Improving Safety Alignment via Balanced Direct Preference Optimization
On the map: LLM alignment / RLHF / preference optimisation → Safety alignment and jailbreak attacks
Abstract (arXiv)
With the rapid development and widespread application of Large Language Models (LLMs), their potential safety risks have attracted widespread attention. Reinforcement Learning from Human Feedback (RLHF) has been adopted to enhance the safety performance of LLMs. As a simple and effective alternative to RLHF, Direct Preference Optimization (DPO) is widely used for safety alignment. However, safety alignment still suffers from severe overfitting, which limits its actual performance. This paper revisits the overfitting phenomenon from the perspective of the model's comprehension of the training data. We find that the Imbalanced Preference Comprehension phenomenon exists between responses in preference pairs, which compromises the model's safety performance. To address this, we propose Balanced Direct Preference Optimization (B-DPO), which adaptively modulates optimization strength between preferred and dispreferred responses based on mutual information. A series of experimental results show that B-DPO can enhance the safety capability while maintaining the competitive general capabilities of LLMs on various mainstream benchmarks compared to state-of-the-art methods. colorredWarning: This paper contains examples of harmful texts, and reader discretion is recommended.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in Safety alignment and jailbreak attacks, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 34 of its 38 references that are in the map. First posted on arXiv 24 Mar 2026.
Builds on
34 of 38 references.
Closest ancestors · 8
Same direction, newest first
- 2025SafeDPO: A Simple Approach to Direct Preference Optimization with Enhanced Safety26 May
- 2025Improving LLM Safety Alignment with Dual-Objective Optimization5 Mar
- 2025STAIR: Improving Safety Alignment with Introspective Reasoning4 Feb
- 2024Course-Correction: Safety Alignment Using Synthetic Preferences23 Jul
- 2024Safety Alignment Should Be Made More Than Just a Few Tokens Deep10 Jun
- 2023AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Models3 Oct
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Models27 Jul
- 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Dataset10 Jul
Other references · 26
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2017Proximal Policy Optimization Algorithmscited by 14,441
- 2025Qwen3 Technical Reportcited by 8,195
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2021Measuring Mathematical Problem Solving With the MATH Datasetcited by 5,203
- 2024Qwen2.5 Technical Reportcited by 4,713
- 2024Gemini 1.5: Unlocking multimodal understanding across millions of tokens of contextcited by 3,175
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 2,950
- 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,565
- 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,326
- 2021A General Language Assistant as a Laboratory for Alignmentcited by 1,023
- 2024SimPO: Simple Preference Optimization with a Reference-Free Rewardcited by 951
14 more
- 2024How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMscited by 533
- 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 477
- 2024Contrastive Preference Optimization: Pushing the Boundaries of LLM Performance in Machine Translationcited by 390
- 2024A StrongREJECT for Empty Jailbreakscited by 352
- 2024Measuring short-form factuality in large language modelscited by 345
- 2021Adversarial GLUE: A Multi-Task Benchmark for Robustness Evaluation of Language Modelscited by 227
- 2024Weak-to-Strong Jailbreaking on Large Language Modelscited by 100
- 2024Refuse Whenever You Feel Unsafe: Improving Safety in LLMs via Decoupled Refusal Trainingcited by 67
- 2024Speak Out of Turn: Safety Vulnerability of Large Language Models in Multi-turn Dialoguecited by 64
- 2025Reasoning-Augmented Conversation for Multi-Turn Jailbreak Attacks on Large Language Modelscited by 61
- 2025Jailbreaking Multimodal Large Language Models via Shuffle Inconsistencycited by 42
- 2024Leveraging the Context through Multi-Round Interactions for Jailbreaking Attackscited by 32
- 2024Heuristic-Induced Multimodal Risk Distribution Jailbreak Attack for Multimodal Large Language Modelscited by 29
- 2025Breaking the Ceiling: Exploring the Potential of Jailbreak Attacks through Expanding Strategy Spacecited by 15
Built on by
Citing papers per year: 2026: 1.
1 paper.
Similar, not cited
Close in wording, no citation either way
- 2026BSO: Safety Alignment Is Density Ratio Matching
- 2025Efficient Safety Alignment of Large Language Models via Preference Re-ranking and Representation-based Reward Modeling
- 2024Enhancing LLM Safety via Constrained Direct Preference Optimization
- 2025More is Less: The Pitfalls of Multi-Model Synthetic Preference Data in DPO Safety Alignment
- 2024Enhancing Safety in Reinforcement Learning with Human Feedback via Rectified Policy Optimization
- 2025Mitigating the Safety Alignment Tax with Null-Space Constrained Policy Optimization
- 2026Cat-DPO: Category-Adaptive Safety Alignment
- 2024One-Shot Safety Alignment for Large Language Models via Optimal Dualization