mlsanityData to 14 Oct 2026

SafeDPO: A Simple Approach to Direct Preference Optimization with Enhanced Safety

arXiv 2505.20065 ↗First posted 26 May 2025cs.LG cs.AIcited by 37

On the map: LLM alignment / RLHF / preference optimisation → Safety alignment and jailbreak attacks

Abstract (arXiv)

As Large Language Models (LLMs) are increasingly deployed in real-world applications, balancing helpfulness and safety has become a central challenge. A natural approach is to incorporate safety constraints into Reinforcement Learning from Human Feedback (RLHF), where recent studies have shown promising progress. However, these methods often rely on auxiliary networks or multi-stage pipelines, thereby increasing complexity. In this work, we revisit the original safety alignment objective and show that, under mild assumptions, it admits a closed-form optimal policy. We further derive a provably equivalent and tractable objective, enabling direct optimization. Building on this insight, we propose SafeDPO, a lightweight method that preserves the optimal solution of the underlying safety-constrained objective while requiring only one additional hyperparameter and minimal modifications to existing preference-based training methods. SafeDPO eliminates the need for reward models, cost models, and online sampling, relying only on preference data and safety indicators. Despite its simplicity, SafeDPO achieves competitive safety-helpfulness trade-offs compared to existing safety alignment methods. Experiments on the PKU-SafeRLHF-30K benchmark demonstrate that SafeDPO substantially improves safety while maintaining competitive helpfulness. Ablation studies further show that the additional hyperparameter provides a flexible mechanism to enhance safety while preserving the theoretical optimum, and confirm that SafeDPO scales reliably to LLMs with up to 13B parameters. Overall, our results highlight that a simple, theory-driven objective can provide a lightweight yet effective solution for safety alignment in practice.

Key facts. Cited by 37 papers in the map (data through 14 Oct 2026). Placed in Safety alignment and jailbreak attacks, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 37 of its 48 references that are in the map. First posted on arXiv 26 May 2025.

Builds on

37 of 48 references.

Closest ancestors · 2

Same direction, newest first

  1. 2024One-Shot Safety Alignment for Large Language Models via Optimal Dualization29 May
  2. 2023Safe RLHF: Safe Reinforcement Learning from Human Feedback19 Oct

Other references · 35

  1. 2020Language Models are Few-Shot Learnerscited by 32,419
  2. 2023GPT-4 Technical Reportcited by 18,396
  3. 2022Training language models to follow instructions with human feedbackcited by 15,971
  4. 2024The Llama 3 Herd of Modelscited by 14,715
  5. 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
  6. 2024DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Modelscited by 9,379
  7. 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,626
  8. 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
  9. 2022PaLM: Scaling Language Modeling with Pathwayscited by 5,326
  10. 2017Deep reinforcement learning from human preferencescited by 3,912
  11. 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,720
  12. 2022Constitutional AI: Harmlessness from AI Feedbackcited by 3,050
23 more
  1. 2020Learning to summarize from human feedbackcited by 2,588
  2. 2019Fine-Tuning Language Models from Human Preferencescited by 2,150
  3. 2024Mixtral of Expertscited by 1,823
  4. 2021WebGPT: Browser-assisted question-answering with human feedbackcited by 1,745
  5. 2022LaMDA: Language Models for Dialog Applicationscited by 1,220
  6. 2023A General Theoretical Paradigm to Understand Learning from Human Preferencescited by 912
  7. 2023AlpacaFarm: A Simulation Framework for Methods that Learn from Human Feedbackcited by 748
  8. 2022Improving alignment of dialogue agents via targeted human judgementscited by 531
  9. 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 505
  10. 2018Scalable agent alignment via reward modeling: a research directioncited by 447
  11. 2021PEBBLE: Feedback-Efficient Interactive Reinforcement Learning via Relabeling Experience and Unsupervised Pre-trainingcited by 302
  12. 2021Unsolved Problems in ML Safetycited by 292
  13. 2023AI Alignment: A Comprehensive Surveycited by 263
  14. 2022Is Reinforcement Learning (Not) for Natural Language Processing: Benchmarks, Baselines, and Building Blocks for Natural Language Policy Optimizationcited by 246
  15. 2023Beyond Reverse KL: Generalizing Direct Preference Optimization with Diverse Divergence Constraintscited by 174
  16. 2023Sociotechnical Safety Evaluation of Generative AI Systemscited by 157
  17. 2024Generalized Preference Optimization: A Unified Approach to Offline Alignmentcited by 157
  18. 2024Scaling Laws for Reward Model Overoptimization in Direct Alignment Algorithmscited by 143
  19. 2024Direct Preference Optimization with an Offsetcited by 122
  20. 2023Preference Transformer: Modeling Human Preferences using Transformers for RLcited by 79
  21. 2024Enhancing LLM Safety via Constrained Direct Preference Optimizationcited by 49
  22. 2024MetaAligner: Towards Generalizable Multi-Objective Alignment of Language Modelscited by 44
  23. 2024Stepwise Alignment for Constrained Language Model Policy Optimizationcited by 30

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 13; 2026: 24.

37 papers.

Sort:

By area:

  1. 2025DriveDPO: Policy Learning via Safety DPO For End-to-End Autonomous Drivingcited by 39
  2. 2025A Technical Survey of Reinforcement Learning Techniques for Large Language Modelscited by 21
  3. 2025Mitigating the Safety Alignment Tax with Null-Space Constrained Policy Optimizationcited by 11
  4. 2025Rethinking Jailbreak Detection of Large Vision Language Models with Representational Contrastive Scoringcited by 11
  5. 2025The Geometry of Harmfulness in LLMs through Subconcept Probingcited by 7
  6. 2025Efficient Switchable Safety Control in LLMs via Magic-Token-Guided Co-Trainingcited by 7
  7. 2025SPA: Achieving Consensus in LLM Alignment via Self-Priority Optimizationcited by 3
  8. 2025DeepKnown-Guard: A Proprietary Model-Based Safety Response Framework for AI Agentscited by 2
  9. 2026Reducing Hallucinations in LLMs via Factuality-Aware Preference Learningcited by 2
  10. 2026NeST: Neuron Selective Tuning for LLM Safetycited by 2
  11. 2025A-IPO: Adaptive Intent-driven Preference Optimizationcited by 1
  12. 2026Reinforcing Real-world Service Agents: Balancing Utility and Cost in Task-oriented Dialoguecited by 1
25 more
  1. 2026Improving Safety Alignment via Balanced Direct Preference Optimizationcited by 1
  2. 2026Cat-DPO: Category-Adaptive Safety Alignmentcited by 1
  3. 2026PREFINE: Preference-Based Implicit Reward and Cost Fine-Tuning for Safety Alignmentcited by 1
  4. 2026DOG-DPO:Dynamic Optimization in Geometry for Safety Alignmentcited by 1
  5. 2026Safe Inference-Time Alignment via Lagrangian Reward Augmentationcited by 1
  6. 2025Provably Convergent Primal-Dual DPO for Constrained LLM Alignmentcited by 0
  7. 2025Don't Walk the Line: Boundary Guidance for Filtered Generationcited by 0
  8. 2025Reducing the Probability of Undesirable Outputs in Language Models Using Probabilistic Inferencecited by 0
  9. 2025Constrained Language Model Policy Optimization via Risk-aware Stepwise Alignmentcited by 0
  10. 2026Provable Last-Iterate Convergence for Multi-Objective Safe LLM Alignment via Optimistic Primal-Dualcited by 0
  11. 2026Steering Frozen LLMs: Adaptive Social Alignment via Online Prompt Routingcited by 0
  12. 2026The Art of (Mis)alignment: How Fine-Tuning Methods Effectively Misalign and Realign LLMs in Post-Trainingcited by 0
  13. 2026MGDA-Decoupled: Geometry-Aware Multi-Objective Optimisation for DPO-based LLM Alignmentcited by 0
  14. 2026Training-Free Refusal of MCP Exploits via Retrieval-Augmented Generationcited by 0
  15. 2026BSO: Safety Alignment Is Density Ratio Matchingcited by 0
  16. 2026Selective Safety Steering via Value-Filtered Decodingcited by 0
  17. 2026SafeDiffusion-R1: Online Reward Steering for Safe Diffusion Post-Trainingcited by 0
  18. 2026Be Kind, Rewrite: Benign Projections via Rewriting Defend Against LLM Data Poisoning Attackscited by 0
  19. 2026Distributed Direct Preference Optimizationcited by 0
  20. 2026Curriculum Learning for Safety Alignmentcited by 0
  21. 2026Grammar-Constrained Decoding Can Jailbreak LLMs into Generating Malicious Codecited by 0
  22. 2026Beyond the Prompt: Jailbreaking Function-Calling LLMs via Simulated Moderation Tracescited by 0
  23. 2026Oyster-II: Reinforcement Learning for Constructive Safety Alignment in Large Language Modelscited by 0
  24. 2026Suan: Rectifying Direct Preference Safety Alignment in Large Language Modelscited by 0
  25. 2026TRACE: Trajectory Return Attribution and Contrastive Erasure for Multi-Turn Safetycited by 0

Similar, not cited

Close in wording, no citation either way

  1. 2024Enhancing Safety in Reinforcement Learning with Human Feedback via Rectified Policy Optimization
  2. 2025Efficient Safety Alignment of Large Language Models via Preference Re-ranking and Representation-based Reward Modeling
  3. 2025Reinforcement Learning from Human Feedback with High-Confidence Safety Constraints
  4. 2023Beyond One-Preference-Fits-All Alignment: Multi-Objective Direct Preference Optimization
  5. 2024AlphaDPO: Adaptive Reward Margin for Direct Preference Optimization
  6. 2025Safe RLHF-V: Safe Reinforcement Learning from Multi-modal Human Feedback
  7. 2025MPO: Multilingual Safety Alignment via Reward Gap Optimization
  8. 2025A Survey of Direct Preference Optimization