mlsanityData to 14 Oct 2026

Enhancing LLM Safety Through a Theoretical Minimax Game Lens

arXiv 2502.05163 ↗First posted 7 Feb 2025cs.CL cs.LGcited by 19

On the map: LLM safety and security → Safety alignment, refusal and guardrails

Abstract (arXiv)

The rapid advancement of large language models (LLMs) necessitates effective mechanisms to ensure their responsible deployment by accurately distinguishing unsafe content from benign content. While substantial safety datasets are available in English, multilingual safety modeling remains underexplored due to limited open-source safety datasets in other languages. Even within English datasets, safe yet sensitive corner-case content is scarce, leading to shortcut learning by models and non-trivial false-positive rates. To mitigate these issues, we introduce a novel minimax reinforcement learning (RL) framework wherein a data generator and a classifier model co-evolve, facilitating the production of high-quality synthetic multilingual safety data. We theoretically formalize this interaction as a minimax game and rigorously demonstrate convergence to a Nash equilibrium. Empirical evaluations confirm that our synthetic data generation method significantly enhances the classifier model performance, enabling a substantially smaller model to surpass the state-of-the-art by nearly 10% on English benchmarks while achieving 4.5x faster inference speed. These results establish a scalable and efficient methodology for synthetic data generation, advancing the development of safer and more robust multilingual LLM deployments.

Key facts. Cited by 19 papers in the map (data through 14 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 52 of its 72 references that are in the map. First posted on arXiv 7 Feb 2025.

Builds on

52 of 72 references.

Closest ancestors · 6

Same direction, newest first

  1. 2024Benchmarking LLM Guardrails in Handling Multilingual Toxicity29 Oct
  2. 2024The Multilingual Alignment Prism: Aligning Global and Local Preferences to Reduce Harm26 Jun
  3. 2024WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMs26 Jun
  4. 2024Building Guardrails for Large Language Models2 Feb
  5. 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!5 Oct
  6. 2023All Languages Matter: On the Multilingual Safety of Large Language Models2 Oct

Other references · 46

  1. 2022Training language models to follow instructions with human feedbackcited by 15,971
  2. 2017Proximal Policy Optimization Algorithmscited by 15,215
  3. 2024The Llama 3 Herd of Modelscited by 14,715
  4. 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
  5. 2024DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Modelscited by 9,379
  6. 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
  7. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
  8. 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,651
  9. 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,207
  10. 2023A General Theoretical Paradigm to Understand Learning from Human Preferencescited by 912
  11. 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Datasetcited by 860
  12. 2015Improving Neural Machine Translation Models with Monolingual Datacited by 788
34 more
  1. 2024Self-Play Fine-Tuning Converts Weak Language Models to Strong Language Modelscited by 557
  2. 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 505
  3. 2024RewardBench: Evaluating Reward Models for Language Modelingcited by 499
  4. 2023LMSYS-Chat-1M: A Large-Scale Real-World LLM Conversation Datasetcited by 461
  5. 2023A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Uglycited by 387
  6. 2022A Holistic Approach to Undesired Content Detection in the Real Worldcited by 356
  7. 2024RLHF Workflow: From Reward Modeling to Online RLHFcited by 267
  8. 2024ShieldGemma: Generative AI Content Moderation Based on Gemmacited by 243
  9. 2023Multilingual Jailbreak Challenges in Large Language Modelscited by 240
  10. 2024SORRY-Bench: Systematically Evaluating Large Language Model Safety Refusalcited by 240
  11. 2024Self-Play Preference Optimization for Language Model Alignmentcited by 232
  12. 2023ToxicChat: Unveiling Hidden Challenges of Toxicity Detection in Real-World User-AI Conversationcited by 231
  13. 2024SALAD-Bench: A Hierarchical and Comprehensive Safety Benchmark for Large Language Modelscited by 228
  14. 2023Nash Learning from Human Feedbackcited by 224
  15. 2024WildTeaming at Scale: From In-the-Wild Jailbreaks to (Adversarially) Safer Language Modelscited by 223
  16. 2024V-STaR: Training Verifiers for Self-Taught Reasonerscited by 217
  17. 2024A Minimaximalist Approach to Reinforcement Learning from Human Feedbackcited by 144
  18. 2024AEGIS: Online Adaptive AI Content Safety Moderation with Ensemble of LLM Expertscited by 136
  19. 2024Aya 23: Open Weight Releases to Further Multilingual Progresscited by 123
  20. 2024The Language Barrier: Dissecting Safety Challenges of LLMs in Multilingual Contextscited by 94
  21. 2024Self-playing Adversarial Language Game Enhances LLM Reasoningcited by 83
  22. 2019Tagged Back-Translationcited by 77
  23. 2022Multilingual HateCheck: Functional Tests for Multilingual Hate Speech Detection Modelscited by 51
  24. 2024RTP-LX: Can LLMs Evaluate Toxicity in Multilingual Scenarios?cited by 36
  25. 2024Coevolving with the Other You: Fine-Tuning LLM with Sequential Cooperative Multi-Agent Reinforcement Learningcited by 33
  26. 2024Language Imbalance Driven Rewarding for Multilingual Self-improvingcited by 28
  27. 2024PolygloToxicityPrompts: Multilingual Evaluation of Neural Toxic Degeneration in Large Language Modelscited by 20
  28. 2021Meta Back-translationcited by 16
  29. 2024Reflect-RL: Two-Player Online RL Fine-Tuning for LMscited by 13
  30. 2021Back-translation for Large-Scale Multilingual Machine Translationcited by 11
  31. 2023Multilingual Content Moderation: A Case Study on Redditcited by 8
  32. 2021Data Augmentation for Text Generation Without Any Augmented Datacited by 4
  33. 2023On Synthetic Data for Back Translationcited by 4
  34. 2024Dynamic Normativity: Necessary and Sufficient Conditions for Value Alignmentcited by 3

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 15; 2026: 4.

19 papers.

Sort:

By area:

  1. 2025Qwen3Guard Technical Reportcited by 155
  2. 2025PolyGuard: A Multilingual Safety Moderation Tool for 17 Languagescited by 59
  3. 2025Search Self-play: Pushing the Frontier of Agent Capability without Supervisioncited by 34
  4. 2025CultureGuard: Towards Culturally-Aware Dataset and Guard Model for Multilingual Safety Applicationscited by 27
  5. 2025Revisiting Backdoor Attacks on LLMs: A Stealthy and Practical Poisoning Framework via Harmless Inputscited by 10
  6. 2025MrGuard: A Multilingual Reasoning Guardrail for Universal LLM Safetycited by 9
  7. 2025OMNIGUARD: An Efficient Approach for AI Safety Moderation Across Languages and Modalitiescited by 7
  8. 2025LionGuard 2: Building Lightweight, Data-Efficient & Localised Multilingual Content Moderatorscited by 7
  9. 2025Evaluating the Robustness of Large Language Model Safety Guardrails Against Adversarial Attackscited by 5
  10. 2025JavelinGuard: Low-Cost Transformer Architectures for LLM Securitycited by 4
  11. 2026Trust The Typicalcited by 3
  12. 2025Beyond No: Quantifying AI Over-Refusal and Emotional Attachment Boundariescited by 2
7 more
  1. 2025Lost in Localization: Building RabakBench with Human-in-the-Loop Validation to Measure Multilingual Safety Gapscited by 2
  2. 2026Benchmarking Open-Source Safety Guard Models: A Comprehensive Evaluationcited by 2
  3. 2025RedTopic: Toward Topic-Diverse Red Teaming of Large Language Modelscited by 1
  4. 2025The Problem with Safety Classification is not just the Modelscited by 1
  5. 2026A Lightweight Explainable Guardrail for Prompt Safetycited by 1
  6. 2025Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFTcited by 0
  7. 2026AI Alignment through a Game-theoretic Lens: A Surveycited by 0

Similar, not cited

Close in wording, no citation either way

  1. 2025The State of Multilingual LLM Safety Research: From Measuring the Language Gap to Mitigating It
  2. 2024Large Language Model Safety: A Holistic Survey
  3. 2024S-Eval: Towards Automated and Comprehensive Safety Evaluation for Large Language Models
  4. 2024CodeAttack: Revealing Safety Generalization Challenges of Large Language Models via Code Completion
  5. 2026Yuvion LLM: An Adversarially-Aware Large Language Model for Content And AI Safety
  6. 2025Toxicity Red-Teaming: Benchmarking LLM Safety in Singapore's Low-Resource Languages
  7. 2026BabelSafe: A Policy-Grounded Multilingual Safety Benchmark for LLMs
  8. 2024SafetyPrompts: a Systematic Review of Open Datasets for Evaluating and Improving Large Language Model Safety