Multilingual Safety Signals Are Multi-Layered: Filtering Safety-Degrading Data for Safer LLMs
On the map: LLM alignment / RLHF / preference optimisation → Safety alignment and jailbreak attacks
also in 1 more
Abstract (arXiv)
Preserving safety alignment during large language models fine-tuning is critical, however, recent studies have demonstrated that even benign fine-tuning data may contain safety-degrading samples that silently undermine safety alignment. Existing approaches typically identify such samples using representations from a single safety-sensitive layer. While this assumption has shown effectiveness in monolingual settings, its validity for multilingual models remains unclear due to potential cross-lingual differences in representation patterns. Through a cross-lingual analysis, we show that sensitive layers are only partially shared across languages, with safety-relevant signals often distributed across multiple layers. Motivated by these observations, we propose MMSAFE, a multi-layer framework for multilingual safety-degrading data identification that captures both shared and language-specific safety signals. Extensive experiments across multiple models, languages, and safety benchmarks demonstrate that MMSAFE reduces the average harmful-response ratio by 60% compared with random filtering and achieves stronger average performance than the strongest single-layer baseline, demonstrating the effectiveness of multi-layer modeling for robust multilingual safety alignment.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Safety alignment and jailbreak attacks, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 20 of its 29 references that are in the map. First posted on arXiv 26 Aug 2026.
Builds on
20 of 29 references.
Closest ancestors · 7
Same direction, newest first
- 2026Continual Safety Alignment via Gradient-Based Sample Selection19 Apr
- 2026Align Once, Benefit Multilingually: Enforcing Multilingual Consistency for LLM Safety Alignment18 Feb
- 2025Layer-Aware Representation Filtering: Purifying Finetuning Data to Preserve LLM Safety Alignment24 Jul
- 2024Towards Understanding Safety Alignment: A Mechanistic Perspective from Safety Neurons20 Jun
- 2024OR-Bench: An Over-Refusal Benchmark for Large Language Models31 May
- 2024Lisa: Lazy Safety Alignment for Large Language Models against Harmful Fine-tuning Attack28 May
- 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!5 Oct
Other references · 13
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2021Evaluating Large Language Models Trained on Codecited by 8,320
- 2023Let's Verify Step by Stepcited by 3,789
- 2024LiveCodeBench: Holistic and Contamination Free Evaluation of Large Language Models for Codecited by 2,004
- 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,429
- 2018XNLI: Evaluating Cross-lingual Sentence Representationscited by 915
- 2019MLQA: Evaluating Cross-lingual Extractive Question Answeringcited by 340
- 2024What is in Your Safe Data? Identifying Benign Data that Breaks Safetycited by 118
- 2024Covert Malicious Finetuning: Challenges in Safeguarding LLM Adaptationcited by 80
- 2024SEAL: Safety-enhanced Aligned LLM Fine-tuning via Bilevel Data Selectioncited by 64
- 2025PolyGuard: A Multilingual Safety Moderation Tool for 17 Languagescited by 59
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2023All Languages Matter: On the Multilingual Safety of Large Language Models
- 2026When Safety Speaks a Language: A Mechanistic Analysis of Safety-Language Identity Entanglement in LLMs
- 2025The Problem with Safety Classification is not just the Models
- 2026LLM Safety Alignment in Low-Resource Languages: A Systematic Literature Review
- 2025LinguaSafe: A Comprehensive Multilingual Safety Benchmark for Large Language Models
- 2025CREST: Universal Safety Guardrails Through Cluster-Guided Cross-Lingual Transfer
- 2026BabelSteering: Multilingual Safety Alignment via English Steering Vectors
- 2025The Hidden Space of Safety: Understanding Preference-Tuned LLMs in Multilingual context