Safe Pruning LoRA: Robust Distance-Guided Pruning for Safety Alignment in Adaptation of LLMs
On the map: LLM alignment / RLHF / preference optimisation → Safety alignment and jailbreak attacks
also in 1 more
Abstract (arXiv)
Fine-tuning Large Language Models (LLMs) with Low-Rank Adaptation (LoRA) enhances adaptability while reducing computational costs. However, fine-tuning can compromise safety alignment, even with benign data, increasing susceptibility to harmful outputs. Existing safety alignment methods struggle to capture complex parameter shifts, leading to suboptimal safety-utility trade-offs. To address this issue, we propose Safe Pruning LoRA (SPLoRA), a novel pruning-based approach that selectively removes LoRA layers that weaken safety alignment, improving safety while preserving performance. At its core, we introduce Empirical-DIEM (E-DIEM), a dimension-insensitive similarity metric that effectively detects safety misalignment in LoRA-adapted models. We conduct extensive experiments on LLMs fine-tuned with mixed of benign and malicious data, and purely benign datasets, evaluating SPLoRA across utility, safety, and reliability metrics. Results demonstrate that SPLoRA outperforms state-of-the-art safety alignment techniques, significantly reducing safety risks while maintaining or improving model performance and reliability. Additionally, SPLoRA reduces inference overhead, making it a scalable and efficient solution for deploying safer and more reliable LLMs. The code is available at https://github.com/AoShuang92/SPLoRA.
Key facts. Cited by 10 papers in the map (data through 14 Oct 2026). Placed in Safety alignment and jailbreak attacks, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 27 of its 43 references that are in the map. First posted on arXiv 21 Jun 2025.
Builds on
27 of 43 references.
Closest ancestors · 4
Same direction, newest first
- 2024Assessing the Brittleness of Safety Alignment via Pruning and Low-Rank Modifications7 Feb
- 2024Vaccine: Perturbation-aware Alignment for Large Language Models against Harmful Fine-tuning Attack2 Feb
- 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!5 Oct
- 2023Shadow Alignment: The Ease of Subverting Safely-Aligned Language Models4 Oct
Other references · 23
- 2023GPT-4 Technical Reportcited by 18,396
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,380
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,720
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 3,050
- 2023Sparks of Artificial General Intelligence: Early experiments with GPT-4cited by 2,592
- 2024Gemma: Open Models Based on Gemini Research and Technologycited by 916
- 2023Semantic Uncertainty: Linguistic Invariances for Uncertainty Estimation in Natural Language Generationcited by 819
- 2023LLM-Pruner: On the Structural Pruning of Large Language Modelscited by 650
- 2019SAMSum Corpus: A Human-annotated Dialogue Dataset for Abstractive Summarizationcited by 535
- 2023Safety-Tuned LLaMAs: Lessons From Improving the Safety of Large Language Models that Follow Instructionscited by 387
11 more
- 2023Generating with Confidence: Uncertainty Quantification for Black-box Large Language Modelscited by 293
- 2024Semantic Entropy Probes: Robust and Cheap Hallucination Detection in LLMscited by 259
- 2024A Survey on Efficient Inference for Large Language Modelscited by 205
- 2024Safe LoRA: the Silver Lining of Reducing Safety Risks when Fine-tuning Large Language Modelscited by 125
- 2024Transformer Layers as Painterscited by 54
- 2023LoRAPrune: Structured Pruning Meets Low-Rank Parameter-Efficient Fine-Tuningcited by 53
- 2020Statistical Consequences of Fat Tails: Real World Preasymptotics, Epistemology, and Applicationscited by 16
- 2024Surpassing Cosine Similarity for Multidimensional Comparisons: Dimension Insensitive Euclidean Metriccited by 9
- 2019A New Framework for Distance and Kernel-based Metrics in High Dimensionscited by 6
- 2024Revisiting Cosine Similarity via Normalized ICA-transformed Embeddingscited by 5
- 2020Text classification with word embedding regularization and soft similarity measurecited by 2
Built on by
Citing papers per year: 2025: 3; 2026: 7.
10 papers.
- 2025Interpretable Safety Alignment via SAE-Constructed Low-Rank Subspace Adaptationcited by 5
- 2026Surgery: Mitigating Harmful Fine-Tuning for Large Language Models via Attention Sinkcited by 4
- 2025Multi-Level Safety Continual Projection for Fine-Tuned Large Language Models without Retrainingcited by 2
- 2026GR-SAP: Generative Replay for Safety Alignment Preservation during Fine-Tuningcited by 2
- 2025S3LoRA: Safe Spectral Sharpness-Guided Pruning in Adaptation of Agent Plannercited by 1
- 2026Safin-1: Safety from Within through Memory-Native State Evolutioncited by 1
- 2026You Snooze, You Lose: Automatic Safety Alignment Restoration through Neural Weight Translationcited by 0
- 2026Symmetry Defeats Auditingcited by 0
- 2026CSULoRA: Closest Safe Update Low-Rank Adaptationcited by 0
- 2026Hybrid Adversarial Defence for Natural Language Understanding Taskscited by 0
- 2026Safin-1: Safety from Within through Memory-Native State Evolution31 Aug 2026
- 2026Hybrid Adversarial Defence for Natural Language Understanding Tasks3 Jun 2026
- 2026CSULoRA: Closest Safe Update Low-Rank Adaptation28 May 2026
- 2026Symmetry Defeats Auditing27 May 2026
- 2026You Snooze, You Lose: Automatic Safety Alignment Restoration through Neural Weight Translation6 May 2026
- 2026GR-SAP: Generative Replay for Safety Alignment Preservation during Fine-Tuning10 Mar 2026
- 2026Surgery: Mitigating Harmful Fine-Tuning for Large Language Models via Attention Sink5 Feb 2026
- 2025Interpretable Safety Alignment via SAE-Constructed Low-Rank Subspace Adaptation29 Dec 2025
- 2025S3LoRA: Safe Spectral Sharpness-Guided Pruning in Adaptation of Agent Planner20 Aug 2025
- 2025Multi-Level Safety Continual Projection for Fine-Tuned Large Language Models without Retraining8 Aug 2025
Similar, not cited
Close in wording, no citation either way
- 2025SaLoRA: Safety-Alignment Preserved Low-Rank Adaptation
- 2026Aligned but Fragile: Enhancing LLM Safety Robustness via Zeroth-Order Optimization
- 2026Safety at One Shot: Patching Fine-Tuned LLMs with A Single Instance
- 2024Towards Comprehensive Post Safety Alignment of Large Language Models via Safety Patching
- 2026LSSF: Safety Alignment for Large Language Models through Low-Rank Safety Subspace Fusion
- 2025Decoupling Safety into Orthogonal Subspace: Cost-Efficient and Performance-Preserving Alignment for Large Language Models
- 2024Separate the Wheat from the Chaff: A Post-Hoc Approach to Safety Re-Alignment for Fine-Tuned Language Models
- 2026Guardrails in Logit Space: Safety Token Regularization for LLM Alignment