mlsanityData to 7 Oct 2026

UpSafe^circC: Upcycling for Controllable Safety in Large Language Models

arXiv 2510.02194 ↗First posted 2 Oct 2025cs.AI cs.CR cs.LGcited by 0

On the map: Mixture-of-experts → Expert routing strategies

also in 1 more
Abstract (arXiv)

Large Language Models (LLMs) have achieved remarkable progress across a wide range of tasks, but remain vulnerable to safety risks such as harmful content generation and jailbreak attacks. Existing safety techniques -- including external guardrails, inference-time guidance, and post-training alignment -- each face limitations in balancing safety, utility, and controllability. In this work, we propose UpSafe^circC, a unified framework for enhancing LLM safety through safety-aware upcycling. Our approach first identifies safety-critical layers and upcycles them into a sparse Mixture-of-Experts (MoE) structure, where the router acts as a soft guardrail that selectively activates original MLPs and added safety experts. We further introduce a two-stage SFT strategy to strengthen safety discrimination while preserving general capabilities. To enable flexible control at inference time, we introduce a safety temperature mechanism, allowing dynamic adjustment of the trade-off between safety and utility. Experiments across multiple benchmarks, base model, and model scales demonstrate that UpSafe^circC achieves robust safety improvements against harmful and jailbreak inputs, while maintaining competitive performance on general tasks. Moreover, analysis shows that safety temperature provides fine-grained inference-time control that achieves the Pareto-optimal frontier between utility and safety. Our results highlight a new direction for LLM safety: moving from static alignment toward dynamic, modular, and inference-aware control.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Expert routing strategies, one of 12 directions in Mixture-of-experts. Builds on 46 of its 58 references that are in the map. First posted on arXiv 2 Oct 2025.

Builds on

46 of 58 references.

Closest ancestors · 1

Same direction, newest first

  1. 2021Switch Transformers: Scaling to Trillion Parameter Models with Simple and Efficient Sparsity11 Jan

Other references · 45

  1. 2020Language Models are Few-Shot Learnerscited by 32,199
  2. 2023GPT-4 Technical Reportcited by 18,132
  3. 2022Training language models to follow instructions with human feedbackcited by 15,712
  4. 2024The Llama 3 Herd of Modelscited by 14,192
  5. 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,302
  6. 2021Evaluating Large Language Models Trained on Codecited by 8,053
  7. 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
  8. 2020Measuring Massive Multitask Language Understandingcited by 7,768
  9. 2020Scaling Laws for Neural Language Modelscited by 6,411
  10. 2025DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learningcited by 6,146
  11. 2023Let's Verify Step by Stepcited by 3,598
  12. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 2,914
33 more
  1. 2024Mixtral of Expertscited by 1,785
  2. 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,124
  3. 2022Red Teaming Language Models with Language Modelscited by 983
  4. 2021GLaM: Efficient Scaling of Language Models with Mixture-of-Expertscited by 890
  5. 2022Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learnedcited by 702
  6. 2024WildChat: 1M ChatGPT Interaction Logs in the Wildcited by 598
  7. 2024JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Modelscited by 494
  8. 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 477
  9. 2024Safety Alignment Should Be Made More Than Just a Few Tokens Deepcited by 450
  10. 2023Scalable Extraction of Training Data from (Production) Language Modelscited by 415
  11. 2023Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrationscited by 401
  12. 2022ST-MoE: Designing Stable and Transferable Sparse Expert Modelscited by 391
  13. 2024A StrongREJECT for Empty Jailbreakscited by 352
  14. 2022A Holistic Approach to Undesired Content Detection in the Real Worldcited by 337
  15. 2024SafeDecoding: Defending against Jailbreak Attacks via Safety-Aware Decodingcited by 233
  16. 2023LLM Self Defense: By Self Examination, LLMs Know They Are Being Trickedcited by 226
  17. 2023ToxicChat: Unveiling Hidden Challenges of Toxicity Detection in Real-World User-AI Conversationcited by 224
  18. 2022Sparse Upcycling: Training Mixture-of-Experts from Dense Checkpointscited by 207
  19. 2024WildTeaming at Scale: From In-the-Wild Jailbreaks to (Adversarially) Safer Language Modelscited by 206
  20. 2023MART: Improving LLM Safety with Multi-round Automatic Red-Teamingcited by 161
  21. 2025SafeChain: Safety of Language Models with Long Chain-of-Thought Reasoning Capabilitiescited by 133
  22. 2024Safety Layers in Aligned Large Language Models: The Key to LLM Securitycited by 126
  23. 2024Attacks, Defenses and Evaluations for LLM Conversation Safety: A Surveycited by 124
  24. 2023When MOE Meets LLMs: Parameter Efficient Fine-tuning for Multi-task Medical Applicationscited by 110
  25. 2024Curiosity-driven Red-teaming for Large Language Modelscited by 83
  26. 2025STAR-1: Safer Alignment of Reasoning LLMs with 1K Datacited by 67
  27. 2024How Large Language Models Encode Context Knowledge? A Layer-Wise Probing Studycited by 64
  28. 2023Unveiling the Implicit Toxicity in Large Language Modelscited by 51
  29. 2024Upcycling Large Language Models into Mixture of Expertscited by 48
  30. 2024Navigating the OverKill in Large Language Modelscited by 40
  31. 2025SafeKey: Amplifying Aha-Moment Insights for Safety Reasoningcited by 20
  32. 2024MoE-LPR: Multilingual Extension of Large Language Models through Mixture-of-Experts with Language Priors Routingcited by 16
  33. 2024MoGU: A Framework for Enhancing Safety of Open-Sourced LLMs While Preserving Their Usabilitycited by 14

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2025RSafe: Incentivizing proactive reasoning to build robust and adaptive LLM safeguards
  2. 2026HiRoute: Hierarchical Routed Prompt Tuning for Safety Alignment of Large Language Models
  3. 2025GateBreaker: Gate-Guided Attacks on Mixture-of-Expert LLMs
  4. 2025Noise Injection Systemically Degrades Large Language Model Safety Guardrails
  5. 2026Safety Paradox: How Enhanced Safety Awareness Leaves LLMs Vulnerable to Posterior Attack
  6. 2026CLEAR: Continuous Latent Adapter Routing for Utility-Preserving LLM Safety Alignment
  7. 2026Safe responses matter: Output-aware safety guardrail mitigate over-refusal in MLLMs
  8. 2025SafeMERGE: Preserving Safety Alignment in Fine-Tuned Large Language Models via Selective Layer-Wise Model Merging