Toxic Subword Pruning for Dialogue Response Generation on Large Language Models
Not on the map. Why?
Abstract (arXiv)
How to defend large language models (LLMs) from generating toxic content is an important research area. Yet, most research focused on various model training techniques to remediate LLMs by updating their weights. A typical related research area is safety alignment. This however is often costly and tedious and can expose the model to even more problems such as catastrophic forgetting if the trainings are not carefully handled by experienced NLP practitioners. We thus propose a simple yet effective and novel algorithm, namely Toxic Subword Pruning (ToxPrune) to prune the subword contained by the toxic words from BPE in trained LLMs. In contrast to the previous work that demonstrates pruning BPE tokens as harmful to the task of machine translation, we surprisingly found its usefulness in preventing toxic content from being generated on LLMs. Fortunately, our findings suggest that ToxPrune simultaneously improves the toxic language model NSFW-3B on the task of dialogue response generation obviously. We surprisingly found that ToxPrune can even obviously improve official Llama-3.1-6B in the metric of dialogue diversity. Extensive automatic results and human evaluation indicate that ToxPrune could be helpful for both remediating toxic LLMs and improving non-toxic LLMs on the task of dialogue response generation.footnoteWe plan to release the resources to facilitate future work.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Builds on 37 of its 58 references that are in the map. First posted on arXiv 5 Oct 2024.
Builds on
37 of 58 references.
References · 37
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,634
- 2014Sequence to Sequence Learning with Neural Networkscited by 2,974
- 2015Neural Machine Translation of Rare Words with Subword Unitscited by 2,898
- 2019The Curious Case of Neural Text Degenerationcited by 2,881
- 2018Hierarchical Neural Story Generationcited by 1,182
- 2015A Diversity-Promoting Objective Function for Neural Conversation Modelscited by 1,068
- 2018Personalizing Dialogue Agents: I have a dog, do you have pets too?cited by 820
- 2022Ignore Previous Prompt: Attack Techniques For Language Modelscited by 760
- 2023Baseline Defenses for Adversarial Attacks Against Aligned Language Modelscited by 608
- 2022Transformer Feed-Forward Layers Build Predictions by Promoting Concepts in the Vocabulary Spacecited by 522
25 more
- 2023Toxicity in ChatGPT: Analyzing Persona-assigned Language Modelscited by 356
- 2021Beyond Goldfish Memory: Long-Term Open-Domain Conversationcited by 266
- 2023A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easilycited by 242
- 2024SafeDecoding: Defending against Jailbreak Attacks via Safety-Aware Decodingcited by 233
- 2017Beam Search Strategies for Neural Machine Translationcited by 232
- 2022Predictability and Surprise in Large Generative Modelscited by 209
- 2024Chain-of-Thought Reasoning Without Promptingcited by 208
- 2023InCharacter: Evaluating Personality Fidelity in Role-Playing Agents through Psychological Interviewscited by 177
- 2017ParlAI: A Dialog Research Software Platformcited by 139
- 2019Don't Say That! Making Inconsistent Dialogue Unlikely with Unlikelihood Trainingcited by 110
- 2022Long Time No See! Open-Domain Conversation with Long-Term Persona Memorycited by 107
- 2024Representation Noising: A Defence Mechanism Against Harmful Finetuningcited by 93
- 2023Prompt as Triggers for Backdoor Attack: Examining the Vulnerability in Language Modelscited by 87
- 2024Detoxifying Large Language Models via Knowledge Editingcited by 86
- 2019ACUTE-EVAL: Improved Dialogue Evaluation with Optimized Questions and Multi-turn Comparisonscited by 83
- 2023A Bibliometric Review of Large Language Models Research from 2017 to 2023cited by 56
- 2024Unveiling the Generalization Power of Fine-Tuned Large Language Modelscited by 35
- 2021Improving Paraphrase Detection with the Adversarial Paraphrasing Taskcited by 19
- 2021Thinking Clearly, Talking Fast: Concept-Guided Non-Autoregressive Generation for Open-Domain Dialogue Systemscited by 17
- 2022PCC: Paraphrasing with Bottom-k Sampling and Cyclic Learning for Curriculum Data Augmentationcited by 14
- 2018Generating Multiple Diverse Responses for Short-Text Conversationcited by 13
- 2021Learning to Predict Persona Information forDialogue Personalization without Explicit Persona Descriptioncited by 12
- 2023Not All Metrics Are Guilty: Improving NLG Evaluation by Diversifying Referencescited by 11
- 2024Potential and Challenges of Model Editing for Social Debiasingcited by 10
- 2024Stephanie: Step-by-Step Dialogues for Mimicking Human Interactions in Social Conversationscited by 5
Built on by
Citing papers per year: 2025: 1.
1 paper.
Similar, not cited
Close in wording, no citation either way
- 2024Antidote: Post-fine-tuning Safety Alignment for Large Language Models against Harmful Fine-tuning
- 2023Red-Teaming Large Language Models using Chain of Utterances for Safety-Alignment
- 2026Characterising Toxicity in Generative Large Language Models
- 2025ToxSearch: Evolving Prompts for Toxicity Search in Large Language Models
- 2023On the Safety of Open-Sourced Large Language Models: Does Alignment Really Prevent Them From Being Misused?
- 2024Emulated Disalignment: Safety Alignment for Large Language Models May Backfire!
- 2025Refining Positive and Toxic Samples for Dual Safety Self-Alignment of LLMs with Minimal Human Interventions
- 2025Risk-Averse Finetuning of Large Language Models