Efficient Safety Alignment of Large Language Models via Preference Re-ranking and Representation-based Reward Modeling
On the map: LLM alignment / RLHF / preference optimisation → Safety alignment and jailbreak attacks
Abstract (arXiv)
Reinforcement Learning (RL) algorithms for safety alignment of Large Language Models (LLMs), such as Direct Preference Optimization (DPO), encounter the challenge of distribution shift. Current approaches typically address this issue through online sampling from the target policy, which requires significant computational resources. In this paper, we hypothesize that during off-policy training, while the ranking order of output generated by policy changes, their overall distribution remains relatively stable. This stability allows the conversion of the sampling process from the target policy into a computationally efficient re-ranking of preference data. Building on this hypothesis, we propose a new framework that leverages the model's intrinsic safety judgment capability to extract reward signals, which are then used to calculate label confidence for preference reordering. Extensive experiments and theoretical analysis demonstrate that the proposed method effectively addresses the distribution shift issue, remarkably enhancing the safety performance while avoiding about 300x computational overheads.
Key facts. Cited by 4 papers in the map (data through 13 Oct 2026). Placed in Safety alignment and jailbreak attacks, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 35 of its 49 references that are in the map. First posted on arXiv 13 Mar 2025.
Builds on
35 of 49 references.
Closest ancestors · 2
Same direction, newest first
- 2024Safety Alignment Should Be Made More Than Just a Few Tokens Deep10 Jun
- 2023Safe RLHF: Safe Reinforcement Learning from Human Feedback19 Oct
Other references · 33
- 2022Training language models to follow instructions with human feedbackcited by 15,856
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,979
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,986
- 2020Measuring Massive Multitask Language Understandingcited by 7,876
- 2024Qwen2.5 Technical Reportcited by 4,840
- 2017Deep reinforcement learning from human preferencescited by 3,871
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,691
- 2020Learning to summarize from human feedbackcited by 2,575
- 2016Understanding intermediate layers using linear classifier probescited by 1,313
- 2023Representation Engineering: A Top-Down Approach to AI Transparencycited by 1,286
- 2023Inference-Time Intervention: Eliciting Truthful Answers from a Language Modelcited by 1,280
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,181
21 more
- 2019BERT Rediscovers the Classical NLP Pipelinecited by 1,049
- 2024SimPO: Simple Preference Optimization with a Reference-Free Rewardcited by 954
- 2023A General Theoretical Paradigm to Understand Learning from Human Preferencescited by 909
- 2024Length-Controlled AlpacaEval: A Simple Way to Debias Automatic Evaluatorscited by 877
- 2021Probing Classifiers: Promises, Shortcomings, and Advancescited by 850
- 2019The Woman Worked as a Babysitter: On Biases in Language Generationcited by 540
- 2018Scalable agent alignment via reward modeling: a research directioncited by 443
- 2021Persistent Anti-Muslim Bias in Large Language Modelscited by 377
- 2023Iterative Preference Learning from Human Feedback: Bridging Theory and Practice for RLHF under KL-Constraintcited by 347
- 2018Reward learning from human preferences and demonstrations in Ataricited by 314
- 2024Is DPO Superior to PPO for LLM Alignment? A Comprehensive Studycited by 262
- 2019Assessing Social and Intersectional Biases in Contextualized Word Representationscited by 135
- 2024Provably Robust DPO: Aligning Language Models with Noisy Feedbackcited by 134
- 2023Aligning Language Models with Preferences through f-divergence Minimizationcited by 120
- 2024Not All Layers of LLMs Are Necessary During Inferencecited by 96
- 2024Detoxifying Large Language Models via Knowledge Editingcited by 87
- 2022On Reinforcement Learning and Distribution Matching for Fine-Tuning Language Models with no Catastrophic Forgettingcited by 81
- 2024Aligning Large Language Models with Representation Editing: A Control Perspectivecited by 64
- 2023Artificial intelligence and biological misuse: Differentiating risks of language models and biological design toolscited by 45
- 2024Towards Efficient Exact Optimization of Language Model Alignmentcited by 37
- 2019Probing Contextualized Sentence Representations with Visual Awarenesscited by 1
Built on by
Citing papers per year: 2026: 4.
4 papers.
- 2026Deactivating Refusal Triggers: Understanding and Mitigating Overrefusal in Safety Alignmentcited by 7
- 2026SAT: Balancing Reasoning Accuracy and Efficiency with Stepwise Adaptive Thinkingcited by 2
- 2026Structuring the Space of Sociotechnical Alignmentcited by 2
- 2026AlignDiff: Exploiting Model-Intrinsic Information for Better Preference Data Selectioncited by 0
- 2026AlignDiff: Exploiting Model-Intrinsic Information for Better Preference Data Selection5 Sep 2026
- 2026Structuring the Space of Sociotechnical Alignment2 Jun 2026
- 2026SAT: Balancing Reasoning Accuracy and Efficiency with Stepwise Adaptive Thinking9 Apr 2026
- 2026Deactivating Refusal Triggers: Understanding and Mitigating Overrefusal in Safety Alignment12 Mar 2026
Similar, not cited
Close in wording, no citation either way
- 2026Improving Safety Alignment via Balanced Direct Preference Optimization
- 2025SafeDPO: A Simple Approach to Direct Preference Optimization with Enhanced Safety
- 2024Enhancing Safety in Reinforcement Learning with Human Feedback via Rectified Policy Optimization
- 2026BSO: Safety Alignment Is Density Ratio Matching
- 2026Cat-DPO: Category-Adaptive Safety Alignment
- 2025MPO: Multilingual Safety Alignment via Reward Gap Optimization
- 2024One-Shot Safety Alignment for Large Language Models via Optimal Dualization
- 2026SafeSteer: Localized On-Policy Distillation for Efficient Safety Alignment