UpSafe^circC: Upcycling for Controllable Safety in Large Language Models
On the map: Mixture-of-experts → Expert routing strategies
also in 1 more
Abstract (arXiv)
Large Language Models (LLMs) have achieved remarkable progress across a wide range of tasks, but remain vulnerable to safety risks such as harmful content generation and jailbreak attacks. Existing safety techniques -- including external guardrails, inference-time guidance, and post-training alignment -- each face limitations in balancing safety, utility, and controllability. In this work, we propose UpSafe^circC, a unified framework for enhancing LLM safety through safety-aware upcycling. Our approach first identifies safety-critical layers and upcycles them into a sparse Mixture-of-Experts (MoE) structure, where the router acts as a soft guardrail that selectively activates original MLPs and added safety experts. We further introduce a two-stage SFT strategy to strengthen safety discrimination while preserving general capabilities. To enable flexible control at inference time, we introduce a safety temperature mechanism, allowing dynamic adjustment of the trade-off between safety and utility. Experiments across multiple benchmarks, base model, and model scales demonstrate that UpSafe^circC achieves robust safety improvements against harmful and jailbreak inputs, while maintaining competitive performance on general tasks. Moreover, analysis shows that safety temperature provides fine-grained inference-time control that achieves the Pareto-optimal frontier between utility and safety. Our results highlight a new direction for LLM safety: moving from static alignment toward dynamic, modular, and inference-aware control.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Expert routing strategies, one of 12 directions in Mixture-of-experts. Builds on 46 of its 58 references that are in the map. First posted on arXiv 2 Oct 2025.
Builds on
46 of 58 references.
Closest ancestors · 1
Same direction, newest first
- 2021Switch Transformers: Scaling to Trillion Parameter Models with Simple and Efficient Sparsity11 Jan
Other references · 45
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2023GPT-4 Technical Reportcited by 18,132
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2024The Llama 3 Herd of Modelscited by 14,192
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,302
- 2021Evaluating Large Language Models Trained on Codecited by 8,053
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2020Measuring Massive Multitask Language Understandingcited by 7,768
- 2020Scaling Laws for Neural Language Modelscited by 6,411
- 2025DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learningcited by 6,146
- 2023Let's Verify Step by Stepcited by 3,598
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 2,914
33 more
- 2024Mixtral of Expertscited by 1,785
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,124
- 2022Red Teaming Language Models with Language Modelscited by 983
- 2021GLaM: Efficient Scaling of Language Models with Mixture-of-Expertscited by 890
- 2022Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learnedcited by 702
- 2024WildChat: 1M ChatGPT Interaction Logs in the Wildcited by 598
- 2024JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Modelscited by 494
- 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 477
- 2024Safety Alignment Should Be Made More Than Just a Few Tokens Deepcited by 450
- 2023Scalable Extraction of Training Data from (Production) Language Modelscited by 415
- 2023Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrationscited by 401
- 2022ST-MoE: Designing Stable and Transferable Sparse Expert Modelscited by 391
- 2024A StrongREJECT for Empty Jailbreakscited by 352
- 2022A Holistic Approach to Undesired Content Detection in the Real Worldcited by 337
- 2024SafeDecoding: Defending against Jailbreak Attacks via Safety-Aware Decodingcited by 233
- 2023LLM Self Defense: By Self Examination, LLMs Know They Are Being Trickedcited by 226
- 2023ToxicChat: Unveiling Hidden Challenges of Toxicity Detection in Real-World User-AI Conversationcited by 224
- 2022Sparse Upcycling: Training Mixture-of-Experts from Dense Checkpointscited by 207
- 2024WildTeaming at Scale: From In-the-Wild Jailbreaks to (Adversarially) Safer Language Modelscited by 206
- 2023MART: Improving LLM Safety with Multi-round Automatic Red-Teamingcited by 161
- 2025SafeChain: Safety of Language Models with Long Chain-of-Thought Reasoning Capabilitiescited by 133
- 2024Safety Layers in Aligned Large Language Models: The Key to LLM Securitycited by 126
- 2024Attacks, Defenses and Evaluations for LLM Conversation Safety: A Surveycited by 124
- 2023When MOE Meets LLMs: Parameter Efficient Fine-tuning for Multi-task Medical Applicationscited by 110
- 2024Curiosity-driven Red-teaming for Large Language Modelscited by 83
- 2025STAR-1: Safer Alignment of Reasoning LLMs with 1K Datacited by 67
- 2024How Large Language Models Encode Context Knowledge? A Layer-Wise Probing Studycited by 64
- 2023Unveiling the Implicit Toxicity in Large Language Modelscited by 51
- 2024Upcycling Large Language Models into Mixture of Expertscited by 48
- 2024Navigating the OverKill in Large Language Modelscited by 40
- 2025SafeKey: Amplifying Aha-Moment Insights for Safety Reasoningcited by 20
- 2024MoE-LPR: Multilingual Extension of Large Language Models through Mixture-of-Experts with Language Priors Routingcited by 16
- 2024MoGU: A Framework for Enhancing Safety of Open-Sourced LLMs While Preserving Their Usabilitycited by 14
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2025RSafe: Incentivizing proactive reasoning to build robust and adaptive LLM safeguards
- 2026HiRoute: Hierarchical Routed Prompt Tuning for Safety Alignment of Large Language Models
- 2025GateBreaker: Gate-Guided Attacks on Mixture-of-Expert LLMs
- 2025Noise Injection Systemically Degrades Large Language Model Safety Guardrails
- 2026Safety Paradox: How Enhanced Safety Awareness Leaves LLMs Vulnerable to Posterior Attack
- 2026CLEAR: Continuous Latent Adapter Routing for Utility-Preserving LLM Safety Alignment
- 2026Safe responses matter: Output-aware safety guardrail mitigate over-refusal in MLLMs
- 2025SafeMERGE: Preserving Safety Alignment in Fine-Tuned Large Language Models via Selective Layer-Wise Model Merging