mlsanityData to 7 Oct 2026

Equilibrate RLHF: Towards Balancing Helpfulness-Safety Trade-off in Large Language Models

arXiv 2502.11555 ↗First posted 17 Feb 2025cs.AIcited by 22

On the map: LLM alignment / RLHF / preference optimisation → Safety alignment and jailbreak attacks

Abstract (arXiv)

Fine-tuning large language models (LLMs) based on human preferences, commonly achieved through reinforcement learning from human feedback (RLHF), has been effective in improving their performance. However, maintaining LLM safety throughout the fine-tuning process remains a significant challenge, as resolving conflicts between safety and helpfulness can be non-trivial. Typically, the safety alignment of LLM is trained on data with safety-related categories. However, our experiments find that naively increasing the scale of safety training data usually leads the LLMs to an ``overly safe'' state rather than a ``truly safe'' state, boosting the refusal rate through extensive safety-aligned data without genuinely understanding the requirements for safe responses. Such an approach can inadvertently diminish the models' helpfulness. To understand the phenomenon, we first investigate the role of safety data by categorizing them into three different groups, and observe that each group behaves differently as training data scales up. To boost the balance between safety and helpfulness, we propose an Equilibrate RLHF framework including a Fine-grained Data-centric (FDC) approach that achieves better safety alignment even with fewer training data, and an Adaptive Message-wise Alignment (AMA) approach, which selectively highlight the key segments through a gradient masking strategy. Extensive experimental results demonstrate that our approach significantly enhances the safety alignment of LLMs while balancing safety and helpfulness.

Key facts. Cited by 22 papers in the map (data through 7 Oct 2026). Placed in Safety alignment and jailbreak attacks, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 40 of its 58 references that are in the map. First posted on arXiv 17 Feb 2025.

Builds on

40 of 58 references.

Closest ancestors · 5

Same direction, newest first

  1. 2024Rule Based Rewards for Language Model Safety2 Nov
  2. 2023Safe RLHF: Safe Reinforcement Learning from Human Feedback19 Oct
  3. 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!5 Oct
  4. 2023Universal and Transferable Adversarial Attacks on Aligned Language Models27 Jul
  5. 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Dataset10 Jul

Other references · 35

  1. 2023GPT-4 Technical Reportcited by 18,132
  2. 2017Proximal Policy Optimization Algorithmscited by 14,441
  3. 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
  4. 2021Training Verifiers to Solve Math Word Problemscited by 9,743
  5. 2020Retrieval-Augmented Generation for Knowledge-Intensive NLP Taskscited by 9,160
  6. 2021Evaluating Large Language Models Trained on Codecited by 8,053
  7. 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
  8. 2020Measuring Massive Multitask Language Understandingcited by 7,768
  9. 2018Think you have Solved Question Answering? Try ARC, the AI2 Reasoning Challengecited by 4,710
  10. 2019HellaSwag: Can a Machine Really Finish Your Sentence?cited by 4,018
  11. 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,634
  12. 2023Let's Verify Step by Stepcited by 3,598
23 more
  1. 2020Learning to summarize from human feedbackcited by 2,562
  2. 2016Making the V in VQA Matter: Elevating the Role of Image Understanding in Visual Question Answeringcited by 2,498
  3. 2015VQA: Visual Question Answeringcited by 2,489
  4. 2022Large Language Models Encode Clinical Knowledgecited by 1,807
  5. 2018CommonsenseQA: A Question Answering Challenge Targeting Commonsense Knowledgecited by 1,793
  6. 2022Challenging BIG-Bench Tasks and Whether Chain-of-Thought Can Solve Themcited by 1,767
  7. 2024DeepSeek-Coder: When the Large Language Model Meets Programming -- The Rise of Code Intelligencecited by 1,154
  8. 2021A General Language Assistant as a Laboratory for Alignmentcited by 1,023
  9. 2021Ethical and social risks of harm from Language Modelscited by 957
  10. 2023A General Theoretical Paradigm to Understand Learning from Human Preferencescited by 906
  11. 2017RACE: Large-scale ReAding Comprehension Dataset From Examinationscited by 851
  12. 2023C-Eval: A Multi-Level Multi-Discipline Chinese Evaluation Suite for Foundation Modelscited by 694
  13. 2024WildChat: 1M ChatGPT Interaction Logs in the Wildcited by 598
  14. 2023Catastrophic Jailbreak of Open-source LLMs via Exploiting Generationcited by 439
  15. 2023On the Planning Abilities of Large Language Models : A Critical Investigationcited by 308
  16. 2023Secrets of RLHF in Large Language Models Part I: PPOcited by 226
  17. 2023Macaw-LLM: Multi-Modal Language Modeling with Image, Audio, Video, and Text Integrationcited by 168
  18. 2023MART: Improving LLM Safety with Multi-round Automatic Red-Teamingcited by 161
  19. 2023HelpSteer: Multi-attribute Helpfulness Dataset for SteerLMcited by 140
  20. 2024Aligner: Efficient Alignment by Learning to Correctcited by 96
  21. 2019Investigating Prior Knowledge for Challenging Chinese Machine Reading Comprehensioncited by 80
  22. 2024Bi-Factorial Preference Optimization: Balancing Safety-Helpfulness in Language Modelscited by 27
  23. 2024RapGuard: Safeguarding Multimodal Large Language Models via Rationale-aware Defensive Promptingcited by 19

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2025: 14; 2026: 8.

22 papers.

Sort:

By area:

  1. 2025Get Experience from Practice: LLM Agents with Record & Replaycited by 22
  2. 2025Pushing the Limits of Safety: A Technical Report on the ATLAS Challenge 2025cited by 11
  3. 2025USB: A Comprehensive and Unified Safety Evaluation Benchmark for Multimodal Large Language Modelscited by 10
  4. 2025LLLMs: A Data-Driven Survey of Evolving Research on Limitations of Large Language Modelscited by 9
  5. 2025Uni-DPO: A Unified Paradigm for Dynamic Preference Optimization of LLMscited by 9
  6. 2025SafeSearch: Do Not Trade Safety for Utility in LLM Search Agentscited by 9
  7. 2025Beyond Safe Answers: A Benchmark for Evaluating True Risk Awareness in Large Reasoning Modelscited by 7
  8. 2025MSR-Align: Policy-Grounded Multimodal Alignment for Safety-Aware Reasoning in Vision-Language Modelscited by 7
  9. 2025UnsafeChain: Enhancing Reasoning Model Safety via Hard Casescited by 7
  10. 2025Multiplayer Nash Preference Optimizationcited by 7
  11. 2025Reinforcement Learning from Human Feedback with High-Confidence Safety Constraintscited by 4
  12. 2025QuadSentinel: Sequent Safety for Machine-Checkable Control in Multi-agent Systemscited by 4
10 more
  1. 2025Beyond Prediction: Reinforcement Learning as the Defining Leap in Healthcare AIcited by 3
  2. 2026Robust Policy Optimization to Prevent Catastrophic Forgettingcited by 3
  3. 2025Ethics and Persuasion in Reinforcement Learning from Human Feedback: A Procedural Rhetorical Approachcited by 1
  4. 2026Benchmarking Knowledge-Extraction Attack and Defense on Retrieval-Augmented Generationcited by 1
  5. 2026Don't Make Models Guess Security and Safety: Symbolic Guardrails for Domain-Specific AI Agentscited by 1
  6. 2026Alignment Tuning for Large Language Models: A Data-Centric Lens on Alignment Data Pipelinescited by 1
  7. 2026Step-Level Preference Learning for Generative Agents in Social Simulationscited by 1
  8. 2026SaFeR-ToolKit: Structured Reasoning via Virtual Tool Calling for Multimodal Safetycited by 0
  9. 2026COMPASS: Cognitive MCTS-Guided Process Alignment for Safe Search Agentscited by 0
  10. 2026Learning to Ideate for Scientific Impactcited by 0

Similar, not cited

Close in wording, no citation either way

  1. 2024Evaluating Defences against Unsafe Feedback in RLHF
  2. 2024Enhancing Safety in Reinforcement Learning with Human Feedback via Rectified Policy Optimization
  3. 2025Safe RLHF-V: Safe Reinforcement Learning from Multi-modal Human Feedback
  4. 2025SafeDPO: A Simple Approach to Direct Preference Optimization with Enhanced Safety
  5. 2025Data-adaptive Safety Rules for Training Reward Models
  6. 2024One-Shot Safety Alignment for Large Language Models via Optimal Dualization
  7. 2024Safe to Serve: Aligning Instruction-Tuned Models for Safety and Helpfulness
  8. 2025Breaking the Safety-Capability Tradeoff: Reinforcement Learning with Verifiable Rewards Maintains Safety Guardrails in LLMs