mlsanityData to 7 Oct 2026

Whispering Experts: Neural Interventions for Toxicity Mitigation in Language Models

arXiv 2407.12824 ↗First posted 2 Jul 2024cs.CL cs.AIcited by 31

Not on the map. Why?

Abstract (arXiv)

An important issue with Large Language Models (LLMs) is their undesired ability to generate toxic language. In this work, we show that the neurons responsible for toxicity can be determined by their power to discriminate toxic sentences, and that toxic language can be mitigated by reducing their activation levels proportionally to this power. We propose AUROC adaptation (AurA), an intervention that can be applied to any pre-trained LLM to mitigate toxicity. As the intervention is proportional to the ability of each neuron to discriminate toxic content, it is free of any model-dependent hyperparameters. We show that AurA can achieve up to 2.2 × reduction in toxicity with only a 0.72 perplexity increase. We also show that AurA is effective with models of different scale (from 1.5B to 40B parameters), and its effectiveness in mitigating toxic language, while preserving common-sense zero-shot abilities, holds across all scales. AurA can be combined with pre-prompting strategies, boosting its average mitigation potential from 1.28× to 2.35×. Moreover, AurA can counteract adversarial pre-prompts that maliciously elicit toxic content, making it an effective method for deploying safer and less toxic models.

Key facts. Cited by 31 papers in the map (data through 7 Oct 2026). Builds on 45 of its 64 references that are in the map. First posted on arXiv 2 Jul 2024.

Builds on

45 of 64 references.

References · 45

  1. 2020Language Models are Few-Shot Learnerscited by 32,199
  2. 2022Training language models to follow instructions with human feedbackcited by 15,712
  3. 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,491
  4. 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
  5. 2019HellaSwag: Can a Machine Really Finish Your Sentence?cited by 4,018
  6. 2021Prefix-Tuning: Optimizing Continuous Prompts for Generationcited by 3,878
  7. 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,634
  8. 2022OPT: Open Pre-trained Transformer Language Modelscited by 3,464
  9. 2022Scaling Instruction-Finetuned Language Modelscited by 2,997
  10. 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,919
  11. 2019PIQA: Reasoning about Physical Commonsense in Natural Languagecited by 2,818
  12. 2019Fine-Tuning Language Models from Human Preferencescited by 2,124
33 more
  1. 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,235
  2. 2021Scaling Language Models: Methods, Analysis & Insights from Training Gophercited by 1,199
  3. 2020StereoSet: Measuring stereotypical bias in pretrained language modelscited by 911
  4. 2019Plug and Play Language Models: A Simple Approach to Controlled Text Generationcited by 793
  5. 2022Ignore Previous Prompt: Attack Techniques For Language Modelscited by 760
  6. 2019CTRL: A Conditional Transformer Language Model for Controllable Generationcited by 754
  7. 2017Automated Hate Speech Detection and the Problem of Offensive Languagecited by 724
  8. 2019Universal Adversarial Triggers for Attacking and Analyzing NLPcited by 709
  9. 2020CrowS-Pairs: A Challenge Dataset for Measuring Social Biases in Masked Language Modelscited by 703
  10. 2019The Woman Worked as a Babysitter: On Biases in Language Generationcited by 540
  11. 2021DExperts: Decoding-Time Controlled Text Generation with Experts and Anti-Expertscited by 434
  12. 2019On Measuring Social Biases in Sentence Encoderscited by 397
  13. 2020GeDi: Generative Discriminator Guided Sequence Generationcited by 377
  14. 2021FUDGE: Controlled Text Generation With Future Discriminatorscited by 374
  15. 2019Measurement and Fairnesscited by 299
  16. 2019Measuring Bias in Contextualized Word Representationscited by 275
  17. 2019Predicting the Type and Target of Offensive Posts in Social Mediacited by 268
  18. 2018Large Scale Crowdsourcing and Characterization of Twitter Abusive Behaviorcited by 265
  19. 2023Pretraining Language Models with Human Preferencescited by 245
  20. 2020HateCheck: Functional Tests for Hate Speech Detection Modelscited by 215
  21. 2019Gender Bias in Contextualized Word Embeddingscited by 203
  22. 2021Challenges in Detoxifying Language Modelscited by 169
  23. 2020Recipes for Safety in Open-domain Chatbotscited by 168
  24. 2023Fundamental Limitations of Alignment in Large Language Modelscited by 152
  25. 2017Learning to Generate Reviews and Discovering Sentimentcited by 147
  26. 2019Multilingual and Multi-Aspect Hate Speech Analysiscited by 133
  27. 2022A Survey of Controllable Text Generation using Transformer-based Pre-trained Language Modelscited by 128
  28. 2017Deceiving Google's Perspective API Built for Detecting Toxic Commentscited by 99
  29. 2019Evaluating the Underlying Gender Bias in Contextualized Word Embeddingscited by 94
  30. 2022The CRINGE Loss: Learning what language not to modelcited by 39
  31. 2020Technical Report: Auxiliary Tuning and its Application to Conditional Text Generationcited by 17
  32. 2021Self-conditioning pre-trained language modelscited by 16
  33. 2022Learning from data in the mixed adversarial non-adversarial case: Finding the helpers and ignoring the trollscited by 11

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2024: 4; 2025: 16; 2026: 11.

31 papers.

Sort:

By area:

  1. 2024Steering Language Model Refusal with Sparse Autoencoderscited by 89
  2. 2024Controlling Language and Diffusion Models by Transporting Activationscited by 59
  3. 2026Locate, Steer, and Improve: A Practical Survey of Actionable Mechanistic Interpretability in Large Language Modelscited by 22
  4. 2025Emotions Where Art Thou: Understanding and Characterizing the Emotional Latent Space of Large Language Modelscited by 14
  5. 2025LinEAS: End-to-end Learning of Activation Steering with a Distributional Losscited by 12
  6. 2025Activation Steering with a Feedback Controllercited by 11
  7. 2026CLaS-Bench: A Cross-Lingual Alignment and Steering Benchmarkcited by 11
  8. 2024Math Neurosurgery: Isolating Language Models' Math Reasoning Abilities Using Only Forward Passescited by 10
  9. 2025Steering into New Embedding Spaces: Analyzing Cross-Lingual Alignment Induced by Model Interventions in Multilingual Language Modelscited by 10
  10. 2025UniDetox: Universal Detoxification of Large Language Models via Dataset Distillationcited by 8
  11. 2025IF-GUIDE: Influence Function-Guided Detoxification of LLMscited by 7
  12. 2025Neurons Speak in Ranges: Breaking Free from Discrete Neuronal Attributioncited by 5
19 more
  1. 2024Composable Interventions for Language Modelscited by 4
  2. 2025Robust LLM Unlearning with MUDMAN: Meta-Unlearning with Disruption Masking And Normalizationcited by 4
  3. 2025Evaluating Sparse Autoencoders for Monosemantic Representationcited by 3
  4. 2025Collapse of Irrelevant Representations (CIR) Ensures Robust and Non-Disruptive LLM Unlearningcited by 3
  5. 2025Redefining Experts: Interpretable Decomposition of Language Models for Toxicity Mitigationcited by 3
  6. 2025DSO: Direct Steering Optimization for Bias Mitigationcited by 3
  7. 2026Where to Steer: Input-Dependent Layer Selection for Steering Improves LLM Alignmentcited by 3
  8. 2026CausalDetox: Causal Head Selection and Intervention for Language Model Detoxificationcited by 3
  9. 2025Something Just Like TRuST : Toxicity Recognition of Span and Targetcited by 2
  10. 2026GenCtrl -- A Formal Controllability Toolkit for Generative Modelscited by 2
  11. 2025SGM: Safety Glasses for Multimodal Large Language Models via Neuron-Level Detoxificationcited by 1
  12. 2026Do Prompts Guarantee Safety? Mitigating Toxicity from LLM Generations through Subspace Interventioncited by 1
  13. 2026Over-Refusal and Representation Subspaces: A Mechanistic Analysis of Task-Conditioned Refusal in Aligned LLMscited by 1
  14. 2025Beautiful Images, Toxic Words: Understanding and Addressing Offensive Text in Generated Imagescited by 0
  15. 2025ExpertLens: Activation steering features are highly interpretablecited by 0
  16. 2026HyperTransport: Amortized Conditioning of T2I Generative Modelscited by 0
  17. 2026Where Does Toxicity Live? Mechanistic Localization and Targeted Suppression in Language Modelscited by 0
  18. 2026On The Effectiveness-Fluency Trade-Off In LLM Conditioning: A Systematic Studycited by 0
  19. 2026GAPS: Dimension-Level Gates for Conditional Activation Steeringcited by 0