mlsanityData to 14 Oct 2026

PRM-Free Security Alignment of Large Models via Red Teaming and Adversarial Training

arXiv 2507.14202 ↗First posted 14 Jul 2025cs.CR cs.AIcited by 1

On the map: LLM alignment / RLHF / preference optimisation → Safety alignment and jailbreak attacks

also in 1 more
Abstract (arXiv)

Large Language Models (LLMs) have demonstrated remarkable capabilities across diverse applications, yet they pose significant security risks that threaten their safe deployment in critical domains. Current security alignment methodologies predominantly rely on Process Reward Models (PRMs) to evaluate intermediate reasoning steps, introducing substantial computational overhead and scalability constraints. This paper presents a novel PRM-free security alignment framework that leverages automated red teaming and adversarial training to achieve robust security guarantees while maintaining computational efficiency. Our approach systematically identifies vulnerabilities through sophisticated attack strategies including genetic algorithm optimization, multi-agent simulation, and advanced prompt mutation techniques. The framework enhances model robustness via targeted adversarial training with curriculum learning and adaptive regularization mechanisms. Comprehensive experimental evaluation across five state-of-the-art LLMs demonstrates that our method achieves superior security alignment performance compared to PRM-based approaches while reducing computational costs by 61%. The framework incorporates transparent reporting and continuous audit mechanisms that enable iterative security improvement and regulatory compliance. Our contributions advance the field of efficient LLM security alignment by democratizing access to robust security measures for resource-constrained organizations and providing a scalable foundation for addressing evolving adversarial threats.

Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Placed in Safety alignment and jailbreak attacks, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 58 of its 80 references that are in the map. First posted on arXiv 14 Jul 2025.

Builds on

58 of 80 references.

Closest ancestors · 1

Same direction, newest first

  1. 2023Universal and Transferable Adversarial Attacks on Aligned Language Models27 Jul

Other references · 57

  1. 2020Language Models are Few-Shot Learnerscited by 32,419
  2. 2022Training language models to follow instructions with human feedbackcited by 15,971
  3. 2017Proximal Policy Optimization Algorithmscited by 15,215
  4. 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,695
  5. 2020Measuring Massive Multitask Language Understandingcited by 7,963
  6. 2014Explaining and Harnessing Adversarial Examplescited by 7,364
  7. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
  8. 2022Self-Consistency Improves Chain of Thought Reasoning in Language Modelscited by 5,708
  9. 2019HellaSwag: Can a Machine Really Finish Your Sentence?cited by 4,100
  10. 2021On the Opportunities and Risks of Foundation Modelscited by 4,033
  11. 2017Deep reinforcement learning from human preferencescited by 3,912
  12. 2023Let's Verify Step by Stepcited by 3,789
38 more
  1. 2020Learning to summarize from human feedbackcited by 2,588
  2. 2020Extracting Training Data from Large Language Modelscited by 2,189
  3. 2019A Survey on Bias and Fairness in Machine Learningcited by 1,917
  4. 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,443
  5. 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,420
  6. 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,255
  7. 2019Energy and Policy Considerations for Deep Learning in NLPcited by 1,254
  8. 2022Scaling Laws for Reward Model Overoptimizationcited by 1,095
  9. 2021Ethical and social risks of harm from Language Modelscited by 966
  10. 2017Virtual Adversarial Training: A Regularization Method for Supervised and Semi-Supervised Learningcited by 920
  11. 2022Solving math word problems with process- and outcome-based feedbackcited by 901
  12. 2018Robustness May Be at Odds with Accuracycited by 880
  13. 2017Ensemble Adversarial Training: Attacks and Defensescited by 840
  14. 2022Discovering Language Model Behaviors with Model-Written Evaluationscited by 836
  15. 2022Ignore Previous Prompt: Attack Techniques For Language Modelscited by 832
  16. 2019Universal Adversarial Triggers for Attacking and Analyzing NLPcited by 722
  17. 2019Is BERT Really Robust? A Strong Baseline for Natural Language Attack on Text Classification and Entailmentcited by 671
  18. 2023GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Promptscited by 560
  19. 2023Jailbreaking ChatGPT via Prompt Engineering: An Empirical Studycited by 498
  20. 2020BERT-ATTACK: Adversarial Attack Against BERT Using BERTcited by 491
  21. 2018Scalable agent alignment via reward modeling: a research directioncited by 447
  22. 2023Scalable Extraction of Training Data from (Production) Language Modelscited by 434
  23. 2018Generating Natural Language Adversarial Examplescited by 424
  24. 2017Wild Patterns: Ten Years After the Rise of Adversarial Machine Learningcited by 414
  25. 2021BOLD: Dataset and Metrics for Measuring Biases in Open-Ended Language Generationcited by 412
  26. 2018AI safety via debatecited by 400
  27. 2019HopSkipJumpAttack: A Query-Efficient Decision-Based Attackcited by 333
  28. 2023Low-Resource Languages Jailbreak GPT-4cited by 309
  29. 2019FreeLB: Enhanced Adversarial Training for Natural Language Understandingcited by 264
  30. 2019SMART: Robust and Efficient Fine-Tuning for Pre-trained Natural Language Models through Principled Regularized Optimizationcited by 254
  31. 2023Scalable and Transferable Black-Box Jailbreaks for Language Models via Persona Modulationcited by 214
  32. 2019Competence-based Curriculum Learning for Neural Machine Translationcited by 202
  33. 2023Automatically Auditing Large Language Models via Discrete Optimizationcited by 191
  34. 2023Image Hijacks: Adversarial Images can Control Generative Models at Runtimecited by 172
  35. 2018Supervising strong learners by amplifying weak expertscited by 145
  36. 2019Adversarial Training Can Hurt Generalizationcited by 132
  37. 2023Explore, Establish, Exploit: Red Teaming Language Models from Scratchcited by 114
  38. 2020Adversarial Training for Large Neural Language Modelscited by 111

50 most cited of 57 All 57 (JSON)

Built on by

Cited by year

Citing papers per year: 2025: 1.

1 paper.

Similar, not cited

Close in wording, no citation either way

  1. 2025Adversarial Alignment for LLMs Requires Simpler, Reproducible, and More Measurable Objectives
  2. 2023Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks
  3. 2025Safety Alignment of LMs via Non-cooperative Games
  4. 2023Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM
  5. 2025Adversarial Attack-Defense Co-Evolution for LLM Safety Alignment via Tree-Group Dual-Aware Search and Optimization
  6. 2025Targeting Alignment: Extracting Safety Classifiers of Aligned LLMs
  7. 2025Learning-Based Automated Adversarial Red-Teaming for Robustness Evaluation of Large Language Models
  8. 2026MAGIC: A Co-Evolving Attacker-Defender Adversarial Game for Robust LLM Safety