Self-Control of LLM Behaviors by Compressing Suffix Gradient into Prefix Controller
Not on the map. Why?
Abstract (arXiv)
We propose SelfControl, an inference-time model control method utilizing gradients to control the behavior of large language models (LLMs) without explicit human annotations. Given a desired behavior expressed in a natural language suffix string concatenated to the input prompt, SelfControl computes gradients of the LLM's self-evaluation of the suffix with respect to its latent representations. The gradients are used to directly control the auto-regressive generation process towards desired behaviors, which eliminates human supervision, achieves precise and transparent control, and offers on-the-fly adaptability. To further enhance efficiency, we introduce SelfControl_{Prefix}, a compact module that encapsulates the learned representations from gradients into a SelfControl_{Prefix}, facilitating efficient inference-time control with no latency compared to the original model and allowing control for multiple behaviors simultaneously. Our experiments demonstrate SelfControl's efficacy across multiple domains, where it improves over SOTA for 8.3% in detoxification, 3.1% in truthfulness enhancement, 4%~10% in controlling on emotion tones, and 48.2% in privacy protection, i.e., completely remove privacy leakage issue. Additionally, we demonstrate that SelfControl can be used for data synthesis and to improve reasoning abilities.
Key facts. Cited by 3 papers in the map (data through 7 Oct 2026). Builds on 52 of its 67 references that are in the map. First posted on arXiv 4 Jun 2024.
Builds on
52 of 67 references.
References · 52
- 2020Denoising Diffusion Probabilistic Modelscited by 20,851
- 2023GPT-4 Technical Reportcited by 18,132
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2021Training Verifiers to Solve Math Word Problemscited by 9,743
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,393
- 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,185
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2022Large Language Models are Zero-Shot Reasonerscited by 4,323
- 2021Prefix-Tuning: Optimizing Continuous Prompts for Generationcited by 3,878
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,634
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 2,950
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 2,914
38 more
- 2022Locating and Editing Factual Associations in GPTcited by 2,609
- 2022Language Models (Mostly) Know What They Knowcited by 1,783
- 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,565
- 2023Representation Engineering: A Top-Down Approach to AI Transparencycited by 1,239
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,235
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,124
- 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!cited by 1,106
- 2023Steering Llama 2 via Contrastive Activation Additioncited by 1,009
- 2022Mass-Editing Memory in a Transformercited by 976
- 2022In-context Learning and Induction Headscited by 930
- 2023Large Language Models as Optimizerscited by 830
- 2019Plug and Play Language Models: A Simple Approach to Controlled Text Generationcited by 793
- 2023LLaMA-Adapter: Efficient Fine-tuning of Language Models with Zero-init Attentioncited by 776
- 2023AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Modelscited by 738
- 2023The Geometry of Truth: Emergent Linear Structure in Large Language Model Representations of True/False Datasetscited by 673
- 2024Self-Rewarding Language Modelscited by 654
- 2024LLM Evaluators Recognize and Favor Their Own Generationscited by 651
- 2023Baseline Defenses for Adversarial Attacks Against Aligned Language Modelscited by 608
- 2023Eliciting Latent Predictions from Transformers with the Tuned Lenscited by 579
- 2024How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMscited by 533
- 2022Transformer Feed-Forward Layers Build Predictions by Promoting Concepts in the Vocabulary Spacecited by 522
- 2023DecodingTrust: A Comprehensive Assessment of Trustworthiness in GPT Modelscited by 505
- 2021Fast Model Editing at Scalecited by 491
- 2023Catastrophic Jailbreak of Open-source LLMs via Exploiting Generationcited by 439
- 2023Beyond Human Data: Scaling Self-Training for Problem-Solving with Language Modelscited by 325
- 2023Large Language Model Alignment: A Surveycited by 241
- 2023LLM Self Defense: By Self Examination, LLMs Know They Are Being Trickedcited by 226
- 2024Patchscopes: A Unifying Framework for Inspecting Hidden Representations of Language Modelscited by 225
- 2023Inverse Scaling: When Bigger Isn't Bettercited by 205
- 2023Linearity of Relation Decoding in Transformer Language Modelscited by 190
- 2023Defending Against Alignment-Breaking Attacks via Robustly Aligned LLMcited by 173
- 2023Large Language Models Understand and Can be Enhanced by Emotional Stimulicited by 143
- 2022Analyzing Transformers in Embedding Spacecited by 131
- 2023Jump to Conclusions: Short-Cutting Transformers With Linear Transformationscited by 89
- 2023Self-Evaluation Improves Selective Generation in Large Language Modelscited by 74
- 2021Controlled Text Generation as Continuous Optimization with Multiple Constraintscited by 70
- 2022Gradient-Based Constrained Sampling from Language Modelscited by 64
- 2024SelfIE: Self-Interpretation of Large Language Model Embeddingscited by 63
50 most cited of 52 All 52 (JSON)
Built on by
Citing papers per year: 2025: 1; 2026: 2.
3 papers.
Similar, not cited
Close in wording, no citation either way
- 2024Self-controller: Controlling LLMs with Multi-round Step-by-step Self-awareness
- 2024Self-Play Fine-Tuning Converts Weak Language Models to Strong Language Models
- 2026LLMs as High-Dimensional Nonlinear Autoregressive Models with Attention: Training, Alignment and Inference
- 2026Compute Where it Counts: Self Optimizing Language Models
- 2026Talking to Yourself: Defying Forgetting in Large Language Models
- 2026Can We Break LLMs Out of Self-Loops? Fine-Grained Reasoning Control with Activation Steering
- 2024Efficient Self-Improvement in Multimodal Large Language Models: A Model-Level Judge-Free Approach
- 2025Think Twice, Generate Once: Safeguarding by Progressive Self-Reflection