arXiv cs.AI· Yuhao Sun, Zhuoer Xu, Shiwen Cui, Kun Yang, Lingyun Yu, Yongdong Zhang, Hongtao Xie·· 11 小时前AI 评分34
UpSafe°C:通过 Upcycling 实现大语言模型可控安全
UpSafe$^\circ$C: Upcycling for Controllable Safety in Large Language Models
AI 导读
UpSafe°C 提出一种安全感知的 upcycling 框架,将安全关键层改造为稀疏 MoE 结构,由路由器作为软护栏选择性激活原始 MLP 与新增安全专家。该方法结合两阶段 SFT 与推理时"安全温度"机制,可动态调节安全与效用的权衡。多基准、多基座模型与多规模实验显示其在抵御有害及越狱输入上取得稳健安全提升,同时保持通用任务竞争力。
正文 · 原文
Abstract:Large Language Models (LLMs) have achieved remarkable progress across a wide range of tasks, but remain vulnerable to safety risks such as harmful content generation and jailbreak attacks. Existing safety techniques---including external guardrails, inference-time guidance, and post-training alignment---each face limitations in balancing safety, utility, and controllability. In this work, we propose UpSafe$^\circ$C, a unified framework for enhancing LLM safety through safety-aware upcycling. Our approach first identifies safety-critical layers and upcycles them into a sparse Mixture-of-Experts (MoE) structure, where the router acts as a soft guardrail that selectively activates original MLPs and added safety experts. We further introduce a two-stage SFT strategy to strengthen safety discrimination while preserving general capabilities. To enable flexible control at inference time, we introduce a safety temperature mechanism, allowing dynamic adjustment of the trade-off between safety and utility. Experiments across multiple benchmarks, base model, and model scales demonstrate that UpSafe$^\circ$C achieves robust safety improvements against harmful and jailbreak inputs, while maintaining competitive performance on general tasks. Moreover, analysis shows that safety temperature provides fine-grained inference-time control that achieves controllable trade-off between utility and safety. Our results highlight a new direction for LLM safety: moving from static alignment toward dynamic, modular, and inference-aware control. Code: this https URL.
| Comments: | Accepted by NeurIPS 2026 |
| Subjects: | Artificial Intelligence (cs.AI); Cryptography and Security (cs.CR); Machine Learning (cs.LG) |
| Cite as: | arXiv:2510.02194 [cs.AI] |
| (or arXiv:2510.02194v2 [cs.AI] for this version) | |
| https://doi.org/10.48550/arXiv.2510.02194 arXiv-issued DOI via DataCite |
Submission history
From: Yuhao Sun [view email]
[v1]
Thu, 2 Oct 2025 16:43:33 UTC (3,660 KB)
[v2]
Wed, 4 Nov 2026 05:25:15 UTC (3,634 KB)
来源:arXiv cs.AI · arxiv.org