MoGU: A Framework for Enhancing Safety of Open-Sourced LLMs While Preserving Their Usability
Not on the map. Why?
Abstract (arXiv)
Large Language Models (LLMs) are increasingly deployed in various applications. As their usage grows, concerns regarding their safety are rising, especially in maintaining harmless responses when faced with malicious instructions. Many defense strategies have been developed to enhance the safety of LLMs. However, our research finds that existing defense strategies lead LLMs to predominantly adopt a rejection-oriented stance, thereby diminishing the usability of their responses to benign instructions. To solve this problem, we introduce the MoGU framework, designed to enhance LLMs' safety while preserving their usability. Our MoGU framework transforms the base LLM into two variants: the usable LLM and the safe LLM, and further employs dynamic routing to balance their contribution. When encountering malicious instructions, the router will assign a higher weight to the safe LLM to ensure that responses are harmless. Conversely, for benign instructions, the router prioritizes the usable LLM, facilitating usable and helpful responses. On various open-sourced LLMs, we compare multiple defense strategies to verify the superiority of our MoGU framework. Besides, our analysis provides key insights into the effectiveness of MoGU and verifies that our designed routing mechanism can effectively balance the contribution of each variant by assigning weights. Our work released the safer Llama2, Vicuna, Falcon, Dolphin, and Baichuan2.
Key facts. Cited by 14 papers in the map (data through 7 Oct 2026). Builds on 37 of its 44 references that are in the map. First posted on arXiv 23 May 2024.
Builds on
37 of 44 references.
References · 37
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,204
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,393
- 2024Mixtral of Expertscited by 1,785
- 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,565
- 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,326
- 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!cited by 1,106
- 2023LIMA: Less Is More for Alignmentcited by 1,080
- 2022Red Teaming Language Models with Language Modelscited by 983
- 2023AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Modelscited by 738
25 more
- 2022Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learnedcited by 702
- 2023Baichuan 2: Open Large-scale Language Modelscited by 664
- 2023Baseline Defenses for Adversarial Attacks Against Aligned Language Modelscited by 608
- 2023GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Promptscited by 520
- 2023"Do Anything Now": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Modelscited by 457
- 2022ToxiGen: A Large-Scale Machine-Generated Dataset for Adversarial and Implicit Hate Speech Detectioncited by 419
- 2023Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrationscited by 401
- 2022A Holistic Approach to Undesired Content Detection in the Real Worldcited by 337
- 2023Exploiting Programmatic Behavior of LLMs: Dual-Use Through Standard Security Attackscited by 268
- 2023The Unlocking Spell on Base LLMs: Rethinking Alignment via In-Context Learningcited by 251
- 2023Certifying LLM Safety against Adversarial Promptingcited by 248
- 2024SafeDecoding: Defending against Jailbreak Attacks via Safety-Aware Decodingcited by 233
- 2023LLM Self Defense: By Self Examination, LLMs Know They Are Being Trickedcited by 226
- 2023Automatically Auditing Large Language Models via Discrete Optimizationcited by 187
- 2024COLD-Attack: Jailbreaking LLMs with Stealthiness and Controllabilitycited by 162
- 2024WARM: On the Benefits of Weight Averaged Reward Modelscited by 145
- 2024Attacks, Defenses and Evaluations for LLM Conversation Safety: A Surveycited by 124
- 2023Explore, Establish, Exploit: Red Teaming Language Models from Scratchcited by 111
- 2018Noise Contrastive Estimation and Negative Sampling for Conditional Models: Consistency and Statistical Efficiencycited by 103
- 2024Weak-to-Strong Jailbreaking on Large Language Modelscited by 100
- 2024Tuning Language Models by Proxycited by 88
- 2023FLIRT: Feedback Loop In-context Red Teamingcited by 81
- 2023Attack Prompt Generation for Red Teaming and Defending Large Language Modelscited by 73
- 2024Foot In The Door: Understanding Large Language Model Jailbreaking via Cognitive Psychologycited by 25
- 2023Analyzing the Inherent Response Tendency of LLMs: Real-World Instructions-Driven Jailbreakcited by 22
Built on by
Citing papers per year: 2024: 4; 2025: 9; 2026: 1.
14 papers.
Sort:
By area:
- 2024A Survey on Mixture of Experts in Large Language Modelscited by 233
- 2025AlphaSteer: Learning Refusal Steering with Principled Null-Space Constraintcited by 45
- 2025Panacea: Mitigating Harmful Fine-tuning for Large Language Models via Post-fine-tuning Perturbationcited by 20
- 2025Adaptive Defense against Harmful Fine-Tuning for Large Language Models via Bayesian Data Schedulercited by 12
- 2024Toward Secure Tuning: Mitigating Security Risks from Instruction Fine-Tuningcited by 8
- 2024Designing Large Foundation Models for Efficient Training and Inference: A Surveycited by 7
- 2025Latent-space adversarial training with post-aware calibration for defending large language models against jailbreak attackscited by 7
- 2025MixBridge: Heterogeneous Image-to-Image Backdoor Attack through Mixture of Schr"odinger Bridgescited by 5
- 2025Reshaping Representation Space to Balance the Safety and Over-rejection in Large Audio Language Modelscited by 4
- 2026Q-realign: Piggybacking Realignment on Quantization for Safe and Efficient LLM Deploymentcited by 4
- 2025MidPO: Dual Preference Optimization for Safety and Helpfulness in Large Language Models via a Mixture of Experts Frameworkcited by 3
- 2024Bridging Today and the Future of Humanity: AI Safety in 2024 and Beyondcited by 1
2 more
- 2026Q-realign: Piggybacking Realignment on Quantization for Safe and Efficient LLM Deployment13 Jan 2026
- 2025Reimagining Safety Alignment with An Image1 Nov 2025
- 2025Adaptive Defense against Harmful Fine-Tuning for Large Language Models via Bayesian Data Scheduler31 Oct 2025
- 2025UpSafe^circC: Upcycling for Controllable Safety in Large Language Models2 Oct 2025
- 2025AlphaSteer: Learning Refusal Steering with Principled Null-Space Constraint8 Jun 2025
- 2025MidPO: Dual Preference Optimization for Safety and Helpfulness in Large Language Models via a Mixture of Experts Framework3 Jun 2025
- 2025Reshaping Representation Space to Balance the Safety and Over-rejection in Large Audio Language Models26 May 2025
- 2025MixBridge: Heterogeneous Image-to-Image Backdoor Attack through Mixture of Schr"odinger Bridges12 May 2025
- 2025Panacea: Mitigating Harmful Fine-tuning for Large Language Models via Post-fine-tuning Perturbation30 Jan 2025
- 2025Latent-space adversarial training with post-aware calibration for defending large language models against jailbreak attacks18 Jan 2025
- 2024Bridging Today and the Future of Humanity: AI Safety in 2024 and Beyond9 Oct 2024
- 2024Toward Secure Tuning: Mitigating Security Risks from Instruction Fine-Tuning6 Oct 2024
2 more
- 2025Latent-space adversarial training with post-aware calibration for defending large language models against jailbreak attackscited by 7
- 2025MidPO: Dual Preference Optimization for Safety and Helpfulness in Large Language Models via a Mixture of Experts Frameworkcited by 3
- 2025Reimagining Safety Alignment with An Imagecited by 1
- 2025Reimagining Safety Alignment with An Image1 Nov 2025
- 2025MidPO: Dual Preference Optimization for Safety and Helpfulness in Large Language Models via a Mixture of Experts Framework3 Jun 2025
- 2025Latent-space adversarial training with post-aware calibration for defending large language models against jailbreak attacks18 Jan 2025
- 2025Panacea: Mitigating Harmful Fine-tuning for Large Language Models via Post-fine-tuning Perturbationcited by 20
- 2025Adaptive Defense against Harmful Fine-Tuning for Large Language Models via Bayesian Data Schedulercited by 12
- 2024Toward Secure Tuning: Mitigating Security Risks from Instruction Fine-Tuningcited by 8
- 2024Designing Large Foundation Models for Efficient Training and Inference: A Surveycited by 7
- 2025Reshaping Representation Space to Balance the Safety and Over-rejection in Large Audio Language Modelscited by 4
- 2024Bridging Today and the Future of Humanity: AI Safety in 2024 and Beyondcited by 1
- 2025Adaptive Defense against Harmful Fine-Tuning for Large Language Models via Bayesian Data Scheduler31 Oct 2025
- 2025Reshaping Representation Space to Balance the Safety and Over-rejection in Large Audio Language Models26 May 2025
- 2025Panacea: Mitigating Harmful Fine-tuning for Large Language Models via Post-fine-tuning Perturbation30 Jan 2025
- 2024Bridging Today and the Future of Humanity: AI Safety in 2024 and Beyond9 Oct 2024
- 2024Toward Secure Tuning: Mitigating Security Risks from Instruction Fine-Tuning6 Oct 2024
- 2024Designing Large Foundation Models for Efficient Training and Inference: A Survey3 Sep 2024