mlsanityData to 7 Oct 2026

Refining Input Guardrails: Enhancing LLM-as-a-Judge Efficiency Through Chain-of-Thought Fine-Tuning and Alignment

arXiv 2501.13080 ↗First posted 22 Jan 2025cs.CL cs.CR cs.LGcited by 14

On the map: LLM reasoning → Reasoning for agents, planning and code

also in 1 more
Abstract (arXiv)

Large Language Models (LLMs) have demonstrated powerful capabilities that render them valuable in different applications, including conversational AI products. It is paramount to ensure the security and reliability of these products by mitigating their vulnerabilities towards malicious user interactions, which can lead to the exposure of great risks and reputational repercussions. In this work, we present a comprehensive study on the efficacy of fine-tuning and aligning Chain-of-Thought (CoT) responses of different LLMs that serve as input moderation guardrails. We systematically explore various tuning methods by leveraging a small set of training data to adapt these models as proxy defense mechanisms to detect malicious inputs and provide a reasoning for their verdicts, thereby preventing the exploitation of conversational agents. We rigorously evaluate the efficacy and robustness of different tuning strategies to generalize across diverse adversarial and malicious query types. Our experimental results outline the potential of alignment processes tailored to a varied range of harmful input queries, even with constrained data resources. These techniques significantly enhance the safety of conversational AI systems and provide a feasible framework for deploying more secure and trustworthy AI-driven interactions.

Key facts. Cited by 14 papers in the map (data through 7 Oct 2026). Placed in Reasoning for agents, planning and code, one of 17 directions in LLM reasoning. Builds on 44 of its 57 references that are in the map. First posted on arXiv 22 Jan 2025.

Builds on

44 of 57 references.

References · 44

  1. 2023GPT-4 Technical Reportcited by 18,132
  2. 2022Training language models to follow instructions with human feedbackcited by 15,712
  3. 2024The Llama 3 Herd of Modelscited by 14,192
  4. 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
  5. 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
  6. 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,393
  7. 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
  8. 2023Lost in the Middle: How Language Models Use Long Contextscited by 3,383
  9. 2023Mistral 7Bcited by 3,065
  10. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 2,914
  11. 2024Mixtral of Expertscited by 1,785
  12. 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,326
32 more
  1. 2023FActScore: Fine-grained Atomic Evaluation of Factual Precision in Long Form Text Generationcited by 1,259
  2. 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,124
  3. 2023SelfCheckGPT: Zero-Resource Black-Box Hallucination Detection for Generative Large Language Modelscited by 787
  4. 2023An Empirical Study of Catastrophic Forgetting in Large Language Models During Continual Fine-tuningcited by 622
  5. 2023Tree of Attacks: Jailbreaking Black-Box LLMs Automaticallycited by 619
  6. 2023The Falcon Series of Open Language Modelscited by 526
  7. 2023"Do Anything Now": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Modelscited by 457
  8. 2023Catastrophic Jailbreak of Open-source LLMs via Exploiting Generationcited by 439
  9. 2023Ragas: Automated Evaluation of Retrieval Augmented Generationcited by 408
  10. 2023Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrationscited by 401
  11. 2023NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Railscited by 347
  12. 2023DeepInception: Hypnotize Large Language Model to Be Jailbreakercited by 337
  13. 2023Hard Prompts Made Easy: Gradient-Based Discrete Optimization for Prompt Tuning and Discoverycited by 329
  14. 2024KTO: Model Alignment as Prospect Theoretic Optimizationcited by 256
  15. 2024Jailbreak Attacks and Defenses Against Large Language Models: A Surveycited by 215
  16. 2023Scalable and Transferable Black-Box Jailbreaks for Language Models via Persona Modulationcited by 202
  17. 2023"Kelly is a Warm Person, Joseph is a Role Model": Gender Biases in LLM-Generated Reference Letterscited by 196
  18. 2023Automatically Auditing Large Language Models via Discrete Optimizationcited by 187
  19. 2023Evaluating Correctness and Faithfulness of Instruction-Following Models for Question Answeringcited by 150
  20. 2024Automatic and Universal Prompt Injection Attacks against Large Language Modelscited by 112
  21. 2023AutoDAN: Interpretable Gradient-Based Adversarial Attacks on Large Language Modelscited by 102
  22. 2024A Comprehensive Study of Jailbreak Attack versus Defense for Large Language Modelscited by 95
  23. 2024A Complete Survey on LLM-based AI Chatbotscited by 71
  24. 2024Building Guardrails for Large Language Modelscited by 61
  25. 2024Analyzing and Reducing Catastrophic Forgetting in Parameter Efficient Tuningcited by 59
  26. 2024Injecting New Knowledge into Large Language Models via Supervised Fine-Tuningcited by 56
  27. 2024Securing Large Language Models: Threats, Vulnerabilities and Responsible Practicescited by 36
  28. 2024"You Gotta be a Doctor, Lin": An Investigation of Name-Based Bias of Large Language Models in Employment Recommendationscited by 33
  29. 2024Large Language Models Meet Text-Centric Multimodal Sentiment Analysis: A Surveycited by 16
  30. 2024Towards Faithful and Robust LLM Specialists for Evidence-Based Question-Answeringcited by 11
  31. 2024Optimization Techniques for Sentiment Analysis Based on LLM (GPT-3)cited by 7
  32. 2023Adding guardrails to advanced chatbotscited by 5

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2025: 12; 2026: 2.

14 papers.

Sort:

By area:

Similar, not cited

Close in wording, no citation either way

  1. 2025Revisiting Backdoor Attacks on LLMs: A Stealthy and Practical Poisoning Framework via Harmless Inputs
  2. 2023Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks
  3. 2025FalseReject: A Resource for Improving Contextual Safety and Mitigating Over-Refusals in LLMs via Structured Reasoning
  4. 2024Imposter.AI: Adversarial Attacks with Hidden Intentions towards Aligned Large Language Models
  5. 2024The Dark Side of Human Feedback: Poisoning Large Language Models via User Inputs
  6. 2024Fortifying Ethical Boundaries in AI: Advanced Strategies for Enhancing Security in Large Language Models
  7. 2025AprielGuard
  8. 2025The dark deep side of DeepSeek: Fine-tuning attacks against the safety alignment of CoT-enabled models