mlsanityData to 14 Oct 2026

Alignment is not sufficient to prevent large language models from generating harmful information: A psychoanalytic perspective

arXiv 2311.08487 ↗First posted 14 Nov 2023cs.CL cs.AIcited by 3

On the map: LLM alignment / RLHF / preference optimisation → Human values and AI feedback alignment

also in 1 more
Abstract (arXiv)

Large Language Models (LLMs) are central to a multitude of applications but struggle with significant risks, notably in generating harmful content and biases. Drawing an analogy to the human psyche's conflict between evolutionary survival instincts and societal norm adherence elucidated in Freud's psychoanalysis theory, we argue that LLMs suffer a similar fundamental conflict, arising between their inherent desire for syntactic and semantic continuity, established during the pre-training phase, and the post-training alignment with human values. This conflict renders LLMs vulnerable to adversarial attacks, wherein intensifying the models' desire for continuity can circumvent alignment efforts, resulting in the generation of harmful information. Through a series of experiments, we first validated the existence of the desire for continuity in LLMs, and further devised a straightforward yet powerful technique, such as incomplete sentences, negative priming, and cognitive dissonance scenarios, to demonstrate that even advanced LLMs struggle to prevent the generation of harmful information. In summary, our study uncovers the root of LLMs' vulnerabilities to adversarial attacks, hereby questioning the efficacy of solely relying on sophisticated alignment methods, and further advocates for a new training idea that integrates modal concepts alongside traditional amodal concepts, aiming to endow LLMs with a more nuanced understanding of real-world contexts and ethical considerations.

Key facts. Cited by 3 papers in the map (data through 14 Oct 2026). Placed in Human values and AI feedback alignment, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 34 of its 48 references that are in the map. First posted on arXiv 14 Nov 2023.

Builds on

34 of 48 references.

References · 34

  1. 2017Attention Is All You Needcited by 60,361
  2. 2020Language Models are Few-Shot Learnerscited by 32,419
  3. 2022Training language models to follow instructions with human feedbackcited by 15,971
  4. 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
  5. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
  6. 2022Emergent Abilities of Large Language Modelscited by 2,512
  7. 2020The Pile: An 800GB Dataset of Diverse Text for Language Modelingcited by 2,411
  8. 2023A Survey on Large Language Model based Autonomous Agentscited by 2,242
  9. 2023PaLM-E: An Embodied Multimodal Language Modelcited by 2,071
  10. 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,651
  11. 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,443
  12. 2022Red Teaming Language Models with Language Modelscited by 1,026
22 more
  1. 2017Ensemble Adversarial Training: Attacks and Defensescited by 840
  2. 2022Ignore Previous Prompt: Attack Techniques For Language Modelscited by 832
  3. 2019EDA: Easy Data Augmentation Techniques for Boosting Performance on Text Classification Taskscited by 807
  4. 2023Open Problems and Fundamental Limitations of Reinforcement Learning from Human Feedbackcited by 759
  5. 2022Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learnedcited by 729
  6. 2019Universal Adversarial Triggers for Attacking and Analyzing NLPcited by 722
  7. 2019Is BERT Really Robust? A Strong Baseline for Natural Language Attack on Text Classification and Entailmentcited by 671
  8. 2023Prompt Injection attack against LLM-integrated Applicationscited by 605
  9. 2023GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Promptscited by 560
  10. 2017Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methodscited by 546
  11. 2023Jailbreaking ChatGPT via Prompt Engineering: An Empirical Studycited by 498
  12. 2020BERT-ATTACK: Adversarial Attack Against BERT Using BERTcited by 491
  13. 2023Multi-step Jailbreaking Privacy Attacks on ChatGPTcited by 333
  14. 2021Gradient-based Adversarial Attacks against Text Transformerscited by 234
  15. 2023Automatically Auditing Large Language Models via Discrete Optimizationcited by 191
  16. 2023AI Deception: A Survey of Examples, Risks, and Potential Solutionscited by 188
  17. 2023Explore, Establish, Exploit: Red Teaming Language Models from Scratchcited by 114
  18. 2022Scaling Laws vs Model Architectures: How does Inductive Bias Influence Scaling?cited by 103
  19. 2023FLIRT: Feedback Loop In-context Red Teamingcited by 83
  20. 2022Adversarial Training for High-Stakes Reliabilitycited by 60
  21. 2017Ensemble Methods as a Defense to Adversarial Perturbations Against Deep Neural Networkscited by 31
  22. 2023Enhancing Large Language Models Against Inductive Instructions with Dual-critique Promptingcited by 21

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2023: 1; 2024: 0; 2025: 1; 2026: 1.

3 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025Revealing the Intrinsic Ethical Vulnerability of Aligned Large Language Models
  2. 2025Normative Conflicts and Shallow AI Alignment
  3. 2026Alignment as Iatrogenesis: Pastoral Power, Collective Pathology, and the Structural Limits of Monolingual Safety Evaluation
  4. 2026Representational alignment yields generalizable safety in language models
  5. 2026Emergent Unfaithfulness: How Alignment Training Causes Language Models to Silently Override Task Faithfulness
  6. 2023Large Language Model Alignment: A Survey
  7. 2023The Alignment Problem in Context
  8. 2024Dishonesty in Helpful and Harmless Alignment