NeuRel-Attack: Neuron Relearning for Safety Disalignment in Large Language Models
On the map: LLM alignment / RLHF / preference optimisation → Safety alignment and jailbreak attacks
also in 1 more
Abstract (arXiv)
Safety alignment in large language models (LLMs) is achieved through fine-tuning mechanisms that regulate neuron activations to suppress harmful content. In this work, we propose a novel approach to induce disalignment by identifying and modifying the neurons responsible for safety constraints. Our method consists of three key steps: Neuron Activation Analysis, where we examine activation patterns in response to harmful and harmless prompts to detect neurons that are critical for distinguishing between harmful and harmless inputs; Similarity-Based Neuron Identification, which systematically locates the neurons responsible for safe alignment; and Neuron Relearning for Safety Removal, where we fine-tune these selected neurons to restore the model's ability to generate previously restricted responses. Experimental results demonstrate that our method effectively removes safety constraints with minimal fine-tuning, highlighting a critical vulnerability in current alignment techniques. Our findings underscore the need for robust defenses against adversarial fine-tuning attacks on LLMs.
Key facts. Cited by 6 papers in the map (data through 14 Oct 2026). Placed in Safety alignment and jailbreak attacks, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 19 of its 28 references that are in the map. First posted on arXiv 29 Apr 2025.
Builds on
19 of 28 references.
Closest ancestors · 5
Same direction, newest first
- 2024DrAttack: Prompt Decomposition and Reconstruction Makes Powerful LLM Jailbreakers25 Feb
- 2024Emulated Disalignment: Safety Alignment for Large Language Models May Backfire!19 Feb
- 2023LoRA Fine-tuning Efficiently Undoes Safety Training in Llama 2-Chat 70B31 Oct
- 2023GPT-4 Is Too Smart To Be Safe: Stealthy Chat with LLMs via Cipher12 Aug
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Models27 Jul
Other references · 14
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2021Finetuned Language Models Are Zero-Shot Learnerscited by 3,780
- 2023QLoRA: Efficient Finetuning of Quantized LLMscited by 3,418
- 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,420
- 2024How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMscited by 573
- 2023GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Promptscited by 560
- 2023Catastrophic Jailbreak of Open-source LLMs via Exploiting Generationcited by 451
- 2023Hard Prompts Made Easy: Gradient-Based Discrete Optimization for Prompt Tuning and Discoverycited by 336
- 2023Exploiting Programmatic Behavior of LLMs: Dual-Use Through Standard Security Attackscited by 278
- 2023MasterKey: Automated Jailbreak Across Multiple Large Language Model Chatbotscited by 183
- 2024COLD-Attack: Jailbreaking LLMs with Stealthiness and Controllabilitycited by 175
2 more
Built on by
Citing papers per year: 2025: 2; 2026: 4.
6 papers.
- 2025Self-Destructive Language Modelcited by 10
- 2026SafeNeuron: Neuron-Level Safety Alignment for Large Language Modelscited by 10
- 2025The Achilles' Heel of LLMs: How Altering a Handful of Neurons Can Cripple Language Abilitiescited by 7
- 2026SafeSeek: Universal Attribution of Safety Circuits in Language Modelscited by 4
- 2026Mask2Shield: Strengthening LLM Safety against Neuron-Pruning Attackscited by 0
- 2026Moving the Safety Barrier: Dynamic Routing Adaptive Alignment Against White-Box Attackscited by 0
- 2026Moving the Safety Barrier: Dynamic Routing Adaptive Alignment Against White-Box Attacks2 Aug 2026
- 2026Mask2Shield: Strengthening LLM Safety against Neuron-Pruning Attacks25 Jul 2026
- 2026SafeSeek: Universal Attribution of Safety Circuits in Language Models24 Mar 2026
- 2026SafeNeuron: Neuron-Level Safety Alignment for Large Language Models12 Feb 2026
- 2025The Achilles' Heel of LLMs: How Altering a Handful of Neurons Can Cripple Language Abilities11 Oct 2025
- 2025Self-Destructive Language Model18 May 2025
Similar, not cited
Close in wording, no citation either way
- 2025NeuroStrike: Neuron-Level Attacks on Aligned LLMs
- 2024NLSR: Neuron-Level Safety Realignment of Large Language Models Against Harmful Fine-Tuning
- 2026NeuronGuard: Robust LLM Safety Alignment via Ablation-Aware Safety Signal Redistribution
- 2025NeuronTune: Fine-Grained Neuron Modulation for Balanced Safety-Utility Alignment in LLMs
- 2026NeST: Neuron Selective Tuning for LLM Safety
- 2024Towards Understanding Safety Alignment: A Mechanistic Perspective from Safety Neurons
- 2026A Single Neuron Is Sufficient to Bypass Safety Alignment in Large Language Models
- 2025Safety Alignment via Constrained Knowledge Unlearning