Enhancing LLM Safety Through a Theoretical Minimax Game Lens
On the map: LLM safety and security → Safety alignment, refusal and guardrails
Abstract (arXiv)
The rapid advancement of large language models (LLMs) necessitates effective mechanisms to ensure their responsible deployment by accurately distinguishing unsafe content from benign content. While substantial safety datasets are available in English, multilingual safety modeling remains underexplored due to limited open-source safety datasets in other languages. Even within English datasets, safe yet sensitive corner-case content is scarce, leading to shortcut learning by models and non-trivial false-positive rates. To mitigate these issues, we introduce a novel minimax reinforcement learning (RL) framework wherein a data generator and a classifier model co-evolve, facilitating the production of high-quality synthetic multilingual safety data. We theoretically formalize this interaction as a minimax game and rigorously demonstrate convergence to a Nash equilibrium. Empirical evaluations confirm that our synthetic data generation method significantly enhances the classifier model performance, enabling a substantially smaller model to surpass the state-of-the-art by nearly 10% on English benchmarks while achieving 4.5x faster inference speed. These results establish a scalable and efficient methodology for synthetic data generation, advancing the development of safer and more robust multilingual LLM deployments.
Key facts. Cited by 19 papers in the map (data through 14 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 52 of its 72 references that are in the map. First posted on arXiv 7 Feb 2025.
Builds on
52 of 72 references.
Closest ancestors · 6
Same direction, newest first
- 2024Benchmarking LLM Guardrails in Handling Multilingual Toxicity29 Oct
- 2024The Multilingual Alignment Prism: Aligning Global and Local Preferences to Reduce Harm26 Jun
- 2024WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMs26 Jun
- 2024Building Guardrails for Large Language Models2 Feb
- 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!5 Oct
- 2023All Languages Matter: On the Multilingual Safety of Large Language Models2 Oct
Other references · 46
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2017Proximal Policy Optimization Algorithmscited by 15,215
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2024DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Modelscited by 9,379
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
- 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,651
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,207
- 2023A General Theoretical Paradigm to Understand Learning from Human Preferencescited by 912
- 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Datasetcited by 860
- 2015Improving Neural Machine Translation Models with Monolingual Datacited by 788
34 more
- 2024Self-Play Fine-Tuning Converts Weak Language Models to Strong Language Modelscited by 557
- 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 505
- 2024RewardBench: Evaluating Reward Models for Language Modelingcited by 499
- 2023LMSYS-Chat-1M: A Large-Scale Real-World LLM Conversation Datasetcited by 461
- 2023A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Uglycited by 387
- 2022A Holistic Approach to Undesired Content Detection in the Real Worldcited by 356
- 2024RLHF Workflow: From Reward Modeling to Online RLHFcited by 267
- 2024ShieldGemma: Generative AI Content Moderation Based on Gemmacited by 243
- 2023Multilingual Jailbreak Challenges in Large Language Modelscited by 240
- 2024SORRY-Bench: Systematically Evaluating Large Language Model Safety Refusalcited by 240
- 2024Self-Play Preference Optimization for Language Model Alignmentcited by 232
- 2023ToxicChat: Unveiling Hidden Challenges of Toxicity Detection in Real-World User-AI Conversationcited by 231
- 2024SALAD-Bench: A Hierarchical and Comprehensive Safety Benchmark for Large Language Modelscited by 228
- 2023Nash Learning from Human Feedbackcited by 224
- 2024WildTeaming at Scale: From In-the-Wild Jailbreaks to (Adversarially) Safer Language Modelscited by 223
- 2024V-STaR: Training Verifiers for Self-Taught Reasonerscited by 217
- 2024A Minimaximalist Approach to Reinforcement Learning from Human Feedbackcited by 144
- 2024AEGIS: Online Adaptive AI Content Safety Moderation with Ensemble of LLM Expertscited by 136
- 2024Aya 23: Open Weight Releases to Further Multilingual Progresscited by 123
- 2024The Language Barrier: Dissecting Safety Challenges of LLMs in Multilingual Contextscited by 94
- 2024Self-playing Adversarial Language Game Enhances LLM Reasoningcited by 83
- 2019Tagged Back-Translationcited by 77
- 2022Multilingual HateCheck: Functional Tests for Multilingual Hate Speech Detection Modelscited by 51
- 2024RTP-LX: Can LLMs Evaluate Toxicity in Multilingual Scenarios?cited by 36
- 2024Coevolving with the Other You: Fine-Tuning LLM with Sequential Cooperative Multi-Agent Reinforcement Learningcited by 33
- 2024Language Imbalance Driven Rewarding for Multilingual Self-improvingcited by 28
- 2024PolygloToxicityPrompts: Multilingual Evaluation of Neural Toxic Degeneration in Large Language Modelscited by 20
- 2021Meta Back-translationcited by 16
- 2024Reflect-RL: Two-Player Online RL Fine-Tuning for LMscited by 13
- 2021Back-translation for Large-Scale Multilingual Machine Translationcited by 11
- 2023Multilingual Content Moderation: A Case Study on Redditcited by 8
- 2021Data Augmentation for Text Generation Without Any Augmented Datacited by 4
- 2023On Synthetic Data for Back Translationcited by 4
- 2024Dynamic Normativity: Necessary and Sufficient Conditions for Value Alignmentcited by 3
Built on by
Citing papers per year: 2025: 15; 2026: 4.
19 papers.
Sort:
By area:
- 2025Qwen3Guard Technical Reportcited by 155
- 2025PolyGuard: A Multilingual Safety Moderation Tool for 17 Languagescited by 59
- 2025Search Self-play: Pushing the Frontier of Agent Capability without Supervisioncited by 34
- 2025CultureGuard: Towards Culturally-Aware Dataset and Guard Model for Multilingual Safety Applicationscited by 27
- 2025Revisiting Backdoor Attacks on LLMs: A Stealthy and Practical Poisoning Framework via Harmless Inputscited by 10
- 2025MrGuard: A Multilingual Reasoning Guardrail for Universal LLM Safetycited by 9
- 2025OMNIGUARD: An Efficient Approach for AI Safety Moderation Across Languages and Modalitiescited by 7
- 2025LionGuard 2: Building Lightweight, Data-Efficient & Localised Multilingual Content Moderatorscited by 7
- 2025Evaluating the Robustness of Large Language Model Safety Guardrails Against Adversarial Attackscited by 5
- 2025JavelinGuard: Low-Cost Transformer Architectures for LLM Securitycited by 4
- 2026Trust The Typicalcited by 3
- 2025Beyond No: Quantifying AI Over-Refusal and Emotional Attachment Boundariescited by 2
7 more
- 2025Lost in Localization: Building RabakBench with Human-in-the-Loop Validation to Measure Multilingual Safety Gapscited by 2
- 2026Benchmarking Open-Source Safety Guard Models: A Comprehensive Evaluationcited by 2
- 2025RedTopic: Toward Topic-Diverse Red Teaming of Large Language Modelscited by 1
- 2025The Problem with Safety Classification is not just the Modelscited by 1
- 2026A Lightweight Explainable Guardrail for Prompt Safetycited by 1
- 2025Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFTcited by 0
- 2026AI Alignment through a Game-theoretic Lens: A Surveycited by 0
- 2026AI Alignment through a Game-theoretic Lens: A Survey28 Aug 2026
- 2026Benchmarking Open-Source Safety Guard Models: A Comprehensive Evaluation10 Apr 2026
- 2026Trust The Typical4 Feb 2026
- 2026A Lightweight Explainable Guardrail for Prompt Safety24 Jan 2026
- 2025Evaluating the Robustness of Large Language Model Safety Guardrails Against Adversarial Attacks27 Nov 2025
- 2025Search Self-play: Pushing the Frontier of Agent Capability without Supervision21 Oct 2025
- 2025Qwen3Guard Technical Report16 Oct 2025
- 2025Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT27 Sep 2025
- 2025CultureGuard: Towards Culturally-Aware Dataset and Guard Model for Multilingual Safety Applications3 Aug 2025
- 2025The Problem with Safety Classification is not just the Models29 Jul 2025
- 2025LionGuard 2: Building Lightweight, Data-Efficient & Localised Multilingual Content Moderators21 Jul 2025
- 2025Lost in Localization: Building RabakBench with Human-in-the-Loop Validation to Measure Multilingual Safety Gaps8 Jul 2025
7 more
- 2025RedTopic: Toward Topic-Diverse Red Teaming of Large Language Models17 Jun 2025
- 2025JavelinGuard: Low-Cost Transformer Architectures for LLM Security9 Jun 2025
- 2025OMNIGUARD: An Efficient Approach for AI Safety Moderation Across Languages and Modalities29 May 2025
- 2025Revisiting Backdoor Attacks on LLMs: A Stealthy and Practical Poisoning Framework via Harmless Inputs23 May 2025
- 2025MrGuard: A Multilingual Reasoning Guardrail for Universal LLM Safety21 Apr 2025
- 2025PolyGuard: A Multilingual Safety Moderation Tool for 17 Languages6 Apr 2025
- 2025Beyond No: Quantifying AI Over-Refusal and Emotional Attachment Boundaries20 Feb 2025
- 2025Qwen3Guard Technical Reportcited by 155
- 2025Revisiting Backdoor Attacks on LLMs: A Stealthy and Practical Poisoning Framework via Harmless Inputscited by 10
- 2025OMNIGUARD: An Efficient Approach for AI Safety Moderation Across Languages and Modalitiescited by 7
- 2025Evaluating the Robustness of Large Language Model Safety Guardrails Against Adversarial Attackscited by 5
- 2026Trust The Typicalcited by 3
- 2025Beyond No: Quantifying AI Over-Refusal and Emotional Attachment Boundariescited by 2
- 2025Lost in Localization: Building RabakBench with Human-in-the-Loop Validation to Measure Multilingual Safety Gapscited by 2
- 2025RedTopic: Toward Topic-Diverse Red Teaming of Large Language Modelscited by 1
- 2026A Lightweight Explainable Guardrail for Prompt Safetycited by 1
- 2025Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFTcited by 0
- 2026Trust The Typical4 Feb 2026
- 2026A Lightweight Explainable Guardrail for Prompt Safety24 Jan 2026
- 2025Evaluating the Robustness of Large Language Model Safety Guardrails Against Adversarial Attacks27 Nov 2025
- 2025Qwen3Guard Technical Report16 Oct 2025
- 2025Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT27 Sep 2025
- 2025Lost in Localization: Building RabakBench with Human-in-the-Loop Validation to Measure Multilingual Safety Gaps8 Jul 2025
- 2025RedTopic: Toward Topic-Diverse Red Teaming of Large Language Models17 Jun 2025
- 2025OMNIGUARD: An Efficient Approach for AI Safety Moderation Across Languages and Modalities29 May 2025
- 2025Revisiting Backdoor Attacks on LLMs: A Stealthy and Practical Poisoning Framework via Harmless Inputs23 May 2025
- 2025Beyond No: Quantifying AI Over-Refusal and Emotional Attachment Boundaries20 Feb 2025
- 2026AI Alignment through a Game-theoretic Lens: A Surveycited by 0
- 2026AI Alignment through a Game-theoretic Lens: A Survey28 Aug 2026
- 2025PolyGuard: A Multilingual Safety Moderation Tool for 17 Languagescited by 59
- 2025LionGuard 2: Building Lightweight, Data-Efficient & Localised Multilingual Content Moderatorscited by 7
- 2025JavelinGuard: Low-Cost Transformer Architectures for LLM Securitycited by 4
- 2026Benchmarking Open-Source Safety Guard Models: A Comprehensive Evaluationcited by 2
- 2025The Problem with Safety Classification is not just the Modelscited by 1
- 2026Benchmarking Open-Source Safety Guard Models: A Comprehensive Evaluation10 Apr 2026
- 2025The Problem with Safety Classification is not just the Models29 Jul 2025
- 2025LionGuard 2: Building Lightweight, Data-Efficient & Localised Multilingual Content Moderators21 Jul 2025
- 2025JavelinGuard: Low-Cost Transformer Architectures for LLM Security9 Jun 2025
- 2025PolyGuard: A Multilingual Safety Moderation Tool for 17 Languages6 Apr 2025
Similar, not cited
Close in wording, no citation either way
- 2025The State of Multilingual LLM Safety Research: From Measuring the Language Gap to Mitigating It
- 2024Large Language Model Safety: A Holistic Survey
- 2024S-Eval: Towards Automated and Comprehensive Safety Evaluation for Large Language Models
- 2024CodeAttack: Revealing Safety Generalization Challenges of Large Language Models via Code Completion
- 2026Yuvion LLM: An Adversarially-Aware Large Language Model for Content And AI Safety
- 2025Toxicity Red-Teaming: Benchmarking LLM Safety in Singapore's Low-Resource Languages
- 2026BabelSafe: A Policy-Grounded Multilingual Safety Benchmark for LLMs
- 2024SafetyPrompts: a Systematic Review of Open Datasets for Evaluating and Improving Large Language Model Safety