PRM-Free Security Alignment of Large Models via Red Teaming and Adversarial Training
On the map: LLM alignment / RLHF / preference optimisation → Safety alignment and jailbreak attacks
also in 1 more
Abstract (arXiv)
Large Language Models (LLMs) have demonstrated remarkable capabilities across diverse applications, yet they pose significant security risks that threaten their safe deployment in critical domains. Current security alignment methodologies predominantly rely on Process Reward Models (PRMs) to evaluate intermediate reasoning steps, introducing substantial computational overhead and scalability constraints. This paper presents a novel PRM-free security alignment framework that leverages automated red teaming and adversarial training to achieve robust security guarantees while maintaining computational efficiency. Our approach systematically identifies vulnerabilities through sophisticated attack strategies including genetic algorithm optimization, multi-agent simulation, and advanced prompt mutation techniques. The framework enhances model robustness via targeted adversarial training with curriculum learning and adaptive regularization mechanisms. Comprehensive experimental evaluation across five state-of-the-art LLMs demonstrates that our method achieves superior security alignment performance compared to PRM-based approaches while reducing computational costs by 61%. The framework incorporates transparent reporting and continuous audit mechanisms that enable iterative security improvement and regulatory compliance. Our contributions advance the field of efficient LLM security alignment by democratizing access to robust security measures for resource-constrained organizations and providing a scalable foundation for addressing evolving adversarial threats.
Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Placed in Safety alignment and jailbreak attacks, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 58 of its 80 references that are in the map. First posted on arXiv 14 Jul 2025.
Builds on
58 of 80 references.
Closest ancestors · 1
Same direction, newest first
Other references · 57
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2017Proximal Policy Optimization Algorithmscited by 15,215
- 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,695
- 2020Measuring Massive Multitask Language Understandingcited by 7,963
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2022Self-Consistency Improves Chain of Thought Reasoning in Language Modelscited by 5,708
- 2019HellaSwag: Can a Machine Really Finish Your Sentence?cited by 4,100
- 2021On the Opportunities and Risks of Foundation Modelscited by 4,033
- 2017Deep reinforcement learning from human preferencescited by 3,912
- 2023Let's Verify Step by Stepcited by 3,789
38 more
- 2020Learning to summarize from human feedbackcited by 2,588
- 2020Extracting Training Data from Large Language Modelscited by 2,189
- 2019A Survey on Bias and Fairness in Machine Learningcited by 1,917
- 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,443
- 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,420
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,255
- 2019Energy and Policy Considerations for Deep Learning in NLPcited by 1,254
- 2022Scaling Laws for Reward Model Overoptimizationcited by 1,095
- 2021Ethical and social risks of harm from Language Modelscited by 966
- 2017Virtual Adversarial Training: A Regularization Method for Supervised and Semi-Supervised Learningcited by 920
- 2022Solving math word problems with process- and outcome-based feedbackcited by 901
- 2018Robustness May Be at Odds with Accuracycited by 880
- 2017Ensemble Adversarial Training: Attacks and Defensescited by 840
- 2022Discovering Language Model Behaviors with Model-Written Evaluationscited by 836
- 2022Ignore Previous Prompt: Attack Techniques For Language Modelscited by 832
- 2019Universal Adversarial Triggers for Attacking and Analyzing NLPcited by 722
- 2019Is BERT Really Robust? A Strong Baseline for Natural Language Attack on Text Classification and Entailmentcited by 671
- 2023GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Promptscited by 560
- 2023Jailbreaking ChatGPT via Prompt Engineering: An Empirical Studycited by 498
- 2020BERT-ATTACK: Adversarial Attack Against BERT Using BERTcited by 491
- 2018Scalable agent alignment via reward modeling: a research directioncited by 447
- 2023Scalable Extraction of Training Data from (Production) Language Modelscited by 434
- 2018Generating Natural Language Adversarial Examplescited by 424
- 2017Wild Patterns: Ten Years After the Rise of Adversarial Machine Learningcited by 414
- 2021BOLD: Dataset and Metrics for Measuring Biases in Open-Ended Language Generationcited by 412
- 2018AI safety via debatecited by 400
- 2019HopSkipJumpAttack: A Query-Efficient Decision-Based Attackcited by 333
- 2023Low-Resource Languages Jailbreak GPT-4cited by 309
- 2019FreeLB: Enhanced Adversarial Training for Natural Language Understandingcited by 264
- 2019SMART: Robust and Efficient Fine-Tuning for Pre-trained Natural Language Models through Principled Regularized Optimizationcited by 254
- 2023Scalable and Transferable Black-Box Jailbreaks for Language Models via Persona Modulationcited by 214
- 2019Competence-based Curriculum Learning for Neural Machine Translationcited by 202
- 2023Automatically Auditing Large Language Models via Discrete Optimizationcited by 191
- 2023Image Hijacks: Adversarial Images can Control Generative Models at Runtimecited by 172
- 2018Supervising strong learners by amplifying weak expertscited by 145
- 2019Adversarial Training Can Hurt Generalizationcited by 132
- 2023Explore, Establish, Exploit: Red Teaming Language Models from Scratchcited by 114
- 2020Adversarial Training for Large Neural Language Modelscited by 111
50 most cited of 57 All 57 (JSON)
Built on by
Citing papers per year: 2025: 1.
1 paper.
Similar, not cited
Close in wording, no citation either way
- 2025Adversarial Alignment for LLMs Requires Simpler, Reproducible, and More Measurable Objectives
- 2023Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks
- 2025Safety Alignment of LMs via Non-cooperative Games
- 2023Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM
- 2025Adversarial Attack-Defense Co-Evolution for LLM Safety Alignment via Tree-Group Dual-Aware Search and Optimization
- 2025Targeting Alignment: Extracting Safety Classifiers of Aligned LLMs
- 2025Learning-Based Automated Adversarial Red-Teaming for Robustness Evaluation of Large Language Models
- 2026MAGIC: A Co-Evolving Attacker-Defender Adversarial Game for Robust LLM Safety