跳到正文
arXiv cs.AI· Min-Seong Kim, Jongbok Won, Jeesup Park, Yonghee Choi, Dong-Jun Han·· 12 小时前AI 评分38

WSR-Tune:通过权重空间重参数化重思 LLM 微调,在下游适配中保持安全

Rethinking LLM Fine-Tuning via Weight Space Reparameterization: Preserving Safety during Downstream Adaptation

AI 导读

研究者提出 WSR-Tune,一种基于权重空间重参数化的 LLM 微调框架,通过构建安全条件基将安全相关信息集中到少数方向并冻结,从而在下游适配中同时保持安全性与任务性能。该方法在实验中获得更优的下游性能与安全保持权衡,论文已被 NeurIPS 2026 接收为 spotlight。

正文 · 原文

View PDF HTML (experimental)

Abstract:Fine-tuning large language models (LLMs) on downstream tasks often weakens their previously aligned safety behavior, creating an inherent trade-off between task adaptation and safety preservation. Existing approaches attempt to mitigate this issue by identifying safety-relevant neurons, layers, or update directions in the original parameter space. However, safety-related information is often distributed across many directions in this space, causing downstream updates to overwrite parameters that encode safety behavior. We propose WSR-Tune, a Weight Space Reparameterization-based fine-tuning framework that preserves safety during downstream adaptation. Our approach constructs a safety-conditioned basis and reparameterizes the weight matrices such that safety-relevant information becomes concentrated in a small subset of directions. We then identify safety-critical directions and freeze them in the reparameterized space, while updating the remaining complementary directions for downstream adaptation. By explicitly structuring the parameter space to disentangle safety and task information, our method reduces interference between objectives and enables simultaneous preservation of safety and improvement in downstream performance. Experimental results show that our method achieves a more favorable trade-off between downstream performance and safety retention, demonstrating its effectiveness for reliable LLM fine-tuning.
Comments: 32 pages, 5 figures. Accepted at NeurIPS 2026(spotlight)
Subjects: Machine Learning (cs.LG); Artificial Intelligence (cs.AI)
Cite as: arXiv:2610.26443 [cs.LG]
  (or arXiv:2610.26443v2 [cs.LG] for this version)
  https://doi.org/10.48550/arXiv.2610.26443

arXiv-issued DOI via DataCite

Submission history

From: Minseong Kim [view email]
[v1] Mon, 19 Oct 2026 14:02:31 UTC (2,260 KB)
[v2] Tue, 20 Oct 2026 05:28:24 UTC (2,260 KB)

来源:arXiv cs.AI · arxiv.org