mlsanityData to 14 Oct 2026

No Free Efficiency: Revisiting the Trade-off Between Training Efficiency and Model Vulnerability

arXiv 2609.33898 ↗First posted 27 Sep 2026cs.LG cs.CRcited by 0

Not on the map. Why?

Abstract (arXiv)

Training efficiency has become the central driver of recent progress in foundation models. To overcome the massive computational and data requirements of large-scale training, researchers increasingly adopt strategies such as selective data sampling, efficient pre-training, and simplified reinforcement learning pipelines. While these strategies drastically reduce overhead, they prompt a critical, yet neglected question: Is efficiency achieved at the expense of model robustness and security? To our knowledge, we present the first systematic cross-domain investigation of the efficiency-vulnerability trade-off. Across vision and language models, we show that efficiency-oriented training increases susceptibility to adversarial and privacy attacks. We characterize this vulnerability by analyzing the models' internal geometry and functional representations, demonstrating that the evaluated efficient variants consistently exhibit sharper loss geometry together with systematic changes in representational structure. We further extend our analysis to "zero RL training", finding that models trained using simplified RL recipes exhibit substantially greater susceptibility to catastrophic forgetting and more pronounced overconfidence than those trained through conventional alignment pipelines. Our findings suggest that training efficiency is rarely a "free lunch"; rather, the mechanisms that minimize computation can inadvertently compromise safety. We conclude by calling for a paradigm shift toward multi-objective training that jointly optimizes for performance, cost, and security.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 38 of its 46 references that are in the map. First posted on arXiv 27 Sep 2026.

Builds on

38 of 46 references.

References · 38

  1. 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
  2. 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 30,186
  3. 2022Training language models to follow instructions with human feedbackcited by 15,971
  4. 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
  5. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
  6. 2017On Calibration of Modern Neural Networkscited by 4,960
  7. 2017Deep reinforcement learning from human preferencescited by 3,912
  8. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
  9. 2019Similarity of Neural Network Representations Revisitedcited by 1,755
  10. 2017A Closer Look at Memorization in Deep Networkscited by 942
  11. 2023AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Modelscited by 785
  12. 2022Fine-Tuning can Distort Pretrained Features and Underperform Out-of-Distributioncited by 739
26 more
  1. 2017The Implicit Bias of Gradient Descent on Separable Datacited by 655
  2. 2019Data Shapley: Equitable Valuation of Data for Machine Learningcited by 629
  3. 2025Kimi K2: Open Agentic Intelligencecited by 567
  4. 2025SimpleRL-Zoo: Investigating and Taming Zero Reinforcement Learning for Open Base Models in the Wildcited by 511
  5. 2025Process Reinforcement through Implicit Rewardscited by 504
  6. 2018ML-Leaks: Model and Data Independent Membership Inference Attacks and Defenses on Machine Learning Modelscited by 498
  7. 2019Does Learning Require Memorization? A Short Tale about a Long Tailcited by 460
  8. 2021Large Language Models Can Be Strong Differentially Private Learnerscited by 412
  9. 2019Gradient Descent Maximizes the Margin of Homogeneous Neural Networkscited by 320
  10. 2020Systematic Evaluation of Privacy Risks of Machine Learning Modelscited by 292
  11. 2019Intrinsic dimension of data representations in deep neural networkscited by 282
  12. 2018Deep learning generalizes because the parameter-function map is biased towards simple functionscited by 183
  13. 2019Efficient Task-Specific Data Valuation for Nearest Neighbor Algorithmscited by 148
  14. 2019Privacy Risks of Securing Machine Learning Models against Adversarial Examplescited by 141
  15. 2019Adversarial Robustness vs Model Compression, or Both?cited by 98
  16. 2023Practical Membership Inference Attacks against Fine-tuned Large Language Models via Self-prompt Calibrationcited by 98
  17. 2025Reasoning Models Better Express Their Confidencecited by 65
  18. 2024Decoding Compressed Trust: Scrutinizing the Trustworthiness of Efficient LLMs Under Compressioncited by 57
  19. 2020Rethinking Parameter Counting in Deep Models: Effective Dimensionality Revisitedcited by 51
  20. 2023Gradient-based Parameter Selection for Efficient Fine-Tuningcited by 40
  21. 2023MathAttack: Attacking Large Language Models Towards Math Solving Abilitycited by 32
  22. 2024Beware of Calibration Data for Pruning Large Language Modelscited by 15
  23. 2025Fewer Weights, More Problems: A Practical Attack on LLM Pruningcited by 7
  24. 2025Pay Attention to the Triggers: Constructing Backdoors That Survive Distillationcited by 6
  25. 2024Understanding Data Importance in Machine Learning Attacks: Does Valuable Data Pose Greater Harm?cited by 5
  26. 2025The Easy Path to Robustness: Coreset Selection using Sample Hardnesscited by 1

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2026Unveiling the Backdoor Mechanism Hidden Behind Catastrophic Overfitting in Fast Adversarial Training
  2. 2026Why Some Models Resist Unlearning: A Linear Stability Perspective
  3. 2025Improving LLM Unlearning Robustness via Random Perturbations
  4. 2025Stable Forgetting: Bounded Parameter-Efficient Unlearning in Foundation Models
  5. 2025Beyond Sharp Minima: Robust LLM Unlearning via Feedback-Guided Multi-Point Optimization
  6. 2026Probing RLVR training instability through the lens of objective-level hacking
  7. 2026Robust LLM Unlearning Against Relearning Attacks: The Minor Components in Representations Matter
  8. 2026Can LLMs Truly Forget? Revealing Unlearning Gaps Through Adversarial Evaluation