mlsanityData to 14 Oct 2026

A Systematic Study of Training-Free Methods for Trustworthy Large Language Models

arXiv 2604.15789 ↗First posted 17 Apr 2026cs.CLcited by 0

Not on the map. Why?

Abstract (arXiv)

As Large Language Models (LLMs) receive increasing attention and are being deployed across various domains, their potential risks, including generating harmful or biased content, producing unsupported claims, and exhibiting vulnerabilities to adversarial attacks, have drawn significant attention. To enable quick and low-cost adaptation, training-free methods have recently emerged as cost-effective alternatives to post-training alignment techniques. Despite their promising results, these methods are evaluated inconsistently across the literature, cover limited dimensions of trustworthiness, and can introduce undesirable side effects, such as utility degradation and increased brittleness. To fully assess the impacts of these training-free methods, we take a step back and systematically re-evaluate the effectiveness of existing training-free methods against various trustworthy settings and their influence on utility, robustness, and computational overhead. We also categorize these methods into three levels (input, internal, and output) based on where they intervene in the model's information flow during inference. Using this taxonomy, we conduct a comprehensive analysis of various representative and effective methods from each level across different LLM families and sizes. Our analysis highlights several trade-offs and unresolved challenges in current approaches. We summarize key findings and limitations in the existing literature, and propose practical recommendations for balancing trustworthiness, utility, and robustness in LLMs without the need for additional training.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 49 of its 56 references that are in the map. First posted on arXiv 17 Apr 2026.

Builds on

49 of 56 references.

References · 49

  1. 2020Language Models are Few-Shot Learnerscited by 32,419
  2. 2022Training language models to follow instructions with human feedbackcited by 15,971
  3. 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,380
  4. 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,626
  5. 2020Measuring Massive Multitask Language Understandingcited by 7,963
  6. 2017Deep reinforcement learning from human preferencescited by 3,912
  7. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
  8. 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
  9. 2019The Curious Case of Neural Text Degenerationcited by 2,916
  10. 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,429
  11. 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,420
  12. 2023Steering Llama 2 via Contrastive Activation Additioncited by 1,085
37 more
  1. 2022Red Teaming Language Models with Language Modelscited by 1,026
  2. 2022Mass-Editing Memory in a Transformercited by 1,001
  3. 2023A Watermark for Large Language Modelscited by 725
  4. 2021BBQ: A Hand-Built Bias Benchmark for Question Answeringcited by 701
  5. 2023DecodingTrust: A Comprehensive Assessment of Trustworthiness in GPT Modelscited by 518
  6. 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 505
  7. 2023Jailbreaking ChatGPT via Prompt Engineering: An Empirical Studycited by 498
  8. 2023"Do Anything Now": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Modelscited by 489
  9. 2023Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrationscited by 431
  10. 2023Larger language models do in-context learning differentlycited by 394
  11. 2023DoLa: Decoding by Contrasting Layers Improves Factuality in Large Language Modelscited by 376
  12. 2023Provable Robust Watermarking for AI-Generated Textcited by 299
  13. 2023LLM Self Defense: By Self Examination, LLMs Know They Are Being Trickedcited by 244
  14. 2024Programming Refusal with Conditional Activation Steeringcited by 206
  15. 2023Defending Large Language Models Against Jailbreaking Attacks Through Goal Prioritizationcited by 170
  16. 2023RAIN: Your Language Models Can Align Themselves without Finetuningcited by 157
  17. 2023Who Wrote this Code? Watermarking for Code Generationcited by 141
  18. 2024JailbreakRadar: Comprehensive Assessment of Jailbreak Attacks Against LLMscited by 95
  19. 2024InferAligner: Inference-Time Alignment for Harmlessness through Cross-Model Guidancecited by 83
  20. 2023Alleviating Hallucinations of Large Language Models through Induced Hallucinationscited by 79
  21. 2023Publicly-Detectable Watermarking for Language Modelscited by 76
  22. 2024Intention Analysis Makes LLMs A Good Jailbreak Defendercited by 74
  23. 2025Steering Large Language Model Activations in Sparse Spacescited by 58
  24. 2024Spectral Editing of Activations for Large Language Model Alignmentcited by 56
  25. 2024DeAL: Decoding-time Alignment for Large Language Modelscited by 55
  26. 2024SCANS: Mitigating the Exaggerated Safety for LLMs via Safety-Conscious Activation Steeringcited by 50
  27. 2024Surgical, Cheap, and Flexible: Mitigating False Refusal in Language Models via Single Vector Ablationcited by 48
  28. 2024Navigating the OverKill in Large Language Modelscited by 44
  29. 2025AdaSteer: Your Aligned LLM is Inherently an Adaptive Jailbreak Defendercited by 38
  30. 2024Model Editing as a Robust and Denoised variant of DPO: A Case Study on Toxicitycited by 35
  31. 2024ROSE Doesn't Do That: Boosting the Safety of Instruction-Tuned Large Language Models with Reverse Prompt Contrastive Decodingcited by 32
  32. 2024Break the Breakout: Reinventing LM Defense Against Jailbreak Attacks with Self-Refinementcited by 29
  33. 2024DeCoRe: Decoding by Contrasting Retrieval Heads to Mitigate Hallucinationscited by 25
  34. 2024Jailbreak Antidote: Runtime Safety-Utility Balance via Sparse Representation Adjustment in Large Language Modelscited by 23
  35. 2024Towards Inference-time Category-wise Safety Steering for Large Language Modelscited by 18
  36. 2025Why Not Act on What You Know? Unleashing Safety Potential of LLMs via Self-Aware Guard Enhancementcited by 8
  37. 2024Enhancing Multiple Dimensions of Trustworthiness in LLMs via Sparse Activation Controlcited by 5

Built on by

Not cited yet.