DIESEL -- Dynamic Inference-Guidance via Evasion of Semantic Embeddings in LLMs
Not on the map. Why?
Abstract (arXiv)
In recent years, large language models (LLMs) have had great success in tasks such as casual conversation, contributing to significant advancements in domains like virtual assistance. However, they often generate responses that are not aligned with human values (e.g., ethical standards, safety), leading to potentially unsafe or inappropriate outputs. While several techniques have been proposed to address this problem, they come with a cost, requiring computationally expensive training or dramatically increasing the inference time. In this paper, we present DIESEL, a lightweight inference-guidance technique that can be seamlessly integrated into any autoregressive LLM to semantically filter undesired concepts from the response. DIESEL can function either as a standalone safeguard or as an additional layer of defense, enhancing response safety by reranking the LLM's proposed tokens based on their similarity to predefined negative concepts in the latent space. Our evaluation demonstrates DIESEL's effectiveness on state-of-the-art conversational models, even in adversarial jailbreaking scenarios that challenge response safety. We also highlight DIESEL's generalization capabilities, showing that it can be used in use cases other than safety, providing general-purpose response filtering.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 32 of its 47 references that are in the map. First posted on arXiv 28 Nov 2024.
Builds on
32 of 47 references.
References · 32
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2020Measuring Massive Multitask Language Understandingcited by 7,963
- 2016SQuAD: 100,000+ Questions for Machine Comprehension of Textcited by 4,148
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 3,050
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
- 2019XLNet: Generalized Autoregressive Pretraining for Language Understandingcited by 2,811
- 2020MiniLM: Deep Self-Attention Distillation for Task-Agnostic Compression of Pre-Trained Transformerscited by 1,463
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,255
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,207
- 2021Ethical and social risks of harm from Language Modelscited by 966
20 more
- 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Datasetcited by 860
- 2023Open Problems and Fundamental Limitations of Reinforcement Learning from Human Feedbackcited by 759
- 2019Universal Adversarial Triggers for Attacking and Analyzing NLPcited by 722
- 2023AGIEval: A Human-Centric Benchmark for Evaluating Foundation Modelscited by 716
- 2023Baseline Defenses for Adversarial Attacks Against Aligned Language Modelscited by 651
- 2023Jailbreaking ChatGPT via Prompt Engineering: An Empirical Studycited by 498
- 2024Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attackscited by 486
- 2023SmoothLLM: Defending Large Language Models Against Jailbreaking Attackscited by 469
- 2023Detecting Language Model Attacks with Perplexitycited by 431
- 2023Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrationscited by 431
- 2023DeepInception: Hypnotize Large Language Model to Be Jailbreakercited by 367
- 2024SafeDecoding: Defending against Jailbreak Attacks via Safety-Aware Decodingcited by 247
- 2023LLM Self Defense: By Self Examination, LLMs Know They Are Being Trickedcited by 244
- 2024Jailbreak Attacks and Defenses Against Large Language Models: A Surveycited by 230
- 2023RAIN: Your Language Models Can Align Themselves without Finetuningcited by 157
- 2024Attacks, Defenses and Evaluations for LLM Conversation Safety: A Surveycited by 130
- 2024JailbreakRadar: Comprehensive Assessment of Jailbreak Attacks Against LLMscited by 95
- 2022On Decoding Strategies for Neural Text Generatorscited by 90
- 2024The Multilingual Alignment Prism: Aligning Global and Local Preferences to Reduce Harmcited by 70
- 2023Robust Safety Classifier for Large Language Models: Adversarial Prompt Shieldcited by 25
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2025Refining Input Guardrails: Enhancing LLM-as-a-Judge Efficiency Through Chain-of-Thought Fine-Tuning and Alignment
- 2024Does Safety Training of LLMs Generalize to Semantically Related Natural Prompts?
- 2025A Survey on Post-training of Large Language Models
- 2025LLM Inference Enhanced by External Knowledge: A Survey
- 2025Towards Sustainable NLP: Insights from Benchmarking Inference Energy in Large Language Models
- 2024SelfPrompt: Autonomously Evaluating LLM Robustness via Domain-Constrained Knowledge Guidelines and Refined Adversarial Prompts
- 2024Evaluating Very Long-Term Conversational Memory of LLM Agents
- 2025Learning to Extract Context for Context-Aware LLM Inference