mlsanityData to 14 Oct 2026

IF-GUIDE: Influence Function-Guided Detoxification of LLMs

arXiv 2506.01790 ↗First posted 2 Jun 2025cs.LG cs.CRcited by 7

Not on the map. Why?

Abstract (arXiv)

We study how training data contributes to the emergence of toxic behaviors in large language models. Most prior work on reducing model toxicity adopts reactive approaches, such as fine-tuning pre-trained (and potentially toxic) models to align them with human values. In contrast, we propose a proactive approach, IF-GUIDE, that leverages influence functions to identify and suppress harmful tokens in the training data. To this end, we first show that standard influence functions are ineffective at discovering harmful training records. We then present a novel adaptation that measures token-level attributions from training data to model toxicity, along with techniques for selecting toxic training documents and a learning objective that can be integrated into both pre-training and fine-tuning. Moreover, IF-GUIDE does not rely on human-preference data, which is typically required by existing alignment methods. In our evaluation, we demonstrate that IF-GUIDE substantially reduces both explicit and implicit toxicity-by up to 10× compared to uncensored models, and up to 3× compared to baseline alignment methods such as DPO and RAD-across both pre-training and fine-tuning scenarios. IF-GUIDE is computationally efficient: a billion-parameter model is not necessary for computing influence scores; a million-parameter model-with 7.5× fewer parameters-can effectively serve as a proxy for identifying harmful data. Our code is publicly available at: https://github.com/ztcoalson/IF-Guide

Key facts. Cited by 7 papers in the map (data through 14 Oct 2026). Builds on 79 of its 90 references that are in the map. First posted on arXiv 2 Jun 2025.

Builds on

79 of 90 references.

References · 79

  1. 2022Training language models to follow instructions with human feedbackcited by 15,971
  2. 2024The Llama 3 Herd of Modelscited by 14,715
  3. 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
  4. 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,626
  5. 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
  6. 2020Scaling Laws for Neural Language Modelscited by 6,586
  7. 2016SGDR: Stochastic Gradient Descent with Warm Restartscited by 5,045
  8. 2024Qwen2.5 Technical Reportcited by 4,942
  9. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
  10. 2022Training Compute-Optimal Large Language Modelscited by 3,019
  11. 2020The Pile: An 800GB Dataset of Diverse Text for Language Modelingcited by 2,411
  12. 2023Pythia: A Suite for Analyzing Large Language Models Across Training and Scalingcited by 1,786
38 more
  1. 2017Understanding Black-box Predictions via Influence Functionscited by 1,741
  2. 2023Representation Engineering: A Top-Down Approach to AI Transparencycited by 1,336
  3. 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,255
  4. 2024Refusal in Language Models Is Mediated by a Single Directioncited by 1,032
  5. 2016The LAMBADA dataset: Word prediction requiring a broad discourse contextcited by 992
  6. 2023Enhancing Chat Language Models by Scaling High-quality Instructional Conversationscited by 839
  7. 2019Plug and Play Language Models: A Simple Approach to Controlled Text Generationcited by 799
  8. 2015Optimizing Neural Networks with Kronecker-factored Approximate Curvaturecited by 796
  9. 2023CRITIC: Large Language Models Can Self-Correct with Tool-Interactive Critiquingcited by 783
  10. 2023Open Problems and Fundamental Limitations of Reinforcement Learning from Human Feedbackcited by 759
  11. 2022GPT-NeoX-20B: An Open-Source Autoregressive Language Modelcited by 713
  12. 2023The Geometry of Truth: Emergent Linear Structure in Large Language Model Representations of True/False Datasetscited by 712
  13. 2024LESS: Selecting Influential Data for Targeted Instruction Tuningcited by 532
  14. 2021DExperts: Decoding-Time Controlled Text Generation with Experts and Anti-Expertscited by 441
  15. 2024Mechanistic Interpretability for AI Safety -- A Reviewcited by 422
  16. 2021BOLD: Dataset and Metrics for Measuring Biases in Open-Ended Language Generationcited by 412
  17. 2019Nuanced Metrics for Measuring Unintended Bias with Real Data for Text Classificationcited by 404
  18. 2023Scaling Data-Constrained Language Modelscited by 403
  19. 2020GeDi: Generative Discriminator Guided Sequence Generationcited by 378
  20. 2023Toxicity in ChatGPT: Analyzing Persona-assigned Language Modelscited by 360
  21. 2021Self-Diagnosis and Self-Debiasing: A Proposal for Reducing Corpus-Based Bias in NLPcited by 337
  22. 2023Studying Large Language Model Generalization with Influence Functionscited by 326
  23. 2023Are aligned neural networks adversarially aligned?cited by 315
  24. 2023TRAK: Attributing Model Behavior at Scalecited by 283
  25. 2022Generating Sequences by Learning to Self-Correctcited by 277
  26. 2023Pretraining Language Models with Human Preferencescited by 247
  27. 2022Quark: Controllable Text Generation with Reinforced Unlearningcited by 237
  28. 2023Automatically Auditing Large Language Models via Discrete Optimizationcited by 191
  29. 2022A New Generation of Perspective API: Efficient Multilingual Character-level Transformerscited by 185
  30. 2024A Mechanistic Understanding of Alignment Algorithms: A Case Study on DPO and Toxicitycited by 185
  31. 2024RedPajama: an Open Dataset for Training Large Language Modelscited by 182
  32. 2021Large Pre-trained Language Models Contain Human-like Biases of What is Right and Wrong to Docited by 178
  33. 2023Composing Parameter-Efficient Modules with Arithmetic Operationscited by 156
  34. 2018Fast Approximate Natural Gradient Descent in a Kronecker-factored Eigenbasiscited by 146
  35. 2021Scaling Up Influence Functionscited by 132
  36. 2023DataInf: Efficiently Estimating Data Influence in LoRA-tuned LLMs and Diffusion Modelscited by 123
  37. 2024Model Editing Harms General Abilities of Large Language Models: Regularization to the Rescuecited by 103
  38. 2022Prompt Compression and Contrastive Conditioning for Controllability and Toxicity Reduction in Language Modelscited by 97

50 most cited of 79 All 79 (JSON)

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 2; 2026: 5.

7 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025Aligned Probing: Relating Toxic Behavior and Model Internals
  2. 2024Realistic Evaluation of Toxicity in Large Language Models
  3. 2025<think> So let's replace this phrase with insult... </think> Lessons learned from generation of toxic texts with LLMs
  4. 2026Beyond a Global Norm: Personalizing Toxicity Sensitivity in Language Models Without Retraining
  5. 2025Something Just Like TRuST : Toxicity Recognition of Span and Target
  6. 2026Measuring and Mitigating Toxicity in Large Language Models: A Comprehensive Replication Study
  7. 2024Large Language Models can be Strong Self-Detoxifiers
  8. 2025Redefining Experts: Interpretable Decomposition of Language Models for Toxicity Mitigation