EASE: Practical and Efficient Safety Alignment for Small Language Models
On the map: LLM alignment / RLHF / preference optimisation → Safety alignment and jailbreak attacks
also in 1 more
Abstract (arXiv)
Small language models (SLMs) are increasingly deployed on edge devices, making their safety alignment crucial yet challenging. Current shallow alignment methods that rely on direct refusal of malicious queries fail to provide robust protection, particularly against adversarial jailbreaks. While deliberative safety reasoning alignment offers deeper alignment for defending against sophisticated attacks, effectively implanting such reasoning capability in SLMs with limited capabilities remains an open challenge. Moreover, safety reasoning incurs significant computational overhead as models apply reasoning to nearly all queries, making it impractical for resource-constrained edge deployment scenarios that demand rapid responses. We propose EASE, a novel framework that enables practical and Efficient safety Alignment for Small languagE models. Our approach first identifies the optimal safety reasoning teacher that can effectively distill safety reasoning capabilities to SLMs. We then align models to selectively activate safety reasoning for dangerous adversarial jailbreak queries while providing direct responses to straightforward malicious queries and general helpful tasks. This selective mechanism enables small models to maintain robust safety guarantees against sophisticated attacks while preserving computational efficiency for benign interactions. Experimental results demonstrate that EASE reduces jailbreak attack success rates by up to 17% compared to shallow alignment methods while reducing inference overhead by up to 90% compared to deliberative safety reasoning alignment, making it practical for SLMs real-world edge deployments.
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Placed in Safety alignment and jailbreak attacks, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 28 of its 45 references that are in the map. First posted on arXiv 9 Nov 2025.
Builds on
28 of 45 references.
Closest ancestors · 4
Same direction, newest first
- 2025Safety is Not Only About Refusal: Reasoning-Enhanced Fine-tuning for Interpretable LLM Safety6 Mar
- 2025STAIR: Improving Safety Alignment with Introspective Reasoning4 Feb
- 2024Safety Alignment Should Be Made More Than Just a Few Tokens Deep10 Jun
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Models27 Jul
Other references · 24
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2021Training Verifiers to Solve Math Word Problemscited by 10,109
- 2025DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learningcited by 6,330
- 2019HellaSwag: Can a Machine Really Finish Your Sentence?cited by 4,100
- 2023Let's Verify Step by Stepcited by 3,789
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,720
- 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,420
- 2024WildChat: 1M ChatGPT Interaction Logs in the Wildcited by 629
- 2023LMSYS-Chat-1M: A Large-Scale Real-World LLM Conversation Datasetcited by 461
- 2023What Makes Good Data for Alignment? A Comprehensive Study of Automatic Data Selection in Instruction Tuningcited by 364
- 2024Improving Alignment and Robustness with Circuit Breakerscited by 322
12 more
- 2024Deliberative Alignment: Reasoning Enables Safer Language Modelscited by 308
- 2024Chain of Thought Empowers Transformers to Solve Inherently Serial Problemscited by 260
- 2024Monte Carlo Tree Search Boosts Reasoning via Iterative Preference Learningcited by 241
- 2024MobileLLM: Optimizing Sub-billion Parameter Language Models for On-Device Use Casescited by 223
- 2024LLM Defenses Are Not Robust to Multi-Turn Human Jailbreaks Yetcited by 151
- 2025Small Models Struggle to Learn from Strong Reasonerscited by 113
- 2024Aligner: Efficient Alignment by Learning to Correctcited by 98
- 2024O1 Replication Journey -- Part 2: Surpassing O1-preview through Simple Distillation, Big Progress or Bitter Lesson?cited by 92
- 2025STAR-1: Safer Alignment of Reasoning LLMs with 1K Datacited by 68
- 2025How Should We Enhance the Safety of Large Reasoning Models: An Empirical Studycited by 18
- 2025Optimizing Small Language Models for In-Vehicle Function-Callingcited by 5
- 2025Can Small Language Models Reliably Resist Jailbreak Attacks? A Comprehensive Evaluationcited by 3
Built on by
Citing papers per year: 2026: 2.
2 papers.
- 2026Deliberative Alignment is Deep, but Uncertainty Remains: Inference time safety improvement in reasoning via attribution of unsafe behavior to base modelcited by 1
- 2026Compliance2LoRA: Personalizable On-Demand Safety Alignment on Arbitrary Policy Subsets via Hypernetwork-Generated LoRA Adapterscited by 0
- 2026Compliance2LoRA: Personalizable On-Demand Safety Alignment on Arbitrary Policy Subsets via Hypernetwork-Generated LoRA Adapters30 Jul 2026
- 2026Deliberative Alignment is Deep, but Uncertainty Remains: Inference time safety improvement in reasoning via attribution of unsafe behavior to base model1 Apr 2026
Similar, not cited
Close in wording, no citation either way
- 2025ARMOR: Aligning Secure and Safe Large Language Models via Meticulous Reasoning
- 2025Safety Alignment Can Be Not Superficial With Explicit Safety Signals
- 2025SABER: Uncovering Vulnerabilities in Safety Alignment via Cross-Layer Residual Connection
- 2024Jailbreak Antidote: Runtime Safety-Utility Balance via Sparse Representation Adjustment in Large Language Models
- 2025SAFER: Advancing Safety Alignment via Efficient Ex-Ante Reasoning
- 2024Safety Layers in Aligned Large Language Models: The Key to LLM Security
- 2024Reasoning as a Weapon: Adaptive Dual-Path Jailbreak Attack on Large Language Models
- 2026Safety Is Not Universal: The Selective Safety Trap in LLM Alignment