Equilibrate RLHF: Towards Balancing Helpfulness-Safety Trade-off in Large Language Models
On the map: LLM alignment / RLHF / preference optimisation → Safety alignment and jailbreak attacks
Abstract (arXiv)
Fine-tuning large language models (LLMs) based on human preferences, commonly achieved through reinforcement learning from human feedback (RLHF), has been effective in improving their performance. However, maintaining LLM safety throughout the fine-tuning process remains a significant challenge, as resolving conflicts between safety and helpfulness can be non-trivial. Typically, the safety alignment of LLM is trained on data with safety-related categories. However, our experiments find that naively increasing the scale of safety training data usually leads the LLMs to an ``overly safe'' state rather than a ``truly safe'' state, boosting the refusal rate through extensive safety-aligned data without genuinely understanding the requirements for safe responses. Such an approach can inadvertently diminish the models' helpfulness. To understand the phenomenon, we first investigate the role of safety data by categorizing them into three different groups, and observe that each group behaves differently as training data scales up. To boost the balance between safety and helpfulness, we propose an Equilibrate RLHF framework including a Fine-grained Data-centric (FDC) approach that achieves better safety alignment even with fewer training data, and an Adaptive Message-wise Alignment (AMA) approach, which selectively highlight the key segments through a gradient masking strategy. Extensive experimental results demonstrate that our approach significantly enhances the safety alignment of LLMs while balancing safety and helpfulness.
Key facts. Cited by 22 papers in the map (data through 7 Oct 2026). Placed in Safety alignment and jailbreak attacks, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 40 of its 58 references that are in the map. First posted on arXiv 17 Feb 2025.
Builds on
40 of 58 references.
Closest ancestors · 5
Same direction, newest first
- 2024Rule Based Rewards for Language Model Safety2 Nov
- 2023Safe RLHF: Safe Reinforcement Learning from Human Feedback19 Oct
- 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!5 Oct
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Models27 Jul
- 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Dataset10 Jul
Other references · 35
- 2023GPT-4 Technical Reportcited by 18,132
- 2017Proximal Policy Optimization Algorithmscited by 14,441
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2021Training Verifiers to Solve Math Word Problemscited by 9,743
- 2020Retrieval-Augmented Generation for Knowledge-Intensive NLP Taskscited by 9,160
- 2021Evaluating Large Language Models Trained on Codecited by 8,053
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2020Measuring Massive Multitask Language Understandingcited by 7,768
- 2018Think you have Solved Question Answering? Try ARC, the AI2 Reasoning Challengecited by 4,710
- 2019HellaSwag: Can a Machine Really Finish Your Sentence?cited by 4,018
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,634
- 2023Let's Verify Step by Stepcited by 3,598
23 more
- 2020Learning to summarize from human feedbackcited by 2,562
- 2016Making the V in VQA Matter: Elevating the Role of Image Understanding in Visual Question Answeringcited by 2,498
- 2015VQA: Visual Question Answeringcited by 2,489
- 2022Large Language Models Encode Clinical Knowledgecited by 1,807
- 2018CommonsenseQA: A Question Answering Challenge Targeting Commonsense Knowledgecited by 1,793
- 2022Challenging BIG-Bench Tasks and Whether Chain-of-Thought Can Solve Themcited by 1,767
- 2024DeepSeek-Coder: When the Large Language Model Meets Programming -- The Rise of Code Intelligencecited by 1,154
- 2021A General Language Assistant as a Laboratory for Alignmentcited by 1,023
- 2021Ethical and social risks of harm from Language Modelscited by 957
- 2023A General Theoretical Paradigm to Understand Learning from Human Preferencescited by 906
- 2017RACE: Large-scale ReAding Comprehension Dataset From Examinationscited by 851
- 2023C-Eval: A Multi-Level Multi-Discipline Chinese Evaluation Suite for Foundation Modelscited by 694
- 2024WildChat: 1M ChatGPT Interaction Logs in the Wildcited by 598
- 2023Catastrophic Jailbreak of Open-source LLMs via Exploiting Generationcited by 439
- 2023On the Planning Abilities of Large Language Models : A Critical Investigationcited by 308
- 2023Secrets of RLHF in Large Language Models Part I: PPOcited by 226
- 2023Macaw-LLM: Multi-Modal Language Modeling with Image, Audio, Video, and Text Integrationcited by 168
- 2023MART: Improving LLM Safety with Multi-round Automatic Red-Teamingcited by 161
- 2023HelpSteer: Multi-attribute Helpfulness Dataset for SteerLMcited by 140
- 2024Aligner: Efficient Alignment by Learning to Correctcited by 96
- 2019Investigating Prior Knowledge for Challenging Chinese Machine Reading Comprehensioncited by 80
- 2024Bi-Factorial Preference Optimization: Balancing Safety-Helpfulness in Language Modelscited by 27
- 2024RapGuard: Safeguarding Multimodal Large Language Models via Rationale-aware Defensive Promptingcited by 19
Built on by
Citing papers per year: 2025: 14; 2026: 8.
22 papers.
Sort:
By area:
- 2025Get Experience from Practice: LLM Agents with Record & Replaycited by 22
- 2025Pushing the Limits of Safety: A Technical Report on the ATLAS Challenge 2025cited by 11
- 2025USB: A Comprehensive and Unified Safety Evaluation Benchmark for Multimodal Large Language Modelscited by 10
- 2025LLLMs: A Data-Driven Survey of Evolving Research on Limitations of Large Language Modelscited by 9
- 2025Uni-DPO: A Unified Paradigm for Dynamic Preference Optimization of LLMscited by 9
- 2025SafeSearch: Do Not Trade Safety for Utility in LLM Search Agentscited by 9
- 2025Beyond Safe Answers: A Benchmark for Evaluating True Risk Awareness in Large Reasoning Modelscited by 7
- 2025MSR-Align: Policy-Grounded Multimodal Alignment for Safety-Aware Reasoning in Vision-Language Modelscited by 7
- 2025UnsafeChain: Enhancing Reasoning Model Safety via Hard Casescited by 7
- 2025Multiplayer Nash Preference Optimizationcited by 7
- 2025Reinforcement Learning from Human Feedback with High-Confidence Safety Constraintscited by 4
- 2025QuadSentinel: Sequent Safety for Machine-Checkable Control in Multi-agent Systemscited by 4
10 more
- 2025Beyond Prediction: Reinforcement Learning as the Defining Leap in Healthcare AIcited by 3
- 2026Robust Policy Optimization to Prevent Catastrophic Forgettingcited by 3
- 2025Ethics and Persuasion in Reinforcement Learning from Human Feedback: A Procedural Rhetorical Approachcited by 1
- 2026Benchmarking Knowledge-Extraction Attack and Defense on Retrieval-Augmented Generationcited by 1
- 2026Don't Make Models Guess Security and Safety: Symbolic Guardrails for Domain-Specific AI Agentscited by 1
- 2026Alignment Tuning for Large Language Models: A Data-Centric Lens on Alignment Data Pipelinescited by 1
- 2026Step-Level Preference Learning for Generative Agents in Social Simulationscited by 1
- 2026SaFeR-ToolKit: Structured Reasoning via Virtual Tool Calling for Multimodal Safetycited by 0
- 2026COMPASS: Cognitive MCTS-Guided Process Alignment for Safe Search Agentscited by 0
- 2026Learning to Ideate for Scientific Impactcited by 0
- 2026Learning to Ideate for Scientific Impact24 Sep 2026
- 2026Step-Level Preference Learning for Generative Agents in Social Simulations16 Jul 2026
- 2026COMPASS: Cognitive MCTS-Guided Process Alignment for Safe Search Agents29 May 2026
- 2026Don't Make Models Guess Security and Safety: Symbolic Guardrails for Domain-Specific AI Agents16 Apr 2026
- 2026Alignment Tuning for Large Language Models: A Data-Centric Lens on Alignment Data Pipelines7 Apr 2026
- 2026SaFeR-ToolKit: Structured Reasoning via Virtual Tool Calling for Multimodal Safety3 Mar 2026
- 2026Benchmarking Knowledge-Extraction Attack and Defense on Retrieval-Augmented Generation10 Feb 2026
- 2026Robust Policy Optimization to Prevent Catastrophic Forgetting9 Feb 2026
- 2025QuadSentinel: Sequent Safety for Machine-Checkable Control in Multi-agent Systems18 Dec 2025
- 2025SafeSearch: Do Not Trade Safety for Utility in LLM Search Agents19 Oct 2025
- 2025Multiplayer Nash Preference Optimization27 Sep 2025
- 2025Beyond Prediction: Reinforcement Learning as the Defining Leap in Healthcare AI28 Aug 2025
10 more
- 2025UnsafeChain: Enhancing Reasoning Model Safety via Hard Cases29 Jul 2025
- 2025MSR-Align: Policy-Grounded Multimodal Alignment for Safety-Aware Reasoning in Vision-Language Models24 Jun 2025
- 2025Pushing the Limits of Safety: A Technical Report on the ATLAS Challenge 202514 Jun 2025
- 2025Uni-DPO: A Unified Paradigm for Dynamic Preference Optimization of LLMs11 Jun 2025
- 2025Reinforcement Learning from Human Feedback with High-Confidence Safety Constraints9 Jun 2025
- 2025USB: A Comprehensive and Unified Safety Evaluation Benchmark for Multimodal Large Language Models26 May 2025
- 2025Beyond Safe Answers: A Benchmark for Evaluating True Risk Awareness in Large Reasoning Models26 May 2025
- 2025LLLMs: A Data-Driven Survey of Evolving Research on Limitations of Large Language Models25 May 2025
- 2025Get Experience from Practice: LLM Agents with Record & Replay23 May 2025
- 2025Ethics and Persuasion in Reinforcement Learning from Human Feedback: A Procedural Rhetorical Approach14 May 2025
- 2025Get Experience from Practice: LLM Agents with Record & Replaycited by 22
- 2025SafeSearch: Do Not Trade Safety for Utility in LLM Search Agentscited by 9
- 2025QuadSentinel: Sequent Safety for Machine-Checkable Control in Multi-agent Systemscited by 4
- 2026Step-Level Preference Learning for Generative Agents in Social Simulationscited by 1
- 2026COMPASS: Cognitive MCTS-Guided Process Alignment for Safe Search Agentscited by 0
- 2026Step-Level Preference Learning for Generative Agents in Social Simulations16 Jul 2026
- 2026COMPASS: Cognitive MCTS-Guided Process Alignment for Safe Search Agents29 May 2026
- 2025QuadSentinel: Sequent Safety for Machine-Checkable Control in Multi-agent Systems18 Dec 2025
- 2025SafeSearch: Do Not Trade Safety for Utility in LLM Search Agents19 Oct 2025
- 2025Get Experience from Practice: LLM Agents with Record & Replay23 May 2025
- 2025Uni-DPO: A Unified Paradigm for Dynamic Preference Optimization of LLMscited by 9
- 2025Multiplayer Nash Preference Optimizationcited by 7
- 2025Reinforcement Learning from Human Feedback with High-Confidence Safety Constraintscited by 4
- 2026Robust Policy Optimization to Prevent Catastrophic Forgettingcited by 3
- 2025Ethics and Persuasion in Reinforcement Learning from Human Feedback: A Procedural Rhetorical Approachcited by 1
- 2026Robust Policy Optimization to Prevent Catastrophic Forgetting9 Feb 2026
- 2025Multiplayer Nash Preference Optimization27 Sep 2025
- 2025Uni-DPO: A Unified Paradigm for Dynamic Preference Optimization of LLMs11 Jun 2025
- 2025Reinforcement Learning from Human Feedback with High-Confidence Safety Constraints9 Jun 2025
- 2025Ethics and Persuasion in Reinforcement Learning from Human Feedback: A Procedural Rhetorical Approach14 May 2025
- 2025Beyond Safe Answers: A Benchmark for Evaluating True Risk Awareness in Large Reasoning Modelscited by 7
- 2025MSR-Align: Policy-Grounded Multimodal Alignment for Safety-Aware Reasoning in Vision-Language Modelscited by 7
- 2025UnsafeChain: Enhancing Reasoning Model Safety via Hard Casescited by 7
- 2026SaFeR-ToolKit: Structured Reasoning via Virtual Tool Calling for Multimodal Safetycited by 0
- 2026SaFeR-ToolKit: Structured Reasoning via Virtual Tool Calling for Multimodal Safety3 Mar 2026
- 2025UnsafeChain: Enhancing Reasoning Model Safety via Hard Cases29 Jul 2025
- 2025MSR-Align: Policy-Grounded Multimodal Alignment for Safety-Aware Reasoning in Vision-Language Models24 Jun 2025
- 2025Beyond Safe Answers: A Benchmark for Evaluating True Risk Awareness in Large Reasoning Models26 May 2025
- 2025LLLMs: A Data-Driven Survey of Evolving Research on Limitations of Large Language Modelscited by 9
- 2025Beyond Prediction: Reinforcement Learning as the Defining Leap in Healthcare AIcited by 3
- 2026Alignment Tuning for Large Language Models: A Data-Centric Lens on Alignment Data Pipelinescited by 1
- 2026Learning to Ideate for Scientific Impactcited by 0
- 2026Learning to Ideate for Scientific Impact24 Sep 2026
- 2026Alignment Tuning for Large Language Models: A Data-Centric Lens on Alignment Data Pipelines7 Apr 2026
- 2025Beyond Prediction: Reinforcement Learning as the Defining Leap in Healthcare AI28 Aug 2025
- 2025LLLMs: A Data-Driven Survey of Evolving Research on Limitations of Large Language Models25 May 2025
Similar, not cited
Close in wording, no citation either way
- 2024Evaluating Defences against Unsafe Feedback in RLHF
- 2024Enhancing Safety in Reinforcement Learning with Human Feedback via Rectified Policy Optimization
- 2025Safe RLHF-V: Safe Reinforcement Learning from Multi-modal Human Feedback
- 2025SafeDPO: A Simple Approach to Direct Preference Optimization with Enhanced Safety
- 2025Data-adaptive Safety Rules for Training Reward Models
- 2024One-Shot Safety Alignment for Large Language Models via Optimal Dualization
- 2024Safe to Serve: Aligning Instruction-Tuned Models for Safety and Helpfulness
- 2025Breaking the Safety-Capability Tradeoff: Reinforcement Learning with Verifiable Rewards Maintains Safety Guardrails in LLMs