SLM as Guardian: Pioneering AI Safety with Small Language Models
Not on the map. Why?
Abstract (arXiv)
Most prior safety research of large language models (LLMs) has focused on enhancing the alignment of LLMs to better suit the safety requirements of humans. However, internalizing such safeguard features into larger models brought challenges of higher training cost and unintended degradation of helpfulness. To overcome such challenges, a modular approach employing a smaller LLM to detect harmful user queries is regarded as a convenient solution in designing LLM-based system with safety requirements. In this paper, we leverage a smaller LLM for both harmful query detection and safeguard response generation. We introduce our safety requirements and the taxonomy of harmfulness categories, and then propose a multi-task learning mechanism fusing the two tasks into a single model. We demonstrate the effectiveness of our approach, providing on par or surpassing harmful query detection and safeguard response performance compared to the publicly available LLMs.
Key facts. Cited by 7 papers in the map (data through 7 Oct 2026). Builds on 34 of its 56 references that are in the map. First posted on arXiv 30 May 2024.
Builds on
34 of 56 references.
References · 34
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,266
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2022Large Language Models are Zero-Shot Reasonerscited by 4,323
- 2017Deep reinforcement learning from human preferencescited by 3,846
- 2021Finetuned Language Models Are Zero-Shot Learnerscited by 3,747
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,634
- 2022Self-Instruct: Aligning Language Models with Self-Generated Instructionscited by 2,674
- 2019Fine-Tuning Language Models from Human Preferencescited by 2,124
- 2022Rethinking the Role of Demonstrations: What Makes In-Context Learning Work?cited by 1,413
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,124
- 2023WizardLM: Empowering large pre-trained language models to follow complex instructionscited by 1,116
22 more
- 2023LIMA: Less Is More for Alignmentcited by 1,080
- 2023OpenAssistant Conversations -- Democratizing Large Language Model Alignmentcited by 712
- 2023Distilling Step-by-Step! Outperforming Larger Language Models with Less Training Data and Smaller Model Sizescited by 710
- 2023GPT-4 Is Too Smart To Be Safe: Stealthy Chat with LLMs via Ciphercited by 401
- 2023Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrationscited by 401
- 2022Unnatural Instructions: Tuning Language Models with (Almost) No Human Laborcited by 395
- 2020Multi-Task Learning with Deep Neural Networks: A Surveycited by 374
- 2023Certifying LLM Safety against Adversarial Promptingcited by 248
- 2020ONION: A Simple and Effective Defense Against Textual Backdoor Attackscited by 231
- 2022Why Can GPT Learn In-Context? Language Models Implicitly Perform Gradient Descent as Meta-Optimizerscited by 204
- 2022On Second Thought, Let's Not Think Step by Step! Bias and Toxicity in Zero-Shot Reasoningcited by 191
- 2023Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attackscited by 189
- 2024AEGIS: Online Adaptive AI Content Safety Moderation with Ensemble of LLM Expertscited by 126
- 2022Explanations from Large Language Models Make Small Reasoners Bettercited by 123
- 2023Use of LLMs for Illicit Purposes: Threats, Prevention Measures, and Vulnerabilitiescited by 76
- 2021What Changes Can Large-scale Language Models Bring? Intensive Study on HyperCLOVA: Billions-scale Korean Generative Pretrained Transformerscited by 75
- 2022Complementary Explanations for Effective In-Context Learningcited by 71
- 2020BEEP! Korean Corpus of Online News Comments for Toxic Speech Detectioncited by 39
- 2020KorNLI and KorSTS: New Benchmark Datasets for Korean Natural Language Understandingcited by 37
- 2023SQuARe: A Large-Scale Dataset of Sensitive Questions and Acceptable Responses Created Through Human-Machine Collaborationcited by 13
- 2022APEACH: Attacking Pejorative Expressions with Analysis on Crowd-Generated Hate Speech Evaluation Datasetscited by 8
- 2019Machines Getting with the Program: Understanding Intent Arguments of Non-Canonical Directivescited by 4
Built on by
Citing papers per year: 2024: 1; 2025: 2; 2026: 4.
7 papers.
- 2024A Comprehensive Survey of Small Language Models in the Era of Large Language Models: Techniques, Enhancements, Applications, Collaboration with LLMs, and Trustworthinesscited by 125
- 2025A Survey on Trustworthy LLM Agents: Threats and Countermeasurescited by 93
- 2025LeechHijack: Covert Computational Resource Exploitation in Intelligent Agent Systemscited by 5
- 2026VerifyMAS: Hypothesis Verification for Failure Attribution in LLM Multi-Agent Systemscited by 5
- 2026GLiGuard: Schema-Conditioned Classification for LLM Safeguardcited by 4
- 2026Enhancing Safety of Large Language Models via Embedding Space Separationcited by 2
- 2026Guardian-as-an-Advisor: Advancing Next-Generation Guardian Models for Trustworthy LLMscited by 1
- 2026VerifyMAS: Hypothesis Verification for Failure Attribution in LLM Multi-Agent Systems17 May 2026
- 2026GLiGuard: Schema-Conditioned Classification for LLM Safeguard8 May 2026
- 2026Guardian-as-an-Advisor: Advancing Next-Generation Guardian Models for Trustworthy LLMs8 Apr 2026
- 2026Enhancing Safety of Large Language Models via Embedding Space Separation1 Mar 2026
- 2025LeechHijack: Covert Computational Resource Exploitation in Intelligent Agent Systems2 Dec 2025
- 2025A Survey on Trustworthy LLM Agents: Threats and Countermeasures12 Mar 2025
- 2024A Comprehensive Survey of Small Language Models in the Era of Large Language Models: Techniques, Enhancements, Applications, Collaboration with LLMs, and Trustworthiness4 Nov 2024