跳到正文
arXiv cs.AI· Yuhao Sun, Zhuoer Xu, Shiwen Cui, Kun Yang, Lingyun Yu, Yongdong Zhang, Hongtao Xie·· 4 小时前AI 评分42

UpSafe°C 提出安全感知 Upcycling 框架增强大语言模型可控安全

UpSafe$^\circ$C: Upcycling for Controllable Safety in Large Language Models

AI 导读

UpSafe°C 框架通过识别 LLM 中的安全关键层并将其 upcycling 为稀疏 MoE 结构,让 router 作为软护栏选择性激活原始 MLP 与新增安全专家,再配合两阶段 SFT 策略。

正文 · 原文

View PDF HTML (experimental)

Abstract:Large Language Models (LLMs) have achieved remarkable progress across a wide range of tasks, but remain vulnerable to safety risks such as harmful content generation and jailbreak attacks. Existing safety techniques---including external guardrails, inference-time guidance, and post-training alignment---each face limitations in balancing safety, utility, and controllability. In this work, we propose UpSafe$^\circ$C, a unified framework for enhancing LLM safety through safety-aware upcycling. Our approach first identifies safety-critical layers and upcycles them into a sparse Mixture-of-Experts (MoE) structure, where the router acts as a soft guardrail that selectively activates original MLPs and added safety experts. We further introduce a two-stage SFT strategy to strengthen safety discrimination while preserving general capabilities. To enable flexible control at inference time, we introduce a safety temperature mechanism, allowing dynamic adjustment of the trade-off between safety and utility. Experiments across multiple benchmarks, base model, and model scales demonstrate that UpSafe$^\circ$C achieves robust safety improvements against harmful and jailbreak inputs, while maintaining competitive performance on general tasks. Moreover, analysis shows that safety temperature provides fine-grained inference-time control that achieves controllable trade-off between utility and safety. Our results highlight a new direction for LLM safety: moving from static alignment toward dynamic, modular, and inference-aware control. Code: this https URL.
Comments: Accepted by NeurIPS 2026
Subjects: Artificial Intelligence (cs.AI); Cryptography and Security (cs.CR); Machine Learning (cs.LG)
Cite as: arXiv:2510.02194 [cs.AI]
  (or arXiv:2510.02194v2 [cs.AI] for this version)
  https://doi.org/10.48550/arXiv.2510.02194

arXiv-issued DOI via DataCite

Submission history

From: Yuhao Sun [view email]
[v1] Thu, 2 Oct 2025 16:43:33 UTC (3,660 KB)
[v2] Wed, 4 Nov 2026 05:25:15 UTC (3,634 KB)

来源:arXiv cs.AI · arxiv.org