SEAL: Safety-enhanced Aligned LLM Fine-tuning via Bilevel Data Selection
About
Fine-tuning on task-specific data to boost downstream performance is a crucial step for leveraging Large Language Models (LLMs). However, previous studies have demonstrated that fine-tuning the models on several adversarial samples or even benign data can greatly comprise the model's pre-equipped alignment and safety capabilities. In this work, we propose SEAL, a novel framework to enhance safety in LLM fine-tuning. SEAL learns a data ranker based on the bilevel optimization to up rank the safe and high-quality fine-tuning data and down rank the unsafe or low-quality ones. Models trained with SEAL demonstrate superior quality over multiple baselines, with 8.5% and 9.7% win rate increase compared to random selection respectively on Llama-3-8b-Instruct and Merlinite-7b models. Our code is available on github https://github.com/hanshen95/SEAL.
Related benchmarks
| Task | Dataset | Result | Rank | |
|---|---|---|---|---|
| Commonsense Reasoning | HellaSwag | Accuracy58.09 | 1896 | |
| Multitask Language Understanding | MMLU | Accuracy63.09 | 520 | |
| Safety Evaluation | HEX-PHI | HEx-PHI Score68.83 | 162 | |
| Safety Evaluation | HarmBench | ASR9 | 148 | |
| Safety Evaluation | HEX-PHI | Attack Success Rate (ASR)6.9 | 87 | |
| Safety Evaluation | DirectHarm 4 | Attack Success Rate16.25 | 87 | |
| Jailbreak attack success rate | HarmBench | Attack Success Rate (Generated)65.5 | 52 | |
| Attack Success Rate | DirectHarm4 | Attack Success Rate71.75 | 48 | |
| Attack Success Rate | HEX-PHI | Attack Success Rate6.55 | 48 | |
| Safety Evaluation | HarmBench | ASR9.5 | 39 |