Whispering Experts: Neural Interventions for Toxicity Mitigation in Language Models
Not on the map. Why?
Abstract (arXiv)
An important issue with Large Language Models (LLMs) is their undesired ability to generate toxic language. In this work, we show that the neurons responsible for toxicity can be determined by their power to discriminate toxic sentences, and that toxic language can be mitigated by reducing their activation levels proportionally to this power. We propose AUROC adaptation (AurA), an intervention that can be applied to any pre-trained LLM to mitigate toxicity. As the intervention is proportional to the ability of each neuron to discriminate toxic content, it is free of any model-dependent hyperparameters. We show that AurA can achieve up to 2.2 × reduction in toxicity with only a 0.72 perplexity increase. We also show that AurA is effective with models of different scale (from 1.5B to 40B parameters), and its effectiveness in mitigating toxic language, while preserving common-sense zero-shot abilities, holds across all scales. AurA can be combined with pre-prompting strategies, boosting its average mitigation potential from 1.28× to 2.35×. Moreover, AurA can counteract adversarial pre-prompts that maliciously elicit toxic content, making it an effective method for deploying safer and less toxic models.
Key facts. Cited by 31 papers in the map (data through 7 Oct 2026). Builds on 45 of its 64 references that are in the map. First posted on arXiv 2 Jul 2024.
Builds on
45 of 64 references.
References · 45
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,491
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
- 2019HellaSwag: Can a Machine Really Finish Your Sentence?cited by 4,018
- 2021Prefix-Tuning: Optimizing Continuous Prompts for Generationcited by 3,878
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,634
- 2022OPT: Open Pre-trained Transformer Language Modelscited by 3,464
- 2022Scaling Instruction-Finetuned Language Modelscited by 2,997
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,919
- 2019PIQA: Reasoning about Physical Commonsense in Natural Languagecited by 2,818
- 2019Fine-Tuning Language Models from Human Preferencescited by 2,124
33 more
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,235
- 2021Scaling Language Models: Methods, Analysis & Insights from Training Gophercited by 1,199
- 2020StereoSet: Measuring stereotypical bias in pretrained language modelscited by 911
- 2019Plug and Play Language Models: A Simple Approach to Controlled Text Generationcited by 793
- 2022Ignore Previous Prompt: Attack Techniques For Language Modelscited by 760
- 2019CTRL: A Conditional Transformer Language Model for Controllable Generationcited by 754
- 2017Automated Hate Speech Detection and the Problem of Offensive Languagecited by 724
- 2019Universal Adversarial Triggers for Attacking and Analyzing NLPcited by 709
- 2020CrowS-Pairs: A Challenge Dataset for Measuring Social Biases in Masked Language Modelscited by 703
- 2019The Woman Worked as a Babysitter: On Biases in Language Generationcited by 540
- 2021DExperts: Decoding-Time Controlled Text Generation with Experts and Anti-Expertscited by 434
- 2019On Measuring Social Biases in Sentence Encoderscited by 397
- 2020GeDi: Generative Discriminator Guided Sequence Generationcited by 377
- 2021FUDGE: Controlled Text Generation With Future Discriminatorscited by 374
- 2019Measurement and Fairnesscited by 299
- 2019Measuring Bias in Contextualized Word Representationscited by 275
- 2019Predicting the Type and Target of Offensive Posts in Social Mediacited by 268
- 2018Large Scale Crowdsourcing and Characterization of Twitter Abusive Behaviorcited by 265
- 2023Pretraining Language Models with Human Preferencescited by 245
- 2020HateCheck: Functional Tests for Hate Speech Detection Modelscited by 215
- 2019Gender Bias in Contextualized Word Embeddingscited by 203
- 2021Challenges in Detoxifying Language Modelscited by 169
- 2020Recipes for Safety in Open-domain Chatbotscited by 168
- 2023Fundamental Limitations of Alignment in Large Language Modelscited by 152
- 2017Learning to Generate Reviews and Discovering Sentimentcited by 147
- 2019Multilingual and Multi-Aspect Hate Speech Analysiscited by 133
- 2022A Survey of Controllable Text Generation using Transformer-based Pre-trained Language Modelscited by 128
- 2017Deceiving Google's Perspective API Built for Detecting Toxic Commentscited by 99
- 2019Evaluating the Underlying Gender Bias in Contextualized Word Embeddingscited by 94
- 2022The CRINGE Loss: Learning what language not to modelcited by 39
- 2020Technical Report: Auxiliary Tuning and its Application to Conditional Text Generationcited by 17
- 2021Self-conditioning pre-trained language modelscited by 16
- 2022Learning from data in the mixed adversarial non-adversarial case: Finding the helpers and ignoring the trollscited by 11
Built on by
Citing papers per year: 2024: 4; 2025: 16; 2026: 11.
31 papers.
Sort:
By area:
- 2024Steering Language Model Refusal with Sparse Autoencoderscited by 89
- 2024Controlling Language and Diffusion Models by Transporting Activationscited by 59
- 2026Locate, Steer, and Improve: A Practical Survey of Actionable Mechanistic Interpretability in Large Language Modelscited by 22
- 2025Emotions Where Art Thou: Understanding and Characterizing the Emotional Latent Space of Large Language Modelscited by 14
- 2025LinEAS: End-to-end Learning of Activation Steering with a Distributional Losscited by 12
- 2025Activation Steering with a Feedback Controllercited by 11
- 2026CLaS-Bench: A Cross-Lingual Alignment and Steering Benchmarkcited by 11
- 2024Math Neurosurgery: Isolating Language Models' Math Reasoning Abilities Using Only Forward Passescited by 10
- 2025Steering into New Embedding Spaces: Analyzing Cross-Lingual Alignment Induced by Model Interventions in Multilingual Language Modelscited by 10
- 2025UniDetox: Universal Detoxification of Large Language Models via Dataset Distillationcited by 8
- 2025IF-GUIDE: Influence Function-Guided Detoxification of LLMscited by 7
- 2025Neurons Speak in Ranges: Breaking Free from Discrete Neuronal Attributioncited by 5
19 more
- 2024Composable Interventions for Language Modelscited by 4
- 2025Robust LLM Unlearning with MUDMAN: Meta-Unlearning with Disruption Masking And Normalizationcited by 4
- 2025Evaluating Sparse Autoencoders for Monosemantic Representationcited by 3
- 2025Collapse of Irrelevant Representations (CIR) Ensures Robust and Non-Disruptive LLM Unlearningcited by 3
- 2025Redefining Experts: Interpretable Decomposition of Language Models for Toxicity Mitigationcited by 3
- 2025DSO: Direct Steering Optimization for Bias Mitigationcited by 3
- 2026Where to Steer: Input-Dependent Layer Selection for Steering Improves LLM Alignmentcited by 3
- 2026CausalDetox: Causal Head Selection and Intervention for Language Model Detoxificationcited by 3
- 2025Something Just Like TRuST : Toxicity Recognition of Span and Targetcited by 2
- 2026GenCtrl -- A Formal Controllability Toolkit for Generative Modelscited by 2
- 2025SGM: Safety Glasses for Multimodal Large Language Models via Neuron-Level Detoxificationcited by 1
- 2026Do Prompts Guarantee Safety? Mitigating Toxicity from LLM Generations through Subspace Interventioncited by 1
- 2026Over-Refusal and Representation Subspaces: A Mechanistic Analysis of Task-Conditioned Refusal in Aligned LLMscited by 1
- 2025Beautiful Images, Toxic Words: Understanding and Addressing Offensive Text in Generated Imagescited by 0
- 2025ExpertLens: Activation steering features are highly interpretablecited by 0
- 2026HyperTransport: Amortized Conditioning of T2I Generative Modelscited by 0
- 2026Where Does Toxicity Live? Mechanistic Localization and Targeted Suppression in Language Modelscited by 0
- 2026On The Effectiveness-Fluency Trade-Off In LLM Conditioning: A Systematic Studycited by 0
- 2026GAPS: Dimension-Level Gates for Conditional Activation Steeringcited by 0
- 2026GAPS: Dimension-Level Gates for Conditional Activation Steering1 Sep 2026
- 2026On The Effectiveness-Fluency Trade-Off In LLM Conditioning: A Systematic Study10 Jun 2026
- 2026Where Does Toxicity Live? Mechanistic Localization and Targeted Suppression in Language Models27 May 2026
- 2026HyperTransport: Amortized Conditioning of T2I Generative Models7 May 2026
- 2026CausalDetox: Causal Head Selection and Intervention for Language Model Detoxification16 Apr 2026
- 2026Where to Steer: Input-Dependent Layer Selection for Steering Improves LLM Alignment4 Apr 2026
- 2026Over-Refusal and Representation Subspaces: A Mechanistic Analysis of Task-Conditioned Refusal in Aligned LLMs29 Mar 2026
- 2026Do Prompts Guarantee Safety? Mitigating Toxicity from LLM Generations through Subspace Intervention6 Feb 2026
- 2026Locate, Steer, and Improve: A Practical Survey of Actionable Mechanistic Interpretability in Large Language Models20 Jan 2026
- 2026CLaS-Bench: A Cross-Lingual Alignment and Steering Benchmark13 Jan 2026
- 2026GenCtrl -- A Formal Controllability Toolkit for Generative Models9 Jan 2026
- 2025DSO: Direct Steering Optimization for Bias Mitigation17 Dec 2025
19 more
- 2025SGM: Safety Glasses for Multimodal Large Language Models via Neuron-Level Detoxification17 Dec 2025
- 2025Emotions Where Art Thou: Understanding and Characterizing the Emotional Latent Space of Large Language Models24 Oct 2025
- 2025Activation Steering with a Feedback Controller5 Oct 2025
- 2025Redefining Experts: Interpretable Decomposition of Language Models for Toxicity Mitigation20 Sep 2025
- 2025Collapse of Irrelevant Representations (CIR) Ensures Robust and Non-Disruptive LLM Unlearning15 Sep 2025
- 2025Evaluating Sparse Autoencoders for Monosemantic Representation20 Aug 2025
- 2025Robust LLM Unlearning with MUDMAN: Meta-Unlearning with Disruption Masking And Normalization14 Jun 2025
- 2025Something Just Like TRuST : Toxicity Recognition of Span and Target2 Jun 2025
- 2025IF-GUIDE: Influence Function-Guided Detoxification of LLMs2 Jun 2025
- 2025UniDetox: Universal Detoxification of Large Language Models via Dataset Distillation29 Apr 2025
- 2025LinEAS: End-to-end Learning of Activation Steering with a Distributional Loss11 Mar 2025
- 2025Steering into New Embedding Spaces: Analyzing Cross-Lingual Alignment Induced by Model Interventions in Multilingual Language Models21 Feb 2025
- 2025ExpertLens: Activation steering features are highly interpretable20 Feb 2025
- 2025Beautiful Images, Toxic Words: Understanding and Addressing Offensive Text in Generated Images7 Feb 2025
- 2025Neurons Speak in Ranges: Breaking Free from Discrete Neuronal Attribution4 Feb 2025
- 2024Steering Language Model Refusal with Sparse Autoencoders18 Nov 2024
- 2024Controlling Language and Diffusion Models by Transporting Activations30 Oct 2024
- 2024Math Neurosurgery: Isolating Language Models' Math Reasoning Abilities Using Only Forward Passes22 Oct 2024
- 2024Composable Interventions for Language Models9 Jul 2024
- 2024Composable Interventions for Language Modelscited by 4
- 2025Robust LLM Unlearning with MUDMAN: Meta-Unlearning with Disruption Masking And Normalizationcited by 4
- 2025Collapse of Irrelevant Representations (CIR) Ensures Robust and Non-Disruptive LLM Unlearningcited by 3
- 2026Do Prompts Guarantee Safety? Mitigating Toxicity from LLM Generations through Subspace Interventioncited by 1
- 2026Where Does Toxicity Live? Mechanistic Localization and Targeted Suppression in Language Modelscited by 0
- 2026Where Does Toxicity Live? Mechanistic Localization and Targeted Suppression in Language Models27 May 2026
- 2026Do Prompts Guarantee Safety? Mitigating Toxicity from LLM Generations through Subspace Intervention6 Feb 2026
- 2025Collapse of Irrelevant Representations (CIR) Ensures Robust and Non-Disruptive LLM Unlearning15 Sep 2025
- 2025Robust LLM Unlearning with MUDMAN: Meta-Unlearning with Disruption Masking And Normalization14 Jun 2025
- 2024Composable Interventions for Language Models9 Jul 2024
- 2024Steering Language Model Refusal with Sparse Autoencoderscited by 89
- 2026Locate, Steer, and Improve: A Practical Survey of Actionable Mechanistic Interpretability in Large Language Modelscited by 22
- 2025Emotions Where Art Thou: Understanding and Characterizing the Emotional Latent Space of Large Language Modelscited by 14
- 2025LinEAS: End-to-end Learning of Activation Steering with a Distributional Losscited by 12
- 2026CLaS-Bench: A Cross-Lingual Alignment and Steering Benchmarkcited by 11
- 2025Steering into New Embedding Spaces: Analyzing Cross-Lingual Alignment Induced by Model Interventions in Multilingual Language Modelscited by 10
- 2025UniDetox: Universal Detoxification of Large Language Models via Dataset Distillationcited by 8
- 2025IF-GUIDE: Influence Function-Guided Detoxification of LLMscited by 7
- 2025Neurons Speak in Ranges: Breaking Free from Discrete Neuronal Attributioncited by 5
- 2025Evaluating Sparse Autoencoders for Monosemantic Representationcited by 3
- 2025Redefining Experts: Interpretable Decomposition of Language Models for Toxicity Mitigationcited by 3
- 2026CausalDetox: Causal Head Selection and Intervention for Language Model Detoxificationcited by 3
12 most cited of 18 All 18 (JSON)
- 2026GAPS: Dimension-Level Gates for Conditional Activation Steering1 Sep 2026
- 2026On The Effectiveness-Fluency Trade-Off In LLM Conditioning: A Systematic Study10 Jun 2026
- 2026HyperTransport: Amortized Conditioning of T2I Generative Models7 May 2026
- 2026CausalDetox: Causal Head Selection and Intervention for Language Model Detoxification16 Apr 2026
- 2026Locate, Steer, and Improve: A Practical Survey of Actionable Mechanistic Interpretability in Large Language Models20 Jan 2026
- 2026CLaS-Bench: A Cross-Lingual Alignment and Steering Benchmark13 Jan 2026
- 2026GenCtrl -- A Formal Controllability Toolkit for Generative Models9 Jan 2026
- 2025Emotions Where Art Thou: Understanding and Characterizing the Emotional Latent Space of Large Language Models24 Oct 2025
- 2025Redefining Experts: Interpretable Decomposition of Language Models for Toxicity Mitigation20 Sep 2025
- 2025Evaluating Sparse Autoencoders for Monosemantic Representation20 Aug 2025
- 2025Something Just Like TRuST : Toxicity Recognition of Span and Target2 Jun 2025
- 2025IF-GUIDE: Influence Function-Guided Detoxification of LLMs2 Jun 2025
12 newest of 18 All 18 (JSON)