mlsanityData to 14 Oct 2026

Reducing the Scope of Language Models

arXiv 2410.21597 ↗First posted 28 Oct 2024cs.CL cs.AI cs.LGcited by 1

Not on the map. Why?

Abstract (arXiv)

Large language models (LLMs) are deployed in a wide variety of user-facing applications. Typically, these deployments have some specific purpose, like answering questions grounded on documentation or acting as coding assistants, but they require general language understanding. In such deployments, LLMs should respond only to queries that align with the intended purpose and reject all other requests, such as generating poetry or answering questions about physics, a task we refer to as `scoping'. We conduct a comprehensive empirical evaluation of various methods, ranging from prompting, fine-tuning to preference learning and the recently proposed general alignment technique known as Circuit Breakers (CB). Across three families of language models and a broad variety of tasks, we show that it is possible to scope language models. We examine scoping for multiple topics, and fine-grained topics. We ablate diversity of irrelevant queries, layer different techniques, conduct adversarial evaluations and more. Among other results, we find that when diverse examples of irrelevant queries are available, simple supervised fine-tuning produces the best results, but when such diversity is low, Circuit Breakers perform quite well. One can often get the benefits of both methods by layering them in succession. We intend our study to serve as a practitioner's guide to scoping LLMs.

Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Builds on 43 of its 59 references that are in the map. First posted on arXiv 28 Oct 2024.

Builds on

43 of 59 references.

References · 43

  1. 2014Adam: A Method for Stochastic Optimizationcited by 37,240
  2. 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,305
  3. 2022Training language models to follow instructions with human feedbackcited by 15,971
  4. 2024The Llama 3 Herd of Modelscited by 14,715
  5. 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
  6. 2021Training Verifiers to Solve Math Word Problemscited by 10,109
  7. 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,626
  8. 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
  9. 2017Deep reinforcement learning from human preferencescited by 3,912
  10. 2021Finetuned Language Models Are Zero-Shot Learnerscited by 3,780
  11. 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,720
  12. 2023Mistral 7Bcited by 3,164
31 more
  1. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
  2. 2022Constitutional AI: Harmlessness from AI Feedbackcited by 3,050
  3. 2020Learning to summarize from human feedbackcited by 2,588
  4. 2023Efficient Streaming Language Models with Attention Sinkscited by 2,186
  5. 2022Language Models (Mostly) Know What They Knowcited by 1,856
  6. 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,651
  7. 2020Don't Stop Pretraining: Adapt Language Models to Domains and Taskscited by 1,565
  8. 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,420
  9. 2019SciBERT: A Pretrained Language Model for Scientific Textcited by 1,414
  10. 2023Representation Engineering: A Top-Down Approach to AI Transparencycited by 1,336
  11. 2023BloombergGPT: A Large Language Model for Financecited by 939
  12. 2022Super-NaturalInstructions: Generalization via Declarative Instructions on 1600+ NLP Taskscited by 868
  13. 2023Large Language Models Can Be Easily Distracted by Irrelevant Contextcited by 841
  14. 2023StarCoder: may the source be with you!cited by 799
  15. 2021Cross-Task Generalization via Natural Language Crowdsourcing Instructionscited by 699
  16. 2023Tree of Attacks: Jailbreaking Black-Box LLMs Automaticallycited by 672
  17. 2024How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMscited by 573
  18. 2021Datasets: A Community Library for Natural Language Processingcited by 530
  19. 2024The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructionscited by 493
  20. 2018What you can cram into a single vector: Probing sentence embeddings for linguistic propertiescited by 457
  21. 2019What do you learn from context? Probing for sentence structure in contextualized word representationscited by 438
  22. 2023Making Retrieval-Augmented Language Models Robust to Irrelevant Contextcited by 369
  23. 2023Defending Large Language Models Against Jailbreaking Attacks Through Goal Prioritizationcited by 170
  24. 2024The Art of Saying No: Contextual Noncompliance in Language Modelscited by 105
  25. 2024Aligning to Thousands of Preferences via System Message Generalizationcited by 84
  26. 2023The Art of Defending: A Systematic Evaluation and Analysis of LLM Defense Strategies on Safety and Over-Defensivenesscited by 67
  27. 2024Rejection Improves Reliability: Training LLMs to Refuse Unknown Questions Using RL from Knowledge Feedbackcited by 66
  28. 2023The Curious Case of Hallucinatory (Un)answerability: Finding Truths in the Hidden States of Over-Confident Large Language Modelscited by 55
  29. 2024Can AI Assistants Know What They Don't Know?cited by 50
  30. 2024LAB: Large-Scale Alignment for ChatBotscited by 39
  31. 2023Learn to Refuse: Making Large Language Models More Controllable and Reliable through Knowledge Scope Limitation and Refusal Mechanismcited by 33

Built on by

Cited by year

Citing papers per year: 2025: 1.

1 paper.