POROver: Improving Safety and Reducing Overrefusal in Large Language Models with Overgeneration and Preference Optimization
On the map: LLM alignment / RLHF / preference optimisation → Safety alignment and jailbreak attacks
Abstract (arXiv)
Achieving both high safety and high usefulness simultaneously in large language models has become a critical challenge in recent years.Models often exhibit unsafe behavior or adopt an overly cautious approach leading to frequent overrefusal of benign prompts, which reduces their usefulness. A major factor underlying these behaviors is how the models are finetuned and aligned, particularly the nature and extent of the data used.In this work, we examine how overgenerating finetuning data with advanced teacher models (e.g., GPT-4o)-covering both general-purpose and toxic prompts-affects safety and usefulness in instruction-following language models.Additionally, we present POROver, an alignment strategy designed for models that are highly safe but prone to overrefusal. POROver employs preference optimization algorithms and leverages completions from an advanced teacher model to reduce overrefusals while maintaining safety.Our results show that overgenerating completions for general-purpose prompts significantly boosts safety with only a minimal impact on usefulness. Specifically, the F1 score calculated between safety and usefulness increases from 74.4% to 91.8% because of a substantial rise in safety. Moreover, overgeneration for toxic prompts raises usefulness from 11.1% to 57.6% while preserving safety. Finally, applying POROVer increases usefulness further-from 57.6% to 82.1%-while keeping safety at comparable levels. Our data and code are available at https://github.com/batuhankmkaraman/POROver.
Key facts. Cited by 8 papers in the map (data through 14 Oct 2026). Placed in Safety alignment and jailbreak attacks, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 31 of its 43 references that are in the map. First posted on arXiv 16 Oct 2024.
Builds on
31 of 43 references.
Closest ancestors · 5
Same direction, newest first
- 2024OR-Bench: An Over-Refusal Benchmark for Large Language Models31 May
- 2024Don't Say No: Jailbreaking LLM by Suppressing Refusal25 Apr
- 2023Safe RLHF: Safe Reinforcement Learning from Human Feedback19 Oct
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Models27 Jul
- 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Dataset10 Jul
Other references · 26
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,626
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,720
- 2022Scaling Instruction-Finetuned Language Modelscited by 3,024
- 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,651
- 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,420
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,255
- 2021DeBERTaV3: Improving DeBERTa using ELECTRA-Style Pre-Training with Gradient-Disentangled Embedding Sharingcited by 1,254
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,207
- 2023LIMA: Less Is More for Alignmentcited by 1,100
- 2023AlpacaFarm: A Simulation Framework for Methods that Learn from Human Feedbackcited by 748
14 more
- 2024JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Modelscited by 536
- 2023DecodingTrust: A Comprehensive Assessment of Trustworthiness in GPT Modelscited by 518
- 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 505
- 2023Safety-Tuned LLaMAs: Lessons From Improving the Safety of Large Language Models that Follow Instructionscited by 387
- 2024Is DPO Superior to PPO for LLM Alignment? A Comprehensive Studycited by 262
- 2024Arithmetic Control of LLMs for Diverse User Preferences: Directional Preference Alignment with Multi-Objective Rewardscited by 148
- 2021Human-in-the-Loop for Data Collection: a Multi-Target Counter Narrative Dataset to Fight Online Hate Speechcited by 82
- 2024CodeAttack: Revealing Safety Generalization Challenges of Large Language Models via Code Completioncited by 76
- 2023Language Model Self-improvement by Reinforcement Learning Contemplationcited by 75
- 2024Refuse Whenever You Feel Unsafe: Improving Safety in LLMs via Decoupled Refusal Trainingcited by 69
- 2023TrustGPT: A Benchmark for Trustworthy and Responsible Large Language Modelscited by 58
- 2023All Languages Matter: On the Multilingual Safety of Large Language Modelscited by 53
- 2024Enhancing LLM Safety via Constrained Direct Preference Optimizationcited by 49
- 2023Specific versus General Principles for Constitutional AIcited by 47
Built on by
Citing papers per year: 2025: 4; 2026: 4.
8 papers.
- 2025ARMOR: Aligning Secure and Safe Large Language Models via Meticulous Reasoningcited by 8
- 2025AI Agent Behavioral Sciencecited by 6
- 2025SafeCoT: Improving VLM Safety with Minimal Reasoningcited by 3
- 2026Over-Refusal and Representation Subspaces: A Mechanistic Analysis of Task-Conditioned Refusal in Aligned LLMscited by 2
- 2026The Architecture of Errors: From Universal Impossibility to Patch-Local LLM Reliabilitycited by 1
- 2026Mitigating LLM Over-Refusal via Dynamic Semantic Routing Calibrationcited by 1
- 2025SafeConstellations: Mitigating Over-Refusals in LLMs Through Task-Aware Representation Steeringcited by 0
- 2026Gradient-Controlled Decoding: A Safety Guardrail for LLMs with Dual-Anchor Steeringcited by 0
- 2026Mitigating LLM Over-Refusal via Dynamic Semantic Routing Calibration6 Sep 2026
- 2026The Architecture of Errors: From Universal Impossibility to Patch-Local LLM Reliability28 May 2026
- 2026Gradient-Controlled Decoding: A Safety Guardrail for LLMs with Dual-Anchor Steering6 Apr 2026
- 2026Over-Refusal and Representation Subspaces: A Mechanistic Analysis of Task-Conditioned Refusal in Aligned LLMs29 Mar 2026
- 2025SafeConstellations: Mitigating Over-Refusals in LLMs Through Task-Aware Representation Steering15 Aug 2025
- 2025ARMOR: Aligning Secure and Safe Large Language Models via Meticulous Reasoning14 Jul 2025
- 2025SafeCoT: Improving VLM Safety with Minimal Reasoning10 Jun 2025
- 2025AI Agent Behavioral Science4 Jun 2025
Similar, not cited
Close in wording, no citation either way
- 2024Safe to Serve: Aligning Instruction-Tuned Models for Safety and Helpfulness
- 2025Understanding and Mitigating Overrefusal in LLMs from an Unveiling Perspective of Safety Decision Boundary
- 2025SafeMERGE: Preserving Safety Alignment in Fine-Tuned Large Language Models via Selective Layer-Wise Model Merging
- 2025Picky LLMs and Unreliable RMs: An Empirical Study on Safety Alignment after Instruction Tuning
- 2025Towards Alignment-Centric Paradigm: A Survey of Instruction Tuning in Large Language Models
- 2024Do as I do (Safely): Mitigating Task-Specific Fine-tuning Risks in Large Language Models
- 2024Towards Comprehensive Post Safety Alignment of Large Language Models via Safety Patching
- 2025Preventing Catastrophic Forgetting: Behavior-Aware Sampling for Safer Language Model Fine-Tuning