ranking retrieves a different set12 Sep 2026
- 2026Exact Finite Attention Responses From RoPE Derivatives12 Sep 2026
- 2026Locating and Steering Refusal Beyond Attention4 Sep 2026
- 2026Language Models Can Control Their Own Attention2 Sep 2026
- 2026Steering Recurrent Reasoners at Inference Time with Readout Feedback25 Aug 2026
- 2026Inference-Time Attention Steering for Vision-Language-Action Driving Models17 Aug 2026
- 2026Attention is Case-Sensitive4 Aug 2026
- 2026Steering Instruction Hierarchies at Inference Time28 Jul 2026
38 more
- 2026How Do LLMs Read Bug Reports? An Empirical Study of Attention in LLMs for Automated Program Repair28 Jul 2026
- 2026Data-Efficient Adaptation of LLMs via Attention Head Reweighting15 Jul 2026
- 2026Self-Improving is Often Sudden: Enlightenment-style Finetuning for Large-Scale Models15 Jul 2026
- 2026Attending to Multimodal Generation One Token at a Time4 Jul 2026
- 2026Enhancing Multi-Agent Communication through Attention Steering with Context Relevance28 May 2026
- 2026Steered Generation via Gradient-Based Optimization on Sparse Query Features21 May 2026
- 2026Vocabulary Hijacking in LVLMs: Unveiling Critical Attention Heads by Excluding Inert Tokens to Mitigate Hallucination11 May 2026
- 2026Reasoning Fails Where Step Flow Breaks8 Apr 2026
- 2026Analysing the Safety Pitfalls of Steering Vectors25 Mar 2026
- 2026Learning Consistent Temporal Grounding between Related Tasks in Sports Coaching19 Mar 2026
- 2026PRISM-Delta: Differential Subspace Steering for Prompt Highlighting in Large Language Models11 Mar 2026
- 2026From Refusal Tokens to Refusal Control: Discovering and Steering Category-Specific Refusal Directions9 Mar 2026
- 2026AI Steerability 360: A Toolkit for Steering Large Language Models8 Mar 2026
- 2026Enhancing Instruction Following of LLMs via Activation Steering with Dynamic Rejection6 Mar 2026
- 2026Depth Charge: Jailbreak Large Language Models from Deep Safety Attention Heads6 Mar 2026
- 2026Spectral Attention Steering for Prompt Highlighting1 Mar 2026
- 2026Interpreting and Steering State-Space Models via Activation Subspace Bottlenecks26 Feb 2026
- 2026ICON: Indirect Prompt Injection Defense for Agents based on Inference-Time Correction24 Feb 2026
- 2026Designing Multi-Robot Ground Video Sensemaking with Public Safety Professionals9 Feb 2026
- 2026Efficient and accurate steering of Large Language Models through attention-guided feature learning30 Jan 2026
- 2026Epistemic Context Learning: Building Trust the Right Way in LLM-Based Multi-Agent Systems29 Jan 2026
- 2025Towards Mitigating Hallucinations in Large Vision-Language Models by Refining Textual Embeddings7 Nov 2025
- 2025Capturing Gaze Shifts for Guidance: Cross-Modal Fusion Enhancement for VLM Hallucination Mitigation24 Oct 2025
- 2025Eyes-on-Me: Scalable RAG Poisoning through Transferable Attention-Steering Attractors1 Oct 2025
- 2025Simulate, Refocus and Ensemble: An Attention-Refocusing Scheme for Domain Generalization17 Jul 2025
- 2025Enhancing Chain-of-Thought Reasoning with Critical Representation Fine-tuning14 Jul 2025
- 2025CrEst: Credibility Estimation for Contexts in LLMs via Weak Supervision17 Jun 2025
- 2025Interpretation Meets Safety: A Survey on Interpretation Methods and Tools for Improving LLM Safety5 Jun 2025
- 2025Mind the Quote: Enabling Quotation-Aware Dialogue in LLMs via Plug-and-Play Modules30 May 2025
- 2025Explaining Sources of Uncertainty in Automated Fact-Checking23 May 2025
- 2025Hallucinate at the Last in Long Response Generation: A Case Study on Long Document Summarization21 May 2025
- 2025Spotlight Your Instructions: Instruction-following with Dynamic Attention Steering17 May 2025
- 2025ZeroTuning: Unlocking the Initial Token's Power to Enhance Large Language Models Without Training16 May 2025
- 2025CAFE: Retrieval Head-based Coarse-to-Fine Information Seeking to Enhance Multi-Document QA Capability15 May 2025
- 2025Effectively Controlling Reasoning Models through Thinking Intervention31 Mar 2025
- 2025HICD: Hallucination-Inducing via Attention Dispersion for Contrastive Decoding to Mitigate Hallucinations in Large Language Models17 Mar 2025
- 2025See What You Are Told: Visual Attention Sink in Large Multimodal Models5 Mar 2025
- 2025Why Is Spatial Reasoning Hard for VLMs? An Attention Mechanism Perspective on Focus Areas3 Mar 2025
50 newest of 82 All 82 (JSON)
- 2024Rethinking Interpretability in the Era of Large Language Modelscited by 110
- 2025Why Is Spatial Reasoning Hard for VLMs? An Attention Mechanism Perspective on Focus Areascited by 93
- 2025Effectively Controlling Reasoning Models through Thinking Interventioncited by 63
- 2025Stepwise Informativeness Search for Efficient and Effective LLM Reasoningcited by 4
- 2025Enhancing Chain-of-Thought Reasoning with Critical Representation Fine-tuningcited by 3
- 2025Towards Mitigating Hallucinations in Large Vision-Language Models by Refining Textual Embeddingscited by 3
- 2026Reasoning Fails Where Step Flow Breakscited by 2
- 2026Reasoning Fails Where Step Flow Breaks8 Apr 2026
- 2025Towards Mitigating Hallucinations in Large Vision-Language Models by Refining Textual Embeddings7 Nov 2025
- 2025Enhancing Chain-of-Thought Reasoning with Critical Representation Fine-tuning14 Jul 2025
- 2025Effectively Controlling Reasoning Models through Thinking Intervention31 Mar 2025
- 2025Why Is Spatial Reasoning Hard for VLMs? An Attention Mechanism Perspective on Focus Areas3 Mar 2025
- 2025Stepwise Informativeness Search for Efficient and Effective LLM Reasoning21 Feb 2025
- 2024Rethinking Interpretability in the Era of Large Language Models30 Jan 2024
- 2025See What You Are Told: Visual Attention Sink in Large Multimodal Modelscited by 127
- 2025A Survey on Mechanistic Interpretability for Multi-Modal Foundation Modelscited by 34
- 2025Capturing Gaze Shifts for Guidance: Cross-Modal Fusion Enhancement for VLM Hallucination Mitigationcited by 3
- 2024Semantic Token Reweighting for Interpretable and Controllable Text Embeddings in CLIPcited by 1
- 2026Vocabulary Hijacking in LVLMs: Unveiling Critical Attention Heads by Excluding Inert Tokens to Mitigate Hallucinationcited by 1
- 2026Attending to Multimodal Generation One Token at a Timecited by 0
- 2026Beyond Attention Imbalance: Mitigating Hallucinations via Spectral Surgerycited by 0
- 2026Beyond Attention Imbalance: Mitigating Hallucinations via Spectral Surgery29 Sep 2026
- 2026Attending to Multimodal Generation One Token at a Time4 Jul 2026
- 2026Vocabulary Hijacking in LVLMs: Unveiling Critical Attention Heads by Excluding Inert Tokens to Mitigate Hallucination11 May 2026
- 2025Capturing Gaze Shifts for Guidance: Cross-Modal Fusion Enhancement for VLM Hallucination Mitigation24 Oct 2025
- 2025See What You Are Told: Visual Attention Sink in Large Multimodal Models5 Mar 2025
- 2025A Survey on Mechanistic Interpretability for Multi-Modal Foundation Models22 Feb 2025
- 2024Semantic Token Reweighting for Interpretable and Controllable Text Embeddings in CLIP11 Oct 2024
- 2024Attention Tracker: Detecting Prompt Injection Attacks in LLMscited by 82
- 2025Interpretation Meets Safety: A Survey on Interpretation Methods and Tools for Improving LLM Safetycited by 10
- 2026Analysing the Safety Pitfalls of Steering Vectorscited by 9
- 2025Attention Eclipse: Manipulating Attention to Bypass LLM Safety-Alignmentcited by 6
- 2024Feint and Attack: Attention-Based Strategies for Jailbreaking and Protecting LLMscited by 5
- 2026Depth Charge: Jailbreak Large Language Models from Deep Safety Attention Headscited by 1
- 2026Analysing the Safety Pitfalls of Steering Vectors25 Mar 2026
- 2026Depth Charge: Jailbreak Large Language Models from Deep Safety Attention Heads6 Mar 2026
- 2025Interpretation Meets Safety: A Survey on Interpretation Methods and Tools for Improving LLM Safety5 Jun 2025
- 2025Attention Eclipse: Manipulating Attention to Bypass LLM Safety-Alignment21 Feb 2025
- 2024Attention Tracker: Detecting Prompt Injection Attacks in LLMs1 Nov 2024
- 2024Feint and Attack: Attention-Based Strategies for Jailbreaking and Protecting LLMs18 Oct 2024
- 2024DebUnc: Improving Large Language Model Agent Communication With Uncertainty Metricscited by 13
- 2026ICON: Indirect Prompt Injection Defense for Agents based on Inference-Time Correctioncited by 8
- 2026Epistemic Context Learning: Building Trust the Right Way in LLM-Based Multi-Agent Systemscited by 6
- 2026Enhancing Multi-Agent Communication through Attention Steering with Context Relevancecited by 0
- 2026When Context Changes: Understanding Update Failures in LLMscited by 0
- 2026When Context Changes: Understanding Update Failures in LLMs30 Sep 2026
- 2026Enhancing Multi-Agent Communication through Attention Steering with Context Relevance28 May 2026
- 2026ICON: Indirect Prompt Injection Defense for Agents based on Inference-Time Correction24 Feb 2026
- 2026Epistemic Context Learning: Building Trust the Right Way in LLM-Based Multi-Agent Systems29 Jan 2026
- 2024DebUnc: Improving Large Language Model Agent Communication With Uncertainty Metrics8 Jul 2024
- 2024Found in the Middle: Calibrating Positional Attention Bias Improves Long Context Utilizationcited by 97
- 2024Steering Language Model Refusal with Sparse Autoencoderscited by 89
- 2024Unveiling and Harnessing Hidden Attention Sinks: Enhancing Large Language Models without Training through Attention Calibrationcited by 70
- 2024LoFiT: Localized Fine-tuning on LLM Representationscited by 56
- 2024From Complex to Simple: Enhancing Multi-Constraint Complex Instruction Following Ability of Large Language Modelscited by 27
- 2024Towards Consistent Natural-Language Explanations via Explanation-Consistency Finetuningcited by 26
- 2024Do LLMs estimate uncertainty well in instruction-following?cited by 26
- 2024Do LLMs "know" internally when they follow instructions?cited by 25
- 2024Data Formulator 2: Iterative Creation of Data Visualizations, with AI Transforming Data Along the Waycited by 19
- 2025Spotlight Your Instructions: Instruction-following with Dynamic Attention Steeringcited by 18
- 2024Mixture of In-Context Experts Enhance LLMs' Long Context Awarenesscited by 17
- 2024Discovering Bias in Latent Space: An Unsupervised Debiasing Approachcited by 15
12 most cited of 48 All 48 (JSON)
- 2026BaRe-Mem: Bayesian Reliability Memory for Robust and Adaptive Agent Consultation28 Sep 2026
- 2026A mechanistic study of language model introspection28 Sep 2026
- 2026Inherited Heads: Audio language models track speakers with their text backbone's attention, and an attention-mass ranking retrieves a different set12 Sep 2026
- 2026Exact Finite Attention Responses From RoPE Derivatives12 Sep 2026
- 2026Locating and Steering Refusal Beyond Attention4 Sep 2026
- 2026Steering Recurrent Reasoners at Inference Time with Readout Feedback25 Aug 2026
- 2026Attention is Case-Sensitive4 Aug 2026
- 2026Steering Instruction Hierarchies at Inference Time28 Jul 2026
- 2026How Do LLMs Read Bug Reports? An Empirical Study of Attention in LLMs for Automated Program Repair28 Jul 2026
- 2026Data-Efficient Adaptation of LLMs via Attention Head Reweighting15 Jul 2026
- 2026Steered Generation via Gradient-Based Optimization on Sparse Query Features21 May 2026
- 2026Learning Consistent Temporal Grounding between Related Tasks in Sports Coaching19 Mar 2026
12 newest of 48 All 48 (JSON)