mlsanityData to 7 Oct 2026

MoGU: A Framework for Enhancing Safety of Open-Sourced LLMs While Preserving Their Usability

arXiv 2405.14488 ↗First posted 23 May 2024cs.CLcited by 14

Not on the map. Why?

Abstract (arXiv)

Large Language Models (LLMs) are increasingly deployed in various applications. As their usage grows, concerns regarding their safety are rising, especially in maintaining harmless responses when faced with malicious instructions. Many defense strategies have been developed to enhance the safety of LLMs. However, our research finds that existing defense strategies lead LLMs to predominantly adopt a rejection-oriented stance, thereby diminishing the usability of their responses to benign instructions. To solve this problem, we introduce the MoGU framework, designed to enhance LLMs' safety while preserving their usability. Our MoGU framework transforms the base LLM into two variants: the usable LLM and the safe LLM, and further employs dynamic routing to balance their contribution. When encountering malicious instructions, the router will assign a higher weight to the safe LLM to ensure that responses are harmless. Conversely, for benign instructions, the router prioritizes the usable LLM, facilitating usable and helpful responses. On various open-sourced LLMs, we compare multiple defense strategies to verify the superiority of our MoGU framework. Besides, our analysis provides key insights into the effectiveness of MoGU and verifies that our designed routing mechanism can effectively balance the contribution of each variant by assigning weights. Our work released the safer Llama2, Vicuna, Falcon, Dolphin, and Baichuan2.

Key facts. Cited by 14 papers in the map (data through 7 Oct 2026). Builds on 37 of its 44 references that are in the map. First posted on arXiv 23 May 2024.

Builds on

37 of 44 references.

References · 37

  1. 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
  2. 2022Training language models to follow instructions with human feedbackcited by 15,712
  3. 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
  4. 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
  5. 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,393
  6. 2024Mixtral of Expertscited by 1,785
  7. 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,565
  8. 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,326
  9. 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!cited by 1,106
  10. 2023LIMA: Less Is More for Alignmentcited by 1,080
  11. 2022Red Teaming Language Models with Language Modelscited by 983
  12. 2023AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Modelscited by 738
25 more
  1. 2022Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learnedcited by 702
  2. 2023Baichuan 2: Open Large-scale Language Modelscited by 664
  3. 2023Baseline Defenses for Adversarial Attacks Against Aligned Language Modelscited by 608
  4. 2023GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Promptscited by 520
  5. 2023"Do Anything Now": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Modelscited by 457
  6. 2022ToxiGen: A Large-Scale Machine-Generated Dataset for Adversarial and Implicit Hate Speech Detectioncited by 419
  7. 2023Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrationscited by 401
  8. 2022A Holistic Approach to Undesired Content Detection in the Real Worldcited by 337
  9. 2023Exploiting Programmatic Behavior of LLMs: Dual-Use Through Standard Security Attackscited by 268
  10. 2023The Unlocking Spell on Base LLMs: Rethinking Alignment via In-Context Learningcited by 251
  11. 2023Certifying LLM Safety against Adversarial Promptingcited by 248
  12. 2024SafeDecoding: Defending against Jailbreak Attacks via Safety-Aware Decodingcited by 233
  13. 2023LLM Self Defense: By Self Examination, LLMs Know They Are Being Trickedcited by 226
  14. 2023Automatically Auditing Large Language Models via Discrete Optimizationcited by 187
  15. 2024COLD-Attack: Jailbreaking LLMs with Stealthiness and Controllabilitycited by 162
  16. 2024WARM: On the Benefits of Weight Averaged Reward Modelscited by 145
  17. 2024Attacks, Defenses and Evaluations for LLM Conversation Safety: A Surveycited by 124
  18. 2023Explore, Establish, Exploit: Red Teaming Language Models from Scratchcited by 111
  19. 2018Noise Contrastive Estimation and Negative Sampling for Conditional Models: Consistency and Statistical Efficiencycited by 103
  20. 2024Weak-to-Strong Jailbreaking on Large Language Modelscited by 100
  21. 2024Tuning Language Models by Proxycited by 88
  22. 2023FLIRT: Feedback Loop In-context Red Teamingcited by 81
  23. 2023Attack Prompt Generation for Red Teaming and Defending Large Language Modelscited by 73
  24. 2024Foot In The Door: Understanding Large Language Model Jailbreaking via Cognitive Psychologycited by 25
  25. 2023Analyzing the Inherent Response Tendency of LLMs: Real-World Instructions-Driven Jailbreakcited by 22

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2024: 4; 2025: 9; 2026: 1.

14 papers.

Sort:

By area: