NeuronTune: Fine-Grained Neuron Modulation for Balanced Safety-Utility Alignment in LLMs
On the map: LLM alignment / RLHF / preference optimisation → Safety alignment and jailbreak attacks
also in 1 more
Abstract (arXiv)
Ensuring robust safety alignment while preserving utility is critical for the reliable deployment of Large Language Models (LLMs). However, current techniques fundamentally suffer from intertwined deficiencies: insufficient robustness against malicious attacks, frequent refusal of benign queries, degradation in generated text quality and general task performance, the former two reflecting tensions in robust safety and the latter constituting utility impairment. We attribute these limitations to the coarse-grained layer-wise interventions in existing methods. To resolve this, we propose NeuronTune, a fine-grained framework that pinpoints and modulates sparse neurons to achieve simultaneous safety-utility optimization. Our approach first pinpoints safety-critical and utility-preserving neurons across all layers via attack-aware attribution, then adapts meta-learning to adaptively modulate their activations. Crucially, the intervention scope of NeuronTune is dynamically controlled via neuron inclusion thresholds, providing a flexible mechanism to prioritize either security-critical or utility-priority requirements. Extensive experimental results demonstrate that our method outperforms existing state-of-the-art technologies, achieving superior model safety while maintaining excellent utility.
Key facts. Cited by 4 papers in the map (data through 14 Oct 2026). Placed in Safety alignment and jailbreak attacks, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 26 of its 34 references that are in the map. First posted on arXiv 13 Aug 2025.
Builds on
26 of 34 references.
Closest ancestors · 5
Same direction, newest first
- 2024Controllable Safety Alignment: Inference-Time Adaptation to Diverse Safety Requirements11 Oct
- 2024SCANS: Mitigating the Exaggerated Safety for LLMs via Safety-Conscious Activation Steering21 Aug
- 2024Assessing the Brittleness of Safety Alignment via Pruning and Low-Rank Modifications7 Feb
- 2023Defending Against Alignment-Breaking Attacks via Robustly Aligned LLM18 Sep
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Models27 Jul
Other references · 21
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2020Measuring Massive Multitask Language Understandingcited by 7,963
- 2023Efficient Memory Management for Large Language Model Serving with PagedAttentioncited by 5,944
- 2017Model-Agnostic Meta-Learning for Fast Adaptation of Deep Networkscited by 4,897
- 2024GPT-4o System Cardcited by 4,588
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
- 2023A Simple and Effective Pruning Approach for Large Language Modelscited by 800
- 2021Knowledge Neurons in Pretrained Transformerscited by 601
- 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 505
- 2023Safety-Tuned LLaMAs: Lessons From Improving the Safety of Large Language Models that Follow Instructionscited by 387
- 2023Finding Neurons in a Haystack: Case Studies with Sparse Probingcited by 334
9 more
- 2023The Unlocking Spell on Base LLMs: Rethinking Alignment via In-Context Learningcited by 257
- 2023Mitigating the Alignment Tax of RLHFcited by 183
- 2024Detoxifying Large Language Models via Knowledge Editingcited by 87
- 2023The Art of Defending: A Systematic Evaluation and Analysis of LLM Defense Strategies on Safety and Over-Defensivenesscited by 67
- 2024GUARD: Role-playing to Generate Natural-language Jailbreakings to Test Guideline Adherence of Large Language Modelscited by 48
- 2024Distract Large Language Models for Automatic Jailbreak Attackcited by 45
- 2024MedSafetyBench: Evaluating and Improving the Medical Safety of Large Language Modelscited by 44
- 2024IRCAN: Mitigating Knowledge Conflicts in LLM Generation via Identifying and Reweighting Context-Aware Neuronscited by 38
- 2025CAVGAN: Unifying Jailbreak and Defense of LLMs via Generative Adversarial Attacks on their Internal Representationscited by 5
Built on by
Citing papers per year: 2026: 4.
4 papers.
- 2026SafeNeuron: Neuron-Level Safety Alignment for Large Language Modelscited by 10
- 2026SafeSeek: Universal Attribution of Safety Circuits in Language Modelscited by 4
- 2026Mask2Shield: Strengthening LLM Safety against Neuron-Pruning Attackscited by 0
- 2026Moving the Safety Barrier: Dynamic Routing Adaptive Alignment Against White-Box Attackscited by 0
- 2026Moving the Safety Barrier: Dynamic Routing Adaptive Alignment Against White-Box Attacks2 Aug 2026
- 2026Mask2Shield: Strengthening LLM Safety against Neuron-Pruning Attacks25 Jul 2026
- 2026SafeSeek: Universal Attribution of Safety Circuits in Language Models24 Mar 2026
- 2026SafeNeuron: Neuron-Level Safety Alignment for Large Language Models12 Feb 2026
Similar, not cited
Close in wording, no citation either way
- 2026NeuronGuard: Robust LLM Safety Alignment via Ablation-Aware Safety Signal Redistribution
- 2025NeuroStrike: Neuron-Level Attacks on Aligned LLMs
- 2026NeST: Neuron Selective Tuning for LLM Safety
- 2025NeuRel-Attack: Neuron Relearning for Safety Disalignment in Large Language Models
- 2024NLSR: Neuron-Level Safety Realignment of Large Language Models Against Harmful Fine-Tuning
- 2026A Single Neuron Is Sufficient to Bypass Safety Alignment in Large Language Models
- 2026Understanding and Preserving Safety in Fine-Tuned LLMs
- 2024Towards Understanding Safety Alignment: A Mechanistic Perspective from Safety Neurons