mlsanityData to 14 Oct 2026

NeuronTune: Fine-Grained Neuron Modulation for Balanced Safety-Utility Alignment in LLMs

arXiv 2508.09473 ↗First posted 13 Aug 2025cs.LG cs.AI cs.CLcited by 4

On the map: LLM alignment / RLHF / preference optimisation → Safety alignment and jailbreak attacks

also in 1 more
Abstract (arXiv)

Ensuring robust safety alignment while preserving utility is critical for the reliable deployment of Large Language Models (LLMs). However, current techniques fundamentally suffer from intertwined deficiencies: insufficient robustness against malicious attacks, frequent refusal of benign queries, degradation in generated text quality and general task performance, the former two reflecting tensions in robust safety and the latter constituting utility impairment. We attribute these limitations to the coarse-grained layer-wise interventions in existing methods. To resolve this, we propose NeuronTune, a fine-grained framework that pinpoints and modulates sparse neurons to achieve simultaneous safety-utility optimization. Our approach first pinpoints safety-critical and utility-preserving neurons across all layers via attack-aware attribution, then adapts meta-learning to adaptively modulate their activations. Crucially, the intervention scope of NeuronTune is dynamically controlled via neuron inclusion thresholds, providing a flexible mechanism to prioritize either security-critical or utility-priority requirements. Extensive experimental results demonstrate that our method outperforms existing state-of-the-art technologies, achieving superior model safety while maintaining excellent utility.

Key facts. Cited by 4 papers in the map (data through 14 Oct 2026). Placed in Safety alignment and jailbreak attacks, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 26 of its 34 references that are in the map. First posted on arXiv 13 Aug 2025.

Builds on

26 of 34 references.

Closest ancestors · 5

Same direction, newest first

  1. 2024Controllable Safety Alignment: Inference-Time Adaptation to Diverse Safety Requirements11 Oct
  2. 2024SCANS: Mitigating the Exaggerated Safety for LLMs via Safety-Conscious Activation Steering21 Aug
  3. 2024Assessing the Brittleness of Safety Alignment via Pruning and Low-Rank Modifications7 Feb
  4. 2023Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM18 Sep
  5. 2023Universal and Transferable Adversarial Attacks on Aligned Language Models27 Jul

Other references · 21

  1. 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
  2. 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
  3. 2020Measuring Massive Multitask Language Understandingcited by 7,963
  4. 2023Efficient Memory Management for Large Language Model Serving with PagedAttentioncited by 5,944
  5. 2017Model-Agnostic Meta-Learning for Fast Adaptation of Deep Networkscited by 4,897
  6. 2024GPT-4o System Cardcited by 4,588
  7. 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
  8. 2023A Simple and Effective Pruning Approach for Large Language Modelscited by 800
  9. 2021Knowledge Neurons in Pretrained Transformerscited by 601
  10. 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 505
  11. 2023Safety-Tuned LLaMAs: Lessons From Improving the Safety of Large Language Models that Follow Instructionscited by 387
  12. 2023Finding Neurons in a Haystack: Case Studies with Sparse Probingcited by 334
9 more
  1. 2023The Unlocking Spell on Base LLMs: Rethinking Alignment via In-Context Learningcited by 257
  2. 2023Mitigating the Alignment Tax of RLHFcited by 183
  3. 2024Detoxifying Large Language Models via Knowledge Editingcited by 87
  4. 2023The Art of Defending: A Systematic Evaluation and Analysis of LLM Defense Strategies on Safety and Over-Defensivenesscited by 67
  5. 2024GUARD: Role-playing to Generate Natural-language Jailbreakings to Test Guideline Adherence of Large Language Modelscited by 48
  6. 2024Distract Large Language Models for Automatic Jailbreak Attackcited by 45
  7. 2024MedSafetyBench: Evaluating and Improving the Medical Safety of Large Language Modelscited by 44
  8. 2024IRCAN: Mitigating Knowledge Conflicts in LLM Generation via Identifying and Reweighting Context-Aware Neuronscited by 38
  9. 2025CAVGAN: Unifying Jailbreak and Defense of LLMs via Generative Adversarial Attacks on their Internal Representationscited by 5

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 4.

4 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026NeuronGuard: Robust LLM Safety Alignment via Ablation-Aware Safety Signal Redistribution
  2. 2025NeuroStrike: Neuron-Level Attacks on Aligned LLMs
  3. 2026NeST: Neuron Selective Tuning for LLM Safety
  4. 2025NeuRel-Attack: Neuron Relearning for Safety Disalignment in Large Language Models
  5. 2024NLSR: Neuron-Level Safety Realignment of Large Language Models Against Harmful Fine-Tuning
  6. 2026A Single Neuron Is Sufficient to Bypass Safety Alignment in Large Language Models
  7. 2026Understanding and Preserving Safety in Fine-Tuned LLMs
  8. 2024Towards Understanding Safety Alignment: A Mechanistic Perspective from Safety Neurons