Refining Input Guardrails: Enhancing LLM-as-a-Judge Efficiency Through Chain-of-Thought Fine-Tuning and Alignment
On the map: LLM reasoning → Reasoning for agents, planning and code
also in 1 more
Abstract (arXiv)
Large Language Models (LLMs) have demonstrated powerful capabilities that render them valuable in different applications, including conversational AI products. It is paramount to ensure the security and reliability of these products by mitigating their vulnerabilities towards malicious user interactions, which can lead to the exposure of great risks and reputational repercussions. In this work, we present a comprehensive study on the efficacy of fine-tuning and aligning Chain-of-Thought (CoT) responses of different LLMs that serve as input moderation guardrails. We systematically explore various tuning methods by leveraging a small set of training data to adapt these models as proxy defense mechanisms to detect malicious inputs and provide a reasoning for their verdicts, thereby preventing the exploitation of conversational agents. We rigorously evaluate the efficacy and robustness of different tuning strategies to generalize across diverse adversarial and malicious query types. Our experimental results outline the potential of alignment processes tailored to a varied range of harmful input queries, even with constrained data resources. These techniques significantly enhance the safety of conversational AI systems and provide a feasible framework for deploying more secure and trustworthy AI-driven interactions.
Key facts. Cited by 14 papers in the map (data through 7 Oct 2026). Placed in Reasoning for agents, planning and code, one of 17 directions in LLM reasoning. Builds on 44 of its 57 references that are in the map. First posted on arXiv 22 Jan 2025.
Builds on
44 of 57 references.
References · 44
- 2023GPT-4 Technical Reportcited by 18,132
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2024The Llama 3 Herd of Modelscited by 14,192
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,393
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2023Lost in the Middle: How Language Models Use Long Contextscited by 3,383
- 2023Mistral 7Bcited by 3,065
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 2,914
- 2024Mixtral of Expertscited by 1,785
- 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,326
32 more
- 2023FActScore: Fine-grained Atomic Evaluation of Factual Precision in Long Form Text Generationcited by 1,259
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,124
- 2023SelfCheckGPT: Zero-Resource Black-Box Hallucination Detection for Generative Large Language Modelscited by 787
- 2023An Empirical Study of Catastrophic Forgetting in Large Language Models During Continual Fine-tuningcited by 622
- 2023Tree of Attacks: Jailbreaking Black-Box LLMs Automaticallycited by 619
- 2023The Falcon Series of Open Language Modelscited by 526
- 2023"Do Anything Now": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Modelscited by 457
- 2023Catastrophic Jailbreak of Open-source LLMs via Exploiting Generationcited by 439
- 2023Ragas: Automated Evaluation of Retrieval Augmented Generationcited by 408
- 2023Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrationscited by 401
- 2023NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Railscited by 347
- 2023DeepInception: Hypnotize Large Language Model to Be Jailbreakercited by 337
- 2023Hard Prompts Made Easy: Gradient-Based Discrete Optimization for Prompt Tuning and Discoverycited by 329
- 2024KTO: Model Alignment as Prospect Theoretic Optimizationcited by 256
- 2024Jailbreak Attacks and Defenses Against Large Language Models: A Surveycited by 215
- 2023Scalable and Transferable Black-Box Jailbreaks for Language Models via Persona Modulationcited by 202
- 2023"Kelly is a Warm Person, Joseph is a Role Model": Gender Biases in LLM-Generated Reference Letterscited by 196
- 2023Automatically Auditing Large Language Models via Discrete Optimizationcited by 187
- 2023Evaluating Correctness and Faithfulness of Instruction-Following Models for Question Answeringcited by 150
- 2024Automatic and Universal Prompt Injection Attacks against Large Language Modelscited by 112
- 2023AutoDAN: Interpretable Gradient-Based Adversarial Attacks on Large Language Modelscited by 102
- 2024A Comprehensive Study of Jailbreak Attack versus Defense for Large Language Modelscited by 95
- 2024A Complete Survey on LLM-based AI Chatbotscited by 71
- 2024Building Guardrails for Large Language Modelscited by 61
- 2024Analyzing and Reducing Catastrophic Forgetting in Parameter Efficient Tuningcited by 59
- 2024Injecting New Knowledge into Large Language Models via Supervised Fine-Tuningcited by 56
- 2024Securing Large Language Models: Threats, Vulnerabilities and Responsible Practicescited by 36
- 2024"You Gotta be a Doctor, Lin": An Investigation of Name-Based Bias of Large Language Models in Employment Recommendationscited by 33
- 2024Large Language Models Meet Text-Centric Multimodal Sentiment Analysis: A Surveycited by 16
- 2024Towards Faithful and Robust LLM Specialists for Evidence-Based Question-Answeringcited by 11
- 2024Optimization Techniques for Sentiment Analysis Based on LLM (GPT-3)cited by 7
- 2023Adding guardrails to advanced chatbotscited by 5
Built on by
Citing papers per year: 2025: 12; 2026: 2.
14 papers.
Sort:
By area:
- 2025Enforcing Temporal Constraints for LLM Agentscited by 31
- 2025SoK: Evaluating Jailbreak Guardrails for Large Language Modelscited by 17
- 2025A Survey on Agentic Security: Applications, Threats and Defensescited by 17
- 2025DynaGuard: A Dynamic Guardian Model With User-Defined Policiescited by 16
- 2025Building Safe GenAI Applications: An End-to-End Overview of Red Teaming for Large Language Modelscited by 11
- 2025No Free Lunch with Guardrailscited by 10
- 2025Interpretation Meets Safety: A Survey on Interpretation Methods and Tools for Improving LLM Safetycited by 10
- 2025Path Drift in Large Reasoning Models:How First-Person Commitments Override Safetycited by 5
- 2025From Refusal to Recovery: A Control-Theoretic Approach to Generative AI Guardrailscited by 1
- 2025Balancing Safety and Helpfulness in Healthcare AI Assistants through Iterative Preference Alignmentcited by 1
- 2025GRAID: Synthetic Data Generation with Geometric Constraints and Multi-Agentic Reflection for Harmful Content Detectioncited by 0
- 2025SMARTER: A Data-efficient Framework to Improve Toxicity Detection with Explanation via Self-augmenting Large Language Modelscited by 0
2 more
- 2026Validity-Aware Jailbreak Evaluation for Large Language Models31 Aug 2026
- 2026ART: Adaptive Reasoning Trees for Explainable Claim Verification9 Jan 2026
- 2025Enforcing Temporal Constraints for LLM Agents25 Dec 2025
- 2025Balancing Safety and Helpfulness in Healthcare AI Assistants through Iterative Preference Alignment3 Dec 2025
- 2025From Refusal to Recovery: A Control-Theoretic Approach to Generative AI Guardrails15 Oct 2025
- 2025Path Drift in Large Reasoning Models:How First-Person Commitments Override Safety11 Oct 2025
- 2025A Survey on Agentic Security: Applications, Threats and Defenses7 Oct 2025
- 2025SMARTER: A Data-efficient Framework to Improve Toxicity Detection with Explanation via Self-augmenting Large Language Models18 Sep 2025
- 2025DynaGuard: A Dynamic Guardian Model With User-Defined Policies2 Sep 2025
- 2025GRAID: Synthetic Data Generation with Geometric Constraints and Multi-Agentic Reflection for Harmful Content Detection23 Aug 2025
- 2025SoK: Evaluating Jailbreak Guardrails for Large Language Models12 Jun 2025
- 2025Interpretation Meets Safety: A Survey on Interpretation Methods and Tools for Improving LLM Safety5 Jun 2025
2 more
- 2025DynaGuard: A Dynamic Guardian Model With User-Defined Policiescited by 16
- 2025Building Safe GenAI Applications: An End-to-End Overview of Red Teaming for Large Language Modelscited by 11
- 2025No Free Lunch with Guardrailscited by 10
- 2025Interpretation Meets Safety: A Survey on Interpretation Methods and Tools for Improving LLM Safetycited by 10
- 2025From Refusal to Recovery: A Control-Theoretic Approach to Generative AI Guardrailscited by 1
- 2026Validity-Aware Jailbreak Evaluation for Large Language Modelscited by 0
- 2026Validity-Aware Jailbreak Evaluation for Large Language Models31 Aug 2026
- 2025From Refusal to Recovery: A Control-Theoretic Approach to Generative AI Guardrails15 Oct 2025
- 2025DynaGuard: A Dynamic Guardian Model With User-Defined Policies2 Sep 2025
- 2025Interpretation Meets Safety: A Survey on Interpretation Methods and Tools for Improving LLM Safety5 Jun 2025
- 2025No Free Lunch with Guardrails1 Apr 2025
- 2025Building Safe GenAI Applications: An End-to-End Overview of Red Teaming for Large Language Models3 Mar 2025
Similar, not cited
Close in wording, no citation either way
- 2025Revisiting Backdoor Attacks on LLMs: A Stealthy and Practical Poisoning Framework via Harmless Inputs
- 2023Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks
- 2025FalseReject: A Resource for Improving Contextual Safety and Mitigating Over-Refusals in LLMs via Structured Reasoning
- 2024Imposter.AI: Adversarial Attacks with Hidden Intentions towards Aligned Large Language Models
- 2024The Dark Side of Human Feedback: Poisoning Large Language Models via User Inputs
- 2024Fortifying Ethical Boundaries in AI: Advanced Strategies for Enhancing Security in Large Language Models
- 2025AprielGuard
- 2025The dark deep side of DeepSeek: Fine-tuning attacks against the safety alignment of CoT-enabled models